fix: allow changes in CORS settings (#100)

Signed-off-by: Michele Dolfi <dol@zurich.ibm.com>

docling_serve/app.py

@@ -122,9 +122,9 @@ def create_app():  # noqa: C901
         version=version,
     )
 
-    origins = ["*"]
-    methods = ["*"]
-    headers = ["*"]
+    origins = docling_serve_settings.cors_origins
+    methods = docling_serve_settings.cors_methods
+    headers = docling_serve_settings.cors_headers
 
     app.add_middleware(
         CORSMiddleware,

docling_serve/settings.py

@@ -32,6 +32,10 @@ class DoclingServeSettings(BaseSettings):
     artifacts_path: Optional[Path] = None
     options_cache_size: int = 2
 
+    cors_origins: list[str] = ["*"]
+    cors_methods: list[str] = ["*"]
+    cors_headers: list[str] = ["*"]
+
     eng_kind: AsyncEngine = AsyncEngine.LOCAL
     eng_loc_num_workers: int = 2