diff --git a/ruoyi-ui/.env.staging b/ruoyi-ui/.env.staging
index 97026114af..1eeaa89477 100644
--- a/ruoyi-ui/.env.staging
+++ b/ruoyi-ui/.env.staging
@@ -4,4 +4,4 @@ NODE_ENV = production
 ENV = 'staging'
 
 # 芋道管理系统/测试环境
-VUE_APP_BASE_API = 'http://api.ruoyi-vue-pro.iocoder.cn/stage-api'
+VUE_APP_BASE_API = 'http://api-dashboard.yudao.iocoder.cn'
diff --git a/src/main/java/cn/iocoder/dashboard/framework/security/config/SecurityConfiguration.java b/src/main/java/cn/iocoder/dashboard/framework/security/config/SecurityConfiguration.java
index 2898023e21..e3b8278bf2 100644
--- a/src/main/java/cn/iocoder/dashboard/framework/security/config/SecurityConfiguration.java
+++ b/src/main/java/cn/iocoder/dashboard/framework/security/config/SecurityConfiguration.java
@@ -114,6 +114,8 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
     @Override
     protected void configure(HttpSecurity httpSecurity) throws Exception {
         httpSecurity
+                // 开启跨域
+                .cors().and()
                 // CSRF 禁用，因为不使用 Session
                 .csrf().disable()
                 // 基于 token 机制，所以不需要 Session
diff --git a/src/main/resources/application.yaml b/src/main/resources/application.yaml
index 6be75132a8..f11c9b8892 100644
--- a/src/main/resources/application.yaml
+++ b/src/main/resources/application.yaml
@@ -3,7 +3,7 @@ spring:
     name: dashboard
 
   profiles:
-    active: dev
+    active: local
 
   # Servlet 配置
   servlet: