init security, add cors

internal/routes/routes.go

@@ -7,6 +7,7 @@ import (
 	"antrian-operasi/internal/domain/reference/dokter"
 	"antrian-operasi/internal/domain/reference/kategori"
 	"antrian-operasi/internal/domain/reference/spesialis"
+	"antrian-operasi/internal/middleware"
 	"net/http"
 
 	"github.com/gin-gonic/gin"
@@ -22,13 +23,8 @@ func RegisterRoutes(cfg *config.Config, dbService database.Service) *gin.Engine
 		})
 	})
 
-	// router.GET("databases", func(c *gin.Context) {
-	// 	c.JSON(200, gin.H{
-	// 		"databases": dbService.ListDBs(),
-	// 		"health":    dbService.Health(),
-	// 		"timestamp": time.Now().Unix(),
-	// 	})
-	// })
+	// init middleware
+	router.Use(middleware.SecureCORSConfig(cfg.Security))
 
 	api := router.Group("/api")
 	{