diff --git a/synapse/main.yaml b/synapse/main.yaml
index fb6fe01..d760671 100644
--- a/synapse/main.yaml
+++ b/synapse/main.yaml
@@ -16,8 +16,9 @@ data:
     Metrics ###\n\nenable_metrics: true\n\n## Signing Keys ##\n\nsigning_key_path:
     \"/synapse/keys/signing.key\"\n\n# The trusted servers to download signing keys
     from.\ntrusted_key_servers:\n  - server_name: matrix.org\n\n## Workers ##\n\n##
-    Extra config ##\n\noidc_providers:\n- client_id: synapse\n  client_secret: DOXPkkV2TUvgBBoQL4gng9e1pUvZeIFo\n
-    \ idp_id: keycloak\n  idp_name: Born In Pain\n  issuer: https://iam.borninpain.de/realms/home\n
+    Extra config ##\n\nadditional_headers:\n  Access-Control-Allow-Origin:\n  - https://element.borninpain.de\noidc_providers:\n-
+    client_id: synapse\n  client_secret: DOXPkkV2TUvgBBoQL4gng9e1pUvZeIFo\n  idp_id:
+    keycloak\n  idp_name: Born In Pain\n  issuer: https://iam.borninpain.de/realms/home\n
     \ scopes:\n  - openid\n  - profile\n  user_mapping_provider:\n    config:\n      display_name_template:
     '{{ user.name }}'\n      localpart_template: '{{ user.preferred_username }}'\n"
   log.yaml: |
@@ -62,7 +63,7 @@ metadata:
     helm.sh/chart: matrix-synapse-3.12.7
   name: synapse-matrix-synapse
 stringData:
-  config.yaml: "## Registration ##\n\nregistration_shared_secret: \"SKcfx9KLLWnL5CyGvfvn87yk\"\n\n##
+  config.yaml: "## Registration ##\n\nregistration_shared_secret: \"sQfNsmtwiGCbuhP3XuR3EZUB\"\n\n##
     API Configuration ##\n\n## Database configuration ##\n\ndatabase:\n  name: \"psycopg2\"\n
     \ args:\n    user: \"synapse\"\n    password: \"@@POSTGRES_PASSWORD@@\"\n    database:
     \"synapse\"\n    host: \"synapse-postgresql\"\n    port: 5432\n    sslmode: \"prefer\"\n
@@ -207,8 +208,8 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: f0c14e48065c94b77e73aa547685e25f4a41dccba3c433852ca1da71b2dabac9
-        checksum/secrets: 3390076c10c516d4a40cbbf2bbc7a3089008992f5461e23bdfba84a33b6ab6af
+        checksum/config: 9c61c9bf443470644e1b27aa0b359e5985870a59151799de3b979ced6d1da6a3
+        checksum/secrets: 58c347eb4f9d27fec706bcd9a464685d9d43c27b721a458f5ccc84616106b5b4
       labels:
         app.kubernetes.io/component: synapse
         app.kubernetes.io/instance: synapse
diff --git a/synapse/src/values.yaml b/synapse/src/values.yaml
index 4ca00d3..08b55c0 100644
--- a/synapse/src/values.yaml
+++ b/synapse/src/values.yaml
@@ -192,6 +192,8 @@ extraConfig:
         config:
           localpart_template: "{{ user.preferred_username }}"
           display_name_template: "{{ user.name }}"
+  additional_headers:
+      Access-Control-Allow-Origin: ["https://element.borninpain.de"]
 
 #  old_signing_keys:
 #    "ed25519:id": { key: "base64string", expired_ts: 123456789123 }