diff --git a/ptcoffee/settings.py b/ptcoffee/settings.py
index 049b48f..1c1c3f2 100644
--- a/ptcoffee/settings.py
+++ b/ptcoffee/settings.py
@@ -174,9 +174,10 @@ SECURE_SSL_REDIRECT = env.bool('SECURE_SSL_REDIRECT', False)
 CSRF_COOKIE_SECURE = env.bool('CSRF_COOKIE_SECURE', False)
 SECURE_CROSS_ORIGIN_OPENER_POLICY = 'same-origin-allow-popups'
 FILE_UPLOAD_MAX_MEMORY_SIZE = 60000000
-CSRF_TRUSTED_ORIGINS = [
-    'https://ptcoffee-dev.windmillapps.org'
-]
+CSRF_TRUSTED_ORIGINS = env.list(
+    'CSRF_TRUSTED_ORIGINS',
+    ['https://ptcoffee-dev.windmillapps.org']
+)
 
 
 # Password validation