# see https://symfony.com/doc/current/reference/configuration/framework.html framework: secret: '%env(APP_SECRET)%' # Note that the session will be started ONLY if you read or write from it. session: true form: csrf_protection: enabled: true #esi: true #fragments: true when@prod: # shortcut for private IP address ranges of your proxy trusted_proxies: 'private_ranges' # or, if your proxy instead uses the "Forwarded" header trusted_headers: [ 'forwarded' ] when@test: framework: test: true session: storage_factory_id: session.storage.factory.mock_file