Remove default TRUSTED_PROXIES values. Only configuration example keep

okvpn · Feb 24, 2023 · 1724d1b · 1724d1b
1 parent 7c3fe97
commit 1724d1b
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.env b/.env
@@ -51,5 +51,8 @@ APP_COMPOSER_HOME="%kernel.project_dir%/var/.composer"
 CORS_ALLOW_ORIGIN='^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$'
 ###< nelmio/cors-bundle ###
 
+# For more security you can disable access with other hosts and HTTP Host Header Attack
 TRUSTED_HOSTS=
-TRUSTED_PROXIES=172.16.0.0/12
+
+# When Using a Reverse Proxy
+#TRUSTED_PROXIES=172.16.0.0/12