diff --git a/docker-compose.yml b/docker-compose.yml
index 076d807..39fc529 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -42,7 +42,7 @@ services:
       traefik.http.routers.to-conduit.tls: true
       traefik.http.routers.to-conduit.tls.certresolver: letsencrypt
       traefik.http.routers.to-conduit.middlewares: cors-headers@docker
-      traefik.http.middlewares.cors-headers.headers.accessControlAllowOriginList: *
+      traefik.http.middlewares.cors-headers.headers.accessControlAllowOriginList: '*'
       traefik.http.middlewares.cors-headers.headers.accessControlAllowHeaders: Origin, X-Requested-With, Content-Type, Accept, Authorization
       traefik.http.middlewares.cors-headers.headers.accessControlAllowMethods: GET, POST, PUT, DELETE, OPTIONS
 
@@ -63,7 +63,7 @@ services:
       traefik.http.routers.to-matrix-wellknown.tls: true
       traefik.http.routers.to-matrix-wellknown.tls.certresolver: letsencrypt
       traefik.http.routers.to-matrix-wellknown.middlewares: cors-headers@docker
-      traefik.http.middlewares.cors-headers.headers.accessControlAllowOriginList: *
+      traefik.http.middlewares.cors-headers.headers.accessControlAllowOriginList: '*'
       traefik.http.middlewares.cors-headers.headers.accessControlAllowHeaders: Origin, X-Requested-With, Content-Type, Accept, Authorization
       traefik.http.middlewares.cors-headers.headers.accessControlAllowMethods: GET, POST, PUT, DELETE, OPTIONS