Fix routes

.env

@@ -36,6 +36,7 @@ DATABASE_URL=mysql://newn:password@db:3306/newn?serverVersion=mariadb-10.11.0
 ROUTE_PROTOCOL=http
 ROUTE_HOST=localhost
 ROUTE_BASE=
+TRUSTED_PROXIES=127.0.0.1
 
 # Comments etc.
 # Use something like this in .env.local FEEDBACK_RECIPIENTS='["a@example.com", "b@example.com"]'

config/packages/framework.yaml

@@ -4,6 +4,9 @@ framework:
     csrf_protection: true
     http_method_override: true
 
+    trusted_proxies: '%env(TRUSTED_PROXIES)%'
+    trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port', 'x-forwarded-prefix']
+
     # Enables session support. Note that the session will ONLY be started if you read or write from it.
     # Remove or comment this section to explicitly disable session support.
     session: