尽管设置了 DISCOURSE_ENABLE_CORS: true，但没有出现 'Access-Control-Allow-Origin' 标头

[xprmnts]

And for our single site setup setting origin in .yml vs. the admin ui should have the same effect per: What is the purpose of Settings -> Security -> CORS origins vs similar environment setting?