By default, Trilium cannot be accessed in web browsers by requests coming from other domains/origins than Trilium itself.

However, it is possible to manually configure Cross-Origin Resource Sharing (CORS) since Trilium v0.93.0 using environment variables or `config.ini`, as follows:

CORS Header | Corresponding environment variable | Corresponding option in `config.ini` variables in the `Network` section
--- | --- | ---
`Access-Control-Allow-Origin` | `TRILIUM_NETWORK_CORS_ALLOW_ORIGIN` | `corsAllowOrigin`
`Access-Control-Allow-Methods` | `TRILIUM_NETWORK_CORS_ALLOW_METHODS` | `corsAllowMethods`
`Access-Control-Allow-Headers` | `TRILIUM_NETWORK_CORS_ALLOW_HEADERS` | `corsAllowHeaders`