CORS & CSRF settings for SSR

Hi!

I am using NextJS alongside Payload for my website.

I am using the app directory and as such a lot of my data fetching happens serverside.

When I am running locally, next runs on

and payload runs on

When running in production they are in sibling docker-compose containers. This means that they can send requests to each other using

and

respectively.

How would I set up my config to allow for serverside requests. I have only tried in dev so far and have tried passing

to both the

and

properties, as well as trying the wildcard option.

I consistently get a 403 Forbidden error when trying to fetch data.

Thanks in advance!