diff --git a/ente/config/bucket-cors-policy.json b/ente/config/bucket-cors-policy.json
new file mode 100644
index 0000000..532be6d
--- /dev/null
+++ b/ente/config/bucket-cors-policy.json
@@ -0,0 +1,22 @@
+{
+  "CORSRules": [
+    {
+      "AllowedOrigins": ["https://ente.icb4dc0.de"],
+      "AllowedMethods": ["GET", "PUT", "POST"],
+      "AllowedHeaders": [
+        "Authorization",
+        "Content-Type",
+        "x-amz-date",
+        "x-amz-content-sha256",
+        "x-amz-user-agent"
+      ],
+      "ExposeHeaders": [
+        "x-amz-server-side-encryption",
+        "x-amz-request-id",
+        "x-amz-id-2",
+        "ETag"
+      ],
+      "MaxAgeSeconds": 600
+    }
+  ]
+}
diff --git a/ente/config/credentials.yaml b/ente/config/credentials.yaml
index 127715f..3de3102 100644
Binary files a/ente/config/credentials.yaml and b/ente/config/credentials.yaml differ