diff --git a/index.js b/index.js
index 3884d65..bca6c32 100644
--- a/index.js
+++ b/index.js
@@ -5,6 +5,7 @@ const fileUpload = require('express-fileupload');
 const path = require('path');
 const fs = require('fs');
 const mime = require('mime-types')
+const cors = require('cors');
 
 const app = express();
 
@@ -61,10 +62,22 @@ const getFileType = (filename) => {
     return type;
 };
 
+const allowlist = ['https://files.hippoz.xyz', 'https://hippoz.xyz']
+const corsOptions = {
+    origin: function (origin, callback) {
+        if (whitelist.indexOf(origin) !== -1) {
+                callback(null, true)
+        } else {
+            callback(new Error('Not allowed by CORS'))
+        }
+    }
+}
 
+app.use('*', cors(corsOptions));
 
 app.get('/', (req, res) => {
-    res.render('upload');
+    // res.render('upload');
+    res.redirect(config.url);
 });