CORS & Access-Control-Allow-Origin must not be wildcard

Do you have any examples on how to do this? there’s not a lot in the documentation of kirby about this remote feature, and I feel like I should know more about PHP to understand what is going on! I have no backend experience. I’m getting by with kirby by following the guides!