If I add server.cors.origin: "*" (with or without server.cors : true) Kibana fails to restart. It doesn't seem to be a valid usage in yml file.
When I "systemctl status kibana":
Process: 2986 ExecStart=/usr/share/kibana/bin/kibana -c /etc/kibana/kibana.yml (code=exited, status=1/FAILURE)