Trust CodeFirst reverse proxy

config/packages/framework.yaml

@@ -5,7 +5,7 @@ framework:
 
     assets:
         base_path: '%env(ASSETS_BASE_PATH)%'
-    trusted_proxies: '127.0.0.1,private_ranges'
+    trusted_proxies: '%env(TRUSTED_PROXIES)%'
     trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port', 'x-forwarded-prefix']
 
     # Note that the session will be started ONLY if you read or write from it.

config/services.yaml

@@ -4,6 +4,8 @@
 # Put parameters here that don't need to change on each machine where the app is deployed
 # https://symfony.com/doc/current/best_practices.html#use-parameters-for-application-configuration
 parameters:
+    trusted_proxies: '%env(TRUSTED_PROXIES)%'
+    env(TRUSTED_PROXIES): 127.0.0.1
 
 services:
     # default configuration for services in *this* file