diff --git a/.env b/.env index 9897b70..4b7704a 100644 --- a/.env +++ b/.env @@ -18,6 +18,9 @@ APP_ENV=dev APP_SECRET=b8ec44a08e5f4ba917879713a4a8e63c APP_LOCALE='es' +# DO NOT LEAVE OPEN UNLESS YOU'VE GUARANTEED THAT TRAFFIC WILL ONLY COME FROM TRUSTED ORIGINS +# https://symfony.com/doc/6.4/deployment/proxies.html +APP_TRUSTED_PROXIES='127.0.0.1,REMOTE_ADDR' ###< symfony/framework-bundle ### ###> doctrine/doctrine-bundle ### diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml index 387064a..8fd40c8 100644 --- a/config/packages/framework.yaml +++ b/config/packages/framework.yaml @@ -28,6 +28,8 @@ framework: headers: 'User-Agent': 'Platoniq Goteo-v4-API' + trusted_proxies: '%env(APP_TRUSTED_PROXIES)%' + when@test: framework: test: true diff --git a/config/services.yaml b/config/services.yaml index bacb5c7..4680e63 100644 --- a/config/services.yaml +++ b/config/services.yaml @@ -6,11 +6,6 @@ parameters: env(OAUTH_ACCESS_TOKEN_TTL): PT1H -when@prod: - parameters: - router.request_context.scheme: 'https' - asset.request_context.secure: true - services: # default configuration for services in *this* file _defaults: