diff --git a/README.md b/README.md
index 13920f8..3a5a7ee 100644
--- a/README.md
+++ b/README.md
@@ -10,4 +10,5 @@ _**⚠️ AdventureLog is in early development and is not recommended for produc
 2. Edit the `docker-compose.yml` file and change the database password
 3. Run `docker compose up -d` to build the image and start the container
 4. Wait for the app to start up and migrate then visit the port and enjoy!
+**Note**: The `ORIGIN` variable is required for CSRF protection. It can be omitted if using a reverse proxy or other HTTPS service.