diff --git a/config/docker/cors.yml b/config/docker/cors.yml
new file mode 100644
index 0000000000..9d76fc9fae
--- /dev/null
+++ b/config/docker/cors.yml
@@ -0,0 +1,24 @@
+cors: &default
+  enabled: false
+  allow:
+  - origins: '*'
+    resources:
+    - !ruby/regexp /\.(?:woff2?|otf|ttf|svg|eot)$/
+    headers: 'x-requested-with'
+    methods: :get
+    max_age: 3628800
+    credentials: false
+
+development:
+  <<: *default
+
+test:
+  <<: *default
+
+production:
+  <<: *default
+  enabled: true
+
+preview:
+  <<: *default
+  enabled: true