diff --git a/matsen-tool/.htaccess b/matsen-tool/.htaccess
index dfaebeb..be1dad9 100644
--- a/matsen-tool/.htaccess
+++ b/matsen-tool/.htaccess
@@ -1,4 +1,10 @@
 <IfModule mod_rewrite.c>
+    # PHP Upload Settings
+    php_value upload_max_filesize 10M
+    php_value post_max_size 10M
+    php_value max_execution_time 300
+    php_value max_input_time 300
+
     RewriteEngine On
     RewriteBase /
 
@@ -7,4 +13,14 @@
     RewriteCond %{REQUEST_FILENAME} !-f
     RewriteCond %{REQUEST_FILENAME} !-d
     RewriteRule ^ index.html [L]
+
+    # Erlaubt OPTIONS für CORS pre-flight requests
+    RewriteCond %{REQUEST_METHOD} OPTIONS
+    RewriteRule ^(.*)$ $1 [R=200,L]
+
+    # Content-Type Header erlauben
+    <IfModule mod_headers.c>
+        Header always set Access-Control-Allow-Headers "Content-Type, Authorization"
+        Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS, DELETE, PUT, PATCH"
+    </IfModule>
 </IfModule>
\ No newline at end of file