diff --git a/deployment/minio-cors.json b/deployment/minio-cors.json
deleted file mode 100644
index e2269fe..0000000
--- a/deployment/minio-cors.json
+++ /dev/null
@@ -1,9 +0,0 @@
-[
-  {
-    "AllowedOrigins": ["*"],
-    "AllowedMethods": ["GET", "PUT", "POST", "DELETE", "HEAD"],
-    "AllowedHeaders": ["*"],
-    "ExposeHeaders": ["ETag"],
-    "MaxAgeSeconds": 3000
-  }
-]
diff --git a/deployment/minio-cors.xml b/deployment/minio-cors.xml
new file mode 100644
index 0000000..60f2578
--- /dev/null
+++ b/deployment/minio-cors.xml
@@ -0,0 +1,13 @@
+<CORSConfiguration>
+  <CORSRule>
+    <AllowedOrigin>*</AllowedOrigin>
+    <AllowedMethod>GET</AllowedMethod>
+    <AllowedMethod>PUT</AllowedMethod>
+    <AllowedMethod>POST</AllowedMethod>
+    <AllowedMethod>DELETE</AllowedMethod>
+    <AllowedMethod>HEAD</AllowedMethod>
+    <AllowedHeader>*</AllowedHeader>
+    <ExposeHeader>ETag</ExposeHeader>
+    <MaxAgeSeconds>3000</MaxAgeSeconds>
+  </CORSRule>
+</CORSConfiguration>
diff --git a/docker-compose.yml b/docker-compose.yml
index 65cfb80..d5424cd 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -56,7 +56,7 @@ services:
       MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
       MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
     volumes:
-      - ./deployment/minio-cors.json:/etc/minio/cors.json:ro
+      - ./deployment/minio-cors.xml:/etc/minio/cors.xml:ro
     entrypoint: >
       /bin/sh -c "
       until mc alias set local http://wedding-minio:9000 $$MINIO_ROOT_USER $$MINIO_ROOT_PASSWORD; do
@@ -65,7 +65,7 @@ services:
       done;
       mc mb --ignore-existing local/$$S3_BUCKET &&
       mc anonymous set none local/$$S3_BUCKET &&
-      mc cors set local/$$S3_BUCKET /etc/minio/cors.json
+      mc cors set local/$$S3_BUCKET /etc/minio/cors.xml
       "
     networks:
       - wedding-private