diff --git a/client/src/api-service/api.ts b/client/src/api-service/api.ts
index 774c01a..9f27a6f 100644
--- a/client/src/api-service/api.ts
+++ b/client/src/api-service/api.ts
@@ -45,6 +45,7 @@ function handleError(httpStatusCode: number) {
 
 const api = {
   getJSON: async (url: string) => {
+    console.log(`getJSON=${url}`);
     const response = await fetch(url, {
       method: 'GET',
       mode: 'cors',
@@ -63,6 +64,7 @@ const api = {
   },
 
   postJSON: async (url: string, payload: object) => {
+    console.log(`postJSON=${url}`);
     const response = await fetch(url, {
       method: 'POST',
       mode: 'cors',
diff --git a/server/src/main/java/br/com/tasknoteapp/server/config/CorsConfig.java b/server/src/main/java/br/com/tasknoteapp/server/config/CorsConfig.java
index e100fae..56012b1 100644
--- a/server/src/main/java/br/com/tasknoteapp/server/config/CorsConfig.java
+++ b/server/src/main/java/br/com/tasknoteapp/server/config/CorsConfig.java
@@ -18,7 +18,7 @@ public class CorsConfig implements WebMvcConfigurer {
 
   /**
    * Add CORS mappings configuration.
-   * 
+   *
    * @param registry CorsRegistry instance.
    */
   public void addCorsMappings(@NonNull CorsRegistry registry) {
@@ -29,7 +29,14 @@ public class CorsConfig implements WebMvcConfigurer {
           .addMapping("/**")
           .allowedOrigins(allowedOrigins)
           .allowCredentials(true)
-          .allowedHeaders("X-XSRF-TOKEN", "Content-Type", "Accept", "Authorization", "X-Frame-Options", "X-XSS-Protection", "Content-Security-Policy")
+          .allowedHeaders(
+              "X-XSRF-TOKEN",
+              "Content-Type",
+              "Accept",
+              "Authorization",
+              "X-Frame-Options",
+              "X-XSS-Protection",
+              "Content-Security-Policy")
           .allowedMethods("GET", "PUT", "POST", "DELETE", "OPTIONS", "HEAD", "PATCH");
     }
   }
diff --git a/server/src/main/java/br/com/tasknoteapp/server/config/SecurityConfig.java b/server/src/main/java/br/com/tasknoteapp/server/config/SecurityConfig.java
index aec11c1..7130f09 100644
--- a/server/src/main/java/br/com/tasknoteapp/server/config/SecurityConfig.java
+++ b/server/src/main/java/br/com/tasknoteapp/server/config/SecurityConfig.java
@@ -52,9 +52,9 @@ public class SecurityConfig {
                 request
                     .requestMatchers(HttpMethod.OPTIONS, "/**")
                     .permitAll()
-                    .requestMatchers("/auth/**")
+                    .requestMatchers("/server/auth/**", "/auth/**")
                     .permitAll()
-                    .requestMatchers("/rest/**")
+                    .requestMatchers("/server/rest/**", "/rest/**")
                     .authenticated()
                     .anyRequest()
                     .permitAll())
diff --git a/tools.md b/tools.md
index eebd080..4f4b704 100644
--- a/tools.md
+++ b/tools.md
@@ -87,4 +87,17 @@ docker compose --file docker-compose.prod.yml up -d db
 ```
 
 - Get container IP
-docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' db
\ No newline at end of file
+docker inspect -f '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}' db
+
+# Manual Client build & deploy
+
+```sh
+export VERSION=
+export IP=
+
+npm ci --ignore-scripts --no-update-notifier --omit=dev
+export VITE_BACKEND_SERVER=/server
+npm run build
+zip -r client_$VERSION.zip dist/
+scp client_86.zip root@$IP:/root/
+```
\ No newline at end of file