How do I fix this CORS issue when AppWrite and my application are on different servers?

When I visit my appliation via 165.232.32.238:3000 and I try and login I get this:

Access to XMLHttpRequest at 'http://167.99.207.160/v1/account/sessions/email' from origin 'http://165.232.32.238:3000' has been blocked by CORS policy: The 'Access-Control-Allow-Origin' header has a value 'http://localhost:3000' that is not equal to the supplied origin.
login-7c5fe77fbaa93a15.js:1 Network request failed
_app-b34275639937d04b.js:1 POST http://167.99.207.160/v1/account/sessions/email net::ERR_FAILED 403 (Forbidden)

I don't understand why it is saying localhost?

Also, when I go into my AppWrite instance which is on 167.99.207.160 and I try and add a custom domain I get "unreachable CNAME target (localhost). Please check the _APP_DOMAIN_TARGET environment variable of your AppWrite server.

I asked ChatGPT to see if it could help and it suggested:

1. Fixing the CORS Issue:
   You need to configure AppWrite to allow requests from http://165.232.32.238:3000 (and later from http://www.growthpathways.co.uk once your domain is set up).

Update Allowed Origins:

Go to the AppWrite Dashboard > Settings and add http://165.232.32.238:3000 to the list of allowed origins.

But there is no list of allowed origins, only the custom domain, which results in the error message above.

Is there an env I need to edit or something?

In your project overview page add platform Web

Inside that you can add your server IP / domain

You can add as many as needed

Where is the setting?

I have my platform added as a web platform:

You've added the as 165.232.32.238 Web app?

Ah I must have had it set up as localhost, as I've only now deployed to live

can I change it or am I going to have to reset up all the databases?

Yes it's changeable

And, you can add, delete and edit

Excellent - thank you for you swift help - very much appreciated!!