chore

Author: tchapi

.env

@@ -93,3 +93,6 @@ WEBDAV_HOMES_DIR=
 # By default, it will log in the standard Symfony directory: var/log/prod.log (for production)
 # You can use /dev/null here if you want to discard logs entirely
 LOG_FILE_PATH="%kernel.logs_dir%/%kernel.environment%.log"
+
+# By default, we trust '127.0.0.1,REMOTE_ADDR'
+TRUSTED_PROXIES=127.0.0.1,REMOTE_ADDR

config/packages/framework.yaml

@@ -5,6 +5,8 @@ framework:
     #csrf_protection: true
     http_method_override: false
 
+    trusted_proxies: '%trusted_proxies%'
+
     # Enables session support. Note that the session will ONLY be started if you read or write from it.
     # Remove or comment this section to explicitly disable session support.
     session:

config/services.yaml

@@ -13,6 +13,8 @@ parameters:
     default_birthday_reminder_offset: "PT9H"
     caldav_enabled: "%env(bool:CALDAV_ENABLED)%"
     carddav_enabled: "%env(bool:CARDDAV_ENABLED)%"
+    trusted_proxies: '%env(default:default_trusted_proxies:TRUSTED_PROXIES)%'
+    default_trusted_proxies: '127.0.0.1,REMOTE_ADDR'
 
 services:
     # default configuration for services in *this* file