Setup Nginx + Passenger with Rails App and Vue.js app
You're serving the frontend from a different domain, so, yes you need CORS with permissive Access-Control-Allow-Origin (either * or the domains you are using in dev).
Edit: you can use NGINX for this, or Rails (for example https://github.com/cyu/rack-cors)