diff --git a/CLAUDE.md b/CLAUDE.md
index 8e4568e..20985ea 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -114,4 +114,34 @@ Tests use comprehensive mocking to prevent external connections:
 
 ## Deployment
 
-The application supports Kubernetes deployment with manifests in `k8s/` directory and GitHub Actions CI/CD pipeline. Database migrations run automatically via init containers.
\ No newline at end of file
+The application supports Kubernetes deployment with manifests in `k8s/` directory and GitHub Actions CI/CD pipeline. Database migrations run automatically via init containers.
+
+### Kubernetes Commands
+
+The app is deployed in a k3s cluster with the following structure:
+- **App name**: `aprs`
+- **Namespace**: `aprs`
+
+Common kubectl commands for debugging:
+```bash
+# Check pod status
+kubectl get pods -n aprs
+
+# Get logs from the app
+kubectl logs -f deployment/aprs -n aprs
+
+# Get logs from a specific pod
+kubectl logs <pod-name> -n aprs
+
+# Describe pod for events and details
+kubectl describe pod <pod-name> -n aprs
+
+# Restart the deployment
+kubectl rollout restart deployment/aprs -n aprs
+
+# Check deployment status
+kubectl rollout status deployment/aprs -n aprs
+
+# Execute commands in the pod
+kubectl exec -it deployment/aprs -n aprs -- /app/bin/aprsme remote
+```
\ No newline at end of file
diff --git a/config/runtime.exs b/config/runtime.exs
index b7ada22..8009f63 100644
--- a/config/runtime.exs
+++ b/config/runtime.exs
@@ -107,10 +107,12 @@ if config_env() == :prod do
     check_origin: [
       "https://#{host}",
       "http://10.0.19.222:33897",
-      "*.aprs.me",
+      "https://aprs.me",
+      "https://www.aprs.me",
       "https://js.sentry-cdn.com",
-      "*.sentry.io",
-      "*.openstreetmap.org"
+      "https://sentry.io",
+      "https://www.openstreetmap.org",
+      "https://tile.openstreetmap.org"
     ]
 
   # Optional: Set the default "from" email address