diff --git a/doc/docker/varnish.yml b/doc/docker/varnish.yml index 1c66ae32..90b6877b 100644 --- a/doc/docker/varnish.yml +++ b/doc/docker/varnish.yml @@ -9,9 +9,11 @@ services: app: environment: - SYMFONY_HTTP_CACHE=0 - - SYMFONY_TRUSTED_PROXIES=varnish + # Never do this in production if the app container is accesible for the public as well + # See https://ezplatform.com/security-advisories/ezsa-2020-002-unauthorised-cache-purge-with-misconfigured-fastly for more details how it could be abused + - SYMFONY_TRUSTED_PROXIES=TRUST_REMOTE - HTTPCACHE_PURGE_SERVER=http://varnish - - HTTPCACHE_PURGE_TYPE=http + - HTTPCACHE_PURGE_TYPE=varnish varnish: build: