Understand why CORS must be allowed
OmniFlows runs inside a browser extension, so its requests come from a chrome-extension:// origin. Browsers block that origin from calling http://localhost:11434 unless Ollama explicitly allows it.
- OLLAMA_ORIGINS tells Ollama which browser origins are trusted.
- chrome-extension://* allows OmniFlows and other browser extensions to call Ollama.
- http://localhost:* and http://127.0.0.1:* allow local development pages or tools to use the same Ollama service.