diff --git a/server/server.js b/server/server.js
index 99b433b..114f189 100644
--- a/server/server.js
+++ b/server/server.js
@@ -12,7 +12,8 @@ await connectDB();
 
 const allowedOrigins = [
 	process.env.SERVER_EXT_ACCESS,
-	process.env.SERVER_INT_ACCESS
+	process.env.SERVER_INT_ACCESS,
+	'capacitor://localhost',
 ];
 
 await fastify.register(cors, {
@@ -22,7 +23,7 @@ await fastify.register(cors, {
 });
 
 await fastify.register(jwt, {
-	secret: JWT_SECRET
+	secret: process.env.JWT_SECRET
 });
 
 fastify.decorate('authenticate', async function (req, reply) {