Create an symfony app's skeleton to ease the development

[WIP] first import of automated recipes [WIP] fix configuration file to be able to compile kernel and serve route [WIP] first build of assets [WIP] Continue working on configuration to load a page [WIP] Reset the bin directory [WIP] remove default migrations files [WIP] fix configuration for running tests [WIP] Installation instructions Fix the default firewall in test login [WIP] fix cs [WIP] update gitlab-ci [WIP] update gitlab-ci [WIP] update gitlab ci [WIP] fix config for running tests [WIP] fix gitlab ci [WIP] try tests/bootstrap php file from symfony bridge instead of phpunit recipe remove kernel.php file fix loading of entrypoint.json in test [wip] increase memory limit for phpstan in test/ci [WIP]: set the correct timezone directly within the phpunit.xml.dist file [WIP]: fix security configuration WIP: fix config for testing
2025-08-20 14:43:49 +00:00 · 2024-11-06 22:05:23 +01:00
parent 9ef884349a
commit 3e0731f06e
91 changed files with 10783 additions and 539 deletions
--- a/config/bundles.php
+++ b/config/bundles.php
@@ -0,0 +1,38 @@
+<?php
+
+return [
+    Symfony\Bundle\FrameworkBundle\FrameworkBundle::class => ['all' => true],
+    loophp\PsrHttpMessageBridgeBundle\PsrHttpMessageBridgeBundle::class => ['all' => true],
+    ChampsLibres\WopiBundle\WopiBundle::class => ['all' => true],
+    Doctrine\Bundle\DoctrineBundle\DoctrineBundle::class => ['all' => true],
+    Doctrine\Bundle\FixturesBundle\DoctrineFixturesBundle::class => ['dev' => true, 'test' => true],
+    Doctrine\Bundle\MigrationsBundle\DoctrineMigrationsBundle::class => ['all' => true],
+    Knp\Bundle\MenuBundle\KnpMenuBundle::class => ['all' => true],
+    Knp\Bundle\TimeBundle\KnpTimeBundle::class => ['all' => true],
+    KnpU\OAuth2ClientBundle\KnpUOAuth2ClientBundle::class => ['all' => true],
+    Symfony\Bundle\SecurityBundle\SecurityBundle::class => ['all' => true],
+    Lexik\Bundle\JWTAuthenticationBundle\LexikJWTAuthenticationBundle::class => ['all' => true],
+    Nelmio\Alice\Bridge\Symfony\NelmioAliceBundle::class => ['dev' => true, 'test' => true],
+    Misd\PhoneNumberBundle\MisdPhoneNumberBundle::class => ['all' => true],
+    Sensio\Bundle\FrameworkExtraBundle\SensioFrameworkExtraBundle::class => ['all' => true],
+    Symfony\Bundle\DebugBundle\DebugBundle::class => ['dev' => true],
+    Symfony\Bundle\MakerBundle\MakerBundle::class => ['dev' => true],
+    Symfony\Bundle\MonologBundle\MonologBundle::class => ['all' => true],
+    Symfony\WebpackEncoreBundle\WebpackEncoreBundle::class => ['all' => true],
+    Symfony\Bundle\TwigBundle\TwigBundle::class => ['all' => true],
+    Twig\Extra\TwigExtraBundle\TwigExtraBundle::class => ['all' => true],
+    Chill\ActivityBundle\ChillActivityBundle::class => ['all' => true],
+    Chill\AsideActivityBundle\ChillAsideActivityBundle::class => ['all' => true],
+    Chill\CalendarBundle\ChillCalendarBundle::class => ['all' => true],
+    Chill\CustomFieldsBundle\ChillCustomFieldsBundle::class => ['all' => true],
+    Chill\DocGeneratorBundle\ChillDocGeneratorBundle::class => ['all' => true],
+    Chill\DocStoreBundle\ChillDocStoreBundle::class => ['all' => true],
+    Chill\EventBundle\ChillEventBundle::class => ['all' => true],
+    Chill\MainBundle\ChillMainBundle::class => ['all' => true],
+    Chill\PersonBundle\ChillPersonBundle::class => ['all' => true],
+    Chill\ReportBundle\ChillReportBundle::class => ['all' => true],
+    Chill\TaskBundle\ChillTaskBundle::class => ['all' => true],
+    Chill\ThirdPartyBundle\ChillThirdPartyBundle::class => ['all' => true],
+    Chill\BudgetBundle\ChillBudgetBundle::class => ['all' => true],
+    Chill\WopiBundle\ChillWopiBundle::class => ['all' => true],
+];
--- a/config/packages/cache.yaml
+++ b/config/packages/cache.yaml
@@ -0,0 +1,19 @@
+framework:
+    cache:
+        # Unique name of your app: used to compute stable namespaces for cache keys.
+        #prefix_seed: your_vendor_name/app_name
+
+        # The "app" cache stores to the filesystem by default.
+        # The data in this cache should persist between deploys.
+        # Other options include:
+
+        # Redis
+        #app: cache.adapter.redis
+        #default_redis_provider: redis://localhost
+
+        # APCu (not recommended with heavy random-write workloads as memory fragmentation can cause perf issues)
+        #app: cache.adapter.apcu
+
+        # Namespaced pools use the above "app" backend by default
+        #pools:
+            #my.dedicated.cache: null
--- a/config/packages/cache_chill.yaml
+++ b/config/packages/cache_chill.yaml
@@ -0,0 +1,14 @@
+framework:
+    cache:
+        default_redis_provider: '%env(resolve:REDIS_URL)%'
+        pools:
+            cache.user_data:
+                adapter: cache.adapter.redis
+                public: true
+                default_lifetime: 300  # 5 minutes
+
+            # will be used in chill_main.tag_aware_cache service
+            cache.tags:
+                adapter: cache.adapter.redis
+                public: false
+                default_lifetime: 300
--- a/config/packages/chill.yaml
+++ b/config/packages/chill.yaml
@@ -0,0 +1,121 @@
+chill_main:
+    available_languages: [ '%env(resolve:LOCALE)%', 'en' ]
+    available_countries: ['BE', 'FR']
+    notifications:
+        from_email: '%env(resolve:NOTIFICATION_FROM_EMAIL)%'
+        from_name: '%env(resolve:NOTIFICATION_FROM_NAME)%'
+        host: '%env(resolve:NOTIFICATION_HOST)%'
+    redis:
+        host: '%env(resolve:REDIS_HOST)%'
+        port: '%env(resolve:REDIS_PORT)%'
+    phone_helper:
+        twilio_sid: '%env(resolve:TWILIO_SID)%'
+        twilio_secret: '%env(resolve:TWILIO_SECRET)%'
+        default_carrier_code: '%env(resolve:DEFAULT_CARRIER_CODE)%'
+    short_messages:
+        dsn: '%env(string:SHORT_MESSAGE_DSN)%'
+    acl:
+        form_show_scopes: true
+        form_show_centers: true
+    access_global_history: false
+    access_user_change_password: true
+    access_permissions_group_list: true
+    add_address:
+        default_country: '%env(string:ADD_ADDRESS_DEFAULT_COUNTRY)%'
+        map_center:
+            x: '%env(float:ADD_ADDRESS_MAP_CENTER_X)%'
+            y: '%env(float:ADD_ADDRESS_MAP_CENTER_Y)%'
+            z: '%env(float:ADD_ADDRESS_MAP_CENTER_Z)%'
+
+when@test:
+    chill_main:
+        available_languages:
+            - 'fr'
+            - 'en'
+
+chill_custom_fields:
+    show_empty_values_in_views: false
+
+chill_person:
+    create_person_allowed: false
+    create_parcours_allowed: false
+    allow_multiple_simultaneous_accompanying_periods: true
+    accompanying_periods_fields:
+        user: visible
+        # createdBy, step, origin, intensity, scopes, requestor, anonymous, emergency, confidential : visible(default) | hidden
+    person_fields:
+        acceptEmail: hidden
+        alt_names:
+            -   key: jeune_fille
+                labels:
+                    lang: fr
+                    label: Nom de naissance
+        marital_status: visible
+        civility: visible
+        deathdate: visible
+    validation:
+        center_required: true
+
+chill_activity:
+    form:
+        time_duration:
+            -
+                label: '5 minutes'
+                seconds: 300
+            -
+                label: '10 minutes'
+                seconds: 600
+            -
+                label: '15 minutes'
+                seconds: 900
+            -
+                label: '20 minutes'
+                seconds: 1200
+            -
+                label: '25 minutes'
+                seconds: 1500
+            -
+                label: '30 minutes'
+                seconds: 1800
+            -
+                label: '45 minutes'
+                seconds: 2700
+            -
+                label: '1 hour'
+                seconds: 3600
+            -
+                label: '1 hour 15'
+                seconds: 4500
+            -
+                label: '1 hour 30'
+                seconds: 5400
+            -
+                label: '1 hour 45'
+                seconds: 6300
+            -
+                label: '2 hours'
+                seconds: 7200
+            -
+                label: '2 hours 15'
+                seconds: 8100
+            -
+                label: '2 hours 30'
+                seconds: 9000
+            -
+                label: '2 hours 45'
+                seconds: 9900
+            -
+                label: '3 hours'
+                seconds: 10800
+            -
+                label: '3 hours 30'
+                seconds: 12600
+            -
+                label: '4 hours'
+                seconds: 14400
+            -
+                label: '4 hours 30'
+                seconds: 16200
+            -
+                label: '5 hours'
+                seconds: 18000
--- a/config/packages/chill_budget.yaml
+++ b/config/packages/chill_budget.yaml
@@ -0,0 +1,85 @@
+chill_budget:
+      resources:
+            - { key: fixed_contract, labels: [{ lang: fr, label: "Salarié en CDI" }]}
+            - { key: temporary_contract, labels: [{ lang: fr, label: "Salarié en CDD"}]}
+            - { key: interim, labels: [{ lang: fr, label: "Salarié en intérim"}]}
+            - { key: other_revenues, labels: [{ lang: fr, label: "Revenus non salariés, commerçant, artisan,..."}]}
+            - { key: agricultural_activity, labels: [{ lang: fr, label: "Exploitant agricole"}]}
+            - { key: chomage_ass, labels: [{ lang: fr, label: "Allocations chômage ASS"}]}
+            - { key: chomage_are, labels: [{ lang: fr, label: "Allocations chômage ARE"}]}
+            - { key: remuneration_stage, labels: [{ lang: fr, label: "Rémunération de stage, d’apprentissage,..."}]}
+            - { key: daily_allowences, labels: [{ lang: fr, label: "Indemnités journalières"}]}
+            - { key: others, labels: [{ lang: fr, label: "Autres"}]}
+            - { key: pension, labels: [{ lang: fr, label: "Pension de retraite"}]}
+            - { key: invalidity, labels: [{ lang: fr, label: "Pension d'invalidité"}]}
+            - { key: reversion, labels: [{ lang: fr, label: "Pension de réversion"}]}
+            - { key: widowhood, labels: [{ lang: fr, label: "Pension de veuvage"}]}
+            - { key: military, labels: [{ lang: fr, label: "Pension militaire"}]}
+            - { key: food, labels: [{ lang: fr, label: "Pension alimentaire"}]}
+            - { key: compensation, labels: [{ lang: fr, label: "Pension de prestation compensatoire"}]}
+            - { key: allocation_handicap_adult, labels: [{ lang: fr, label: "Allocation aux adultes handicapés"}]}
+            - { key: rsa, labels: [{ lang: fr, label: "RSA"}]}
+            - { key: annuity_accident, labels: [{ lang: fr, label: "Rente accident"}]}
+            - { key: premium_al_pl, labels: [{ lang: fr, label: "Prime d’activité AL/APL au bénéficiaire"}]}
+            - { key: premium_thirdparty, labels: [{ lang: fr, label: "Prime d’activité versé au tiers"}]}
+            - { key: other_income, labels: [{ lang: fr, label: "Autres ressources (ARS, ...)"}]}
+            - { key: allocation_family, labels: [{ lang: fr, label: "Allocations familiales"}]}
+            - { key: allocation_basic, labels: [{ lang: fr, label: "Allocation de base"}]}
+            - { key: free_choice_saving, labels: [{ lang: fr, label: "Complément de libre choix du mode de garde"}]}
+            - { key: shared_benefits_child, labels: [{ lang: fr, label: "Prestation partagée éducation de l’enfant"}]}
+            - { key: complimentary_family, labels: [{ lang: fr, label: "Complément familial"}]}
+            - { key: allocation_family_support, labels: [{ lang: fr, label: "Allocation de soutien familial"}]}
+            - { key: allocation_education_child_handicap, labels: [{ lang: fr, label: "Allocation d’éducation de l’enfant handicapé"}]}
+
+      charges:
+            - { key: rent, labels: [{ lang: fr, label: "Loyer" }]}
+            - { key: home_ownership, labels: [{ lang: fr, label: "Accession à la propriété" }]}
+            - { key: costs_accomodation, labels: [{ lang: fr, label: "Frais d’hébergement" }]}
+            - { key: home_insurance, labels: [{ lang: fr, label: "Assurance habitation" }]}
+            - { key: taxes, labels: [{ lang: fr, label: "Impôts (taxe habitation, taxe foncière, ordures ménagères, redevances incitatives)" }]}
+            - { key: impots, labels: [{lang: fr, label: "Impôts"}]}
+            - { key: electricity, labels: [{ lang: fr, label: "Electricité" }]}
+            - { key: gas, labels: [{ lang: fr, label: "Gaz en bouteille" }]}
+            - { key: heating, labels: [{ lang: fr, label: "Autre moyen de chauffage" }]}
+            - { key: water, labels: [{ lang: fr, label: "Eau" }]}
+            - { key: school_fees, labels: [ { lang: fr, label: "Frais de scolarité"}]}
+            - { key: alimony, labels: [ { lang: fr, label: "Pension alimentaire à reverser"}]}
+            - { key: child_care, labels: [ { lang: fr, label: "Frais de garde (en totalité)"}]}
+            - { key: telecom, labels: [ { lang: fr, label: "Frais de communication fixe"}]}
+            - { key: mobilephone, labels: [ { lang: fr, label: "Frais de communication mobile"}]}
+            - { key: internet, labels: [ { lang: fr, label: "Frais de communication internet"}]}
+            - { key: insurance, labels: [{ lang: fr, label: "Assurances"}]}
+            - { key: debt_commission, labels: [{ lang: fr, label: "Saisine de la commission surendettement"}]}
+            - { key: recovery_plan, labels: [{ lang: fr, label: "Plan de redressement"}]}
+            - { key: rpr, labels: [{ lang: fr, label: "PRP"}]}
+            - { key: moratoire, labels: [{lang: fr, label: "Moratoire"}]}
+            - { key: mutuelle, labels: [{lang: fr, label: "Mutuelle"}]}
+            - { key: transport, labels: [{lang: fr, label: "Frais de transport"}]}
+            - { key: decouvbank, labels: [{lang: fr, label: "Découvert bancaire utilisé"}]}
+            - { key: procsaisie, labels: [{lang: fr, label: "Procédure de saisie"}]}
+            - { key: indus, labels: [{lang: fr, label: "Indus"}]}
+            - { key: apurement, labels: [{lang: fr, label: "Plan d'apurement"}]}
+            - { key: debt_rent, labels: [{lang: fr, label: "Dette de loyer (hors APL)"}]}
+            - { key: debt_property, labels: [{lang: fr, label: "Dette d'accession à la propriété"}]}
+            - { key: debt_lodging, labels: [{lang: fr, label: "Dette de frais d’hébergement"}]}
+            - { key: debt_electricity, labels: [{lang: fr, label: "Dette d'électricité"}]}
+            - { key: debt_water, labels: [{lang: fr, label: "Dette d'eau"}]}
+            - { key: debt_heating, labels: [{lang: fr, label: "Dette d'autre moyen de chauffage"}]}
+            - { key: debt_gas, labels: [{lang: fr, label: "Dette de gaz en bouteille"}]}
+            - { key: debt_house_insurance, labels: [{lang: fr, label: "Dette d'assurance habitation"}]}
+            - { key: debt_housing_taxes, labels: [{lang: fr, label: "Dette d'impôts liées au logement"}]}
+            - { key: debt_taxes, labels: [{lang: fr, label: "Dette d'impôts autres"}]}
+            - { key: debt_school, labels: [{lang: fr, label: "Dette de frais de scolarité (cantine, transport, frais de scolarité, frais de garde)"}]}
+            - { key: debt_alimentation, labels: [{lang: fr, label: "Dette de pension alimentaire à reverser"}]}
+            - { key: debt_childcare, labels: [{lang: fr, label: "Dette de frais de garde (en totalité)"}]}
+            - { key: debt_phone, labels: [{lang: fr, label: "Dette de communication fixe"}]}
+            - { key: debt_mobile, labels: [{lang: fr, label: "Dette de communication portable"}]}
+            - { key: debt_internet, labels: [{lang: fr, label: "Dette de communication internet"}]}
+            - { key: debt_car_insurance, labels: [{lang: fr, label: "Dette d'assurance auto"}]}
+            - { key: debt_mutual, labels: [{lang: fr, label: "Dette de mutuelle"}]}
+            - { key: debt_transport, labels: [{lang: fr, label: "Dette de frais de transport"}]}
+            - { key: debt_bank, labels: [{lang: fr, label: "Dette de découvert bancaire utilisé"}]}
+            - { key: debt_garbage, labels: [{lang: fr, label: "Dette de taxe d’ordures ménagère"}]}
+            - { key: debt_other, labels: [{lang: fr, label: "Dette autre"}]}
+            - { key: autre, labels: [{lang: fr, label: "Autre"}]}
+
--- a/config/packages/chill_calendar.yaml
+++ b/config/packages/chill_calendar.yaml
@@ -0,0 +1,3 @@
+chill_calendar:
+    remote_calendars_sync:
+        enabled: false
--- a/config/packages/chill_doc_generator.yaml
+++ b/config/packages/chill_doc_generator.yaml
@@ -0,0 +1,5 @@
+chill_doc_generator:
+    driver:
+        type: relatorio
+        relatorio:
+            url: 'http://%env(RELATORIO_HOST)%:%env(RELATORIO_PORT)%/'
--- a/config/packages/chill_doc_store.yaml
+++ b/config/packages/chill_doc_store.yaml
@@ -0,0 +1,6 @@
+chill_doc_store:
+    openstack:
+        temp_url:
+            temp_url_key:         '%env(resolve:ASYNC_UPLOAD_TEMP_URL_KEY)%'       # Required
+            container:            '%env(resolve:ASYNC_UPLOAD_TEMP_URL_CONTAINER)%' # Required
+            temp_url_base_path:   '%env(resolve:ASYNC_UPLOAD_TEMP_URL_BASE_PATH)%' # Required
--- a/config/packages/debug.yaml
+++ b/config/packages/debug.yaml
@@ -0,0 +1,5 @@
+when@dev:
+    debug:
+        # Forwards VarDumper Data clones to a centralized server allowing to inspect dumps on CLI or in your browser.
+        # See the "server:dump" command to start a new server.
+        dump_destination: "tcp://%env(VAR_DUMPER_SERVER)%"
--- a/config/packages/doctrine.yaml
+++ b/config/packages/doctrine.yaml
@@ -0,0 +1,38 @@
+doctrine:
+    dbal:
+        url: '%env(resolve:DATABASE_URL)%'
+
+        # IMPORTANT: You MUST configure your server version,
+        # either here or in the DATABASE_URL env var (see .env file)
+        #server_version: '16'
+        use_savepoints: true
+    orm:
+        auto_generate_proxy_classes: true
+        naming_strategy: doctrine.orm.naming_strategy.default
+        auto_mapping: true
+
+when@test:
+    doctrine:
+        dbal:
+            # "TEST_TOKEN" is typically set by ParaTest
+            dbname_suffix: '_test%env(default::TEST_TOKEN)%'
+
+when@prod:
+    doctrine:
+        orm:
+            auto_generate_proxy_classes: false
+            proxy_dir: '%kernel.build_dir%/doctrine/orm/Proxies'
+            query_cache_driver:
+                type: pool
+                pool: doctrine.system_cache_pool
+            result_cache_driver:
+                type: pool
+                pool: doctrine.result_cache_pool
+
+    framework:
+        cache:
+            pools:
+                doctrine.result_cache_pool:
+                    adapter: cache.app
+                doctrine.system_cache_pool:
+                    adapter: cache.system
--- a/config/packages/doctrine_migrations.yaml
+++ b/config/packages/doctrine_migrations.yaml
@@ -0,0 +1,2 @@
+doctrine_migrations:
+    enable_profiler: false
--- a/config/packages/doctrine_migrations_chill.yaml
+++ b/config/packages/doctrine_migrations_chill.yaml
@@ -0,0 +1,21 @@
+doctrine_migrations:
+    migrations_paths:
+        # migrations for default chill modules
+        'Chill\Migrations\Main': '@ChillMainBundle/migrations'
+        'Chill\Migrations\Activity': '@ChillActivityBundle/migrations'
+        'Chill\Migrations\DocStore': '@ChillDocStoreBundle/migrations'
+        'Chill\Migrations\CustomFields': '@ChillCustomFieldsBundle/migrations'
+        'Chill\Migrations\Event': '@ChillEventBundle/migrations'
+        'Chill\Migrations\Person': '@ChillPersonBundle/migrations'
+        'Chill\Migrations\Task': '@ChillTaskBundle/migrations'
+        'Chill\Migrations\ThirdParty': '@ChillThirdPartyBundle/migrations'
+        'Chill\Migrations\DocGenerator': '@ChillDocGeneratorBundle/migrations'
+        'Chill\Migrations\AsideActivity': '@ChillAsideActivityBundle/migrations'
+        'Chill\Migrations\Calendar': '@ChillCalendarBundle/migrations'
+        'Chill\Migrations\Budget': '@ChillBudgetBundle/migrations'
+        'Chill\Migrations\Report': '@ChillReportBundle/migrations'
+    all_or_nothing:
+        true
+
+    services:
+        'Doctrine\Migrations\Version\Comparator': 'Chill\MainBundle\Doctrine\Migrations\VersionComparator'
--- a/config/packages/framework.yaml
+++ b/config/packages/framework.yaml
@@ -0,0 +1,26 @@
+# see https://symfony.com/doc/current/reference/configuration/framework.html
+framework:
+    secret: '%env(APP_SECRET)%'
+    #csrf_protection: true
+    http_method_override: false
+
+    # Enables session support. Note that the session will ONLY be started if you read or write from it.
+    # Remove or comment this section to explicitly disable session support.
+    session:
+        handler_id: null
+        cookie_secure: auto
+        cookie_samesite: lax
+        storage_factory_id: session.storage.factory.native
+
+    #esi: true
+    #fragments: true
+    php_errors:
+        log: true
+
+when@test:
+    framework:
+        test: true
+        session:
+            storage_factory_id: session.storage.factory.mock_file
+        assets:
+            json_manifest_path: null
--- a/config/packages/framework_chill.yaml
+++ b/config/packages/framework_chill.yaml
@@ -0,0 +1,8 @@
+framework:
+    assets:
+        json_manifest_path: '%kernel.project_dir%/public/build/manifest.json'
+
+when@test:
+    framework:
+        assets:
+            json_manifest_path: null
--- a/config/packages/knpu_oauth2_client.yaml
+++ b/config/packages/knpu_oauth2_client.yaml
@@ -0,0 +1,3 @@
+knpu_oauth2_client:
+    clients:
+        # configure your clients as described here: https://github.com/knpuniversity/oauth2-client-bundle#configuration
--- a/config/packages/lexik_jwt_authentication.yaml
+++ b/config/packages/lexik_jwt_authentication.yaml
@@ -0,0 +1,4 @@
+lexik_jwt_authentication:
+    secret_key: '%env(resolve:JWT_SECRET_KEY)%'
+    public_key: '%env(resolve:JWT_PUBLIC_KEY)%'
+    pass_phrase: '%env(JWT_PASSPHRASE)%'
--- a/config/packages/lexik_jwt_authentication_chill.yaml
+++ b/config/packages/lexik_jwt_authentication_chill.yaml
@@ -0,0 +1,9 @@
+lexik_jwt_authentication:
+    # required for wopi - recommended duration
+    token_ttl: 36000
+
+    # required for wopi - token in parameter access_token
+    token_extractors:
+        query_parameter:
+            enabled: true
+            name: access_token
--- a/config/packages/loophp_psr17.yaml
+++ b/config/packages/loophp_psr17.yaml
@@ -0,0 +1,8 @@
+services:
+    # Register loophp/psr17/Psr17 class and autowire/autoconfigure it.
+    loophp\psr17\Psr17:
+        autowire: true
+        autoconfigure: true
+
+    # Alias the service to the Psr17 interface.
+    loophp\psr17\Psr17Interface: '@loophp\psr17\Psr17'
--- a/config/packages/mailer.yaml
+++ b/config/packages/mailer.yaml
@@ -0,0 +1,3 @@
+framework:
+    mailer:
+        dsn: '%env(MAILER_DSN)%'
--- a/config/packages/mailer_chill.yaml
+++ b/config/packages/mailer_chill.yaml
@@ -0,0 +1,4 @@
+framework:
+    mailer:
+        envelope:
+            sender: '%env(NOTIFICATION_FROM_EMAIL)%'
--- a/config/packages/messenger.yaml
+++ b/config/packages/messenger.yaml
@@ -0,0 +1,75 @@
+framework:
+    messenger:
+        # reset services after consuming messages
+        reset_on_message: true
+
+        # Uncomment this (and the failed transport below) to send failed messages to this transport for later handling.
+        failure_transport: failed
+
+        transports:
+            # those transports are added by chill-bundles recipes
+            sync: sync://
+            async:
+                dsn: '%env(MESSENGER_TRANSPORT_DSN)%/async'
+                options:
+                    exchange:
+                        name: async
+                        type: fanout
+                    queues:
+                        async: ~
+                    auto_setup: true
+
+            priority: '%env(MESSENGER_TRANSPORT_DSN)%/priority'
+            # end of transports added by chill-bundles recipes
+            # https://symfony.com/doc/current/messenger.html#transport-configuration
+            failed: 'doctrine://default?queue_name=failed'
+            to_sign_worker:
+                dsn: '%env(MESSENGER_TRANSPORT_DSN)%/to_python_sign'
+                serializer: Chill\DocStoreBundle\Service\Signature\Driver\BaseSigner\RequestPdfSignMessageSerializer
+                options:
+                    exchange:
+                        name: to_python_sign
+                        type: direct
+                    queues:
+                        to_python_sign: ~
+            signed_docs:
+                dsn: '%env(MESSENGER_TRANSPORT_DSN)%/signed_docs'
+                serializer: Chill\DocStoreBundle\Service\Signature\Driver\BaseSigner\PdfSignedMessageSerializer
+                options:
+                    exchange:
+                        name: signed_docs
+                        type: direct
+                    queues:
+                        signed_docs:
+                            binding_keys: [signed_doc]
+
+                    auto_setup: false
+
+        routing:
+            # routes added by chill-bundles recipes
+            'Chill\CalendarBundle\Messenger\Message\CalendarRangeMessage': async
+            'Chill\CalendarBundle\Messenger\Message\CalendarRangeRemovedMessage': async
+            'Chill\CalendarBundle\Messenger\Message\CalendarRemovedMessage': async
+            'Chill\CalendarBundle\Messenger\Message\CalendarMessage': async
+            'Chill\CalendarBundle\Messenger\Message\InviteUpdateMessage': async
+            'Chill\CalendarBundle\Messenger\Message\MSGraphChangeNotificationMessage': async
+            'Chill\MainBundle\Service\ShortMessage\ShortMessage': async
+            'Chill\DocGeneratorBundle\Service\Messenger\RequestGenerationMessage': priority
+            'Chill\PersonBundle\AccompanyingPeriod\Lifecycle\AccompanyingPeriodStepChangeRequestMessage': async
+            'Chill\DocStoreBundle\Service\Signature\Driver\BaseSigner\RequestPdfSignMessage': to_sign_worker
+            'Chill\DocStoreBundle\Service\StoredObjectCleaner\RemoveOldVersionMessage': async
+            'Chill\MainBundle\Workflow\Messenger\PostSignatureStateChangeMessage': priority
+            'Chill\MainBundle\Workflow\Messenger\PostPublicViewMessage': async
+            'Chill\MainBundle\Service\Workflow\CancelStaleWorkflowMessage': async
+            # end of routes added by chill-bundles recipes
+            # Route your messages to the transports
+            # 'App\Message\YourMessage': async
+            # 'Symfony\Component\Mailer\Messenger\SendEmailMessage': async
+
+when@test:
+    framework:
+        messenger:
+            transports:
+                async: 'in-memory://'
+                priority: 'in-memory://'
+                signed_docs: 'in-memory://'
--- a/config/packages/misd_phone_number.yaml
+++ b/config/packages/misd_phone_number.yaml
@@ -0,0 +1,13 @@
+# To persist libphonenumber\PhoneNumber objects, add the Misd\PhoneNumberBundle\Doctrine\DBAL\Types\PhoneNumberType mapping to your application's config.
+# This requires: doctrine/doctrine-bundle
+#doctrine:
+#    dbal:
+#        types:
+#            phone_number: Misd\PhoneNumberBundle\Doctrine\DBAL\Types\PhoneNumberType
+
+#misd_phone_number:
+#    twig: false
+#    form: false
+#    serializer: false
+#    validator:
+#        default_region: GB
--- a/config/packages/monolog.yaml
+++ b/config/packages/monolog.yaml
@@ -0,0 +1,62 @@
+monolog:
+    channels:
+        - deprecation # Deprecations are logged in the dedicated "deprecation" channel when it exists
+
+when@dev:
+    monolog:
+        handlers:
+            main:
+                type: stream
+                path: "%kernel.logs_dir%/%kernel.environment%.log"
+                level: debug
+                channels: ["!event"]
+            # uncomment to get logging in your browser
+            # you may have to allow bigger header sizes in your Web server configuration
+            #firephp:
+            #    type: firephp
+            #    level: info
+            #chromephp:
+            #    type: chromephp
+            #    level: info
+            console:
+                type: console
+                process_psr_3_messages: false
+                channels: ["!event", "!doctrine", "!console"]
+
+when@test:
+    monolog:
+        handlers:
+            main:
+                type: fingers_crossed
+                action_level: error
+                handler: nested
+                excluded_http_codes: [404, 405]
+                channels: ["!event"]
+            nested:
+                type: stream
+                path: "%kernel.logs_dir%/%kernel.environment%.log"
+                level: debug
+
+when@prod:
+    monolog:
+        handlers:
+            main:
+                type: fingers_crossed
+                action_level: error
+                handler: nested
+                excluded_http_codes: [404, 405]
+                buffer_size: 50 # How many messages should be saved? Prevent memory leaks
+            nested:
+                type: stream
+                path: php://stderr
+                level: debug
+                formatter: monolog.formatter.json
+            console:
+                type: console
+                process_psr_3_messages: false
+                channels: ["!event", "!doctrine"]
+            deprecation:
+                type: stream
+                channels: [deprecation]
+                path: php://stderr
+                formatter: monolog.formatter.json
--- a/config/packages/nelmio_alice.yaml
+++ b/config/packages/nelmio_alice.yaml
@@ -0,0 +1,12 @@
+when@dev: &dev
+    nelmio_alice:
+        functions_blacklist:
+            - 'current'
+            - 'shuffle'
+            - 'date'
+            - 'time'
+            - 'file'
+            - 'md5'
+            - 'sha1'
+
+when@test: *dev
--- a/config/packages/nyholm_psr7.yaml
+++ b/config/packages/nyholm_psr7.yaml
@@ -0,0 +1,11 @@
+services:
+    # Register nyholm/psr7 services for autowiring with PSR-17 (HTTP factories)
+    Psr\Http\Message\RequestFactoryInterface: '@nyholm.psr7.psr17_factory'
+    Psr\Http\Message\ResponseFactoryInterface: '@nyholm.psr7.psr17_factory'
+    Psr\Http\Message\ServerRequestFactoryInterface: '@nyholm.psr7.psr17_factory'
+    Psr\Http\Message\StreamFactoryInterface: '@nyholm.psr7.psr17_factory'
+    Psr\Http\Message\UploadedFileFactoryInterface: '@nyholm.psr7.psr17_factory'
+    Psr\Http\Message\UriFactoryInterface: '@nyholm.psr7.psr17_factory'
+
+    nyholm.psr7.psr17_factory:
+        class: Nyholm\Psr7\Factory\Psr17Factory
--- a/config/packages/ramsey_uuid_doctrine.yaml
+++ b/config/packages/ramsey_uuid_doctrine.yaml
@@ -0,0 +1,4 @@
+doctrine:
+    dbal:
+        types:
+            uuid: 'Ramsey\Uuid\Doctrine\UuidType'
--- a/config/packages/routing.yaml
+++ b/config/packages/routing.yaml
@@ -0,0 +1,12 @@
+framework:
+    router:
+        utf8: true
+
+        # Configure how to generate URLs in non-HTTP contexts, such as CLI commands.
+        # See https://symfony.com/doc/current/routing.html#generating-urls-in-commands
+        #default_uri: http://localhost
+
+when@prod:
+    framework:
+        router:
+            strict_requirements: null
--- a/config/packages/routing_chill.yaml
+++ b/config/packages/routing_chill.yaml
@@ -0,0 +1,8 @@
+parameters:
+    composed_uri: 'https://%env(resolve:NOTIFICATION_HOST)%'
+    
+framework:
+    router:
+        # Configure how to generate URLs in non-HTTP contexts, such as CLI commands.
+        # See https://symfony.com/doc/current/routing.html#generating-urls-in-commands
+        default_uri: '%composed_uri%'
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -0,0 +1,91 @@
+security:
+    enable_authenticator_manager: true
+    # https://symfony.com/doc/current/security.html#registering-the-user-hashing-passwords
+    password_hashers:
+        Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface: 'auto'
+    # https://symfony.com/doc/current/security.html#loading-the-user-the-user-provider
+    providers:
+        # providers added by chill-bundles recipes\n
+        # those providers are required to make chill working
+        chill_chain_provider:
+            chain:
+                providers: [chill_in_memory, chill_users]
+        chill_in_memory:
+            memory:
+                users:
+                    admin: { password: '%env(resolve:ADMIN_PASSWORD)%', roles: ['ROLE_ADMIN', 'ROLE_ALLOWED_TO_SWITCH', 'ROLE_USER'] }
+        chill_users:
+            id: chill.main.user_provider
+        # end of providers added by chill-bundles recipes\n
+        # all other providers might be removed, unless you have specific needs\n
+    firewalls:
+        dev:
+            pattern: ^/(_(profiler|wdt)|css|images|js)/
+            security: false
+        # those lines are added by chill-bundles recipe, and are requires to make chill-bundles working
+        # this firewall is in use for wopi endpoint, which requires
+        wopi:
+            pattern: ^/wopi
+            provider: chill_chain_provider
+            stateless: true
+            guard:
+                authenticators:
+                    - lexik_jwt_authentication.jwt_token_authenticator
+        dav:
+            pattern: ^/dav
+            provider: chill_chain_provider
+            stateless: true
+            guard:
+                authenticators:
+                    - Chill\DocStoreBundle\Security\Guard\JWTOnDavUrlAuthenticator
+        # this firewall is the main firewall for chill. It should be the last one in the stack,
+        # unless you have specific needs
+        chill_main:
+            provider: chill_chain_provider
+            entry_point: form_login
+            form_login:
+                csrf_parameter: _csrf_token
+                csrf_token_id: authenticate
+                #csrf_provider: security.csrf.token_manager
+            logout:
+                path: /logout
+            # uncomment to enable impersonate mode in Chill
+            # https://symfony.com/doc/current/security/impersonating_user.html
+            switch_user: true
+            # end of lines added by chill-bundles recipe
+            # activate different ways to authenticate
+            # https://symfony.com/doc/current/security.html#the-firewall
+
+            # https://symfony.com/doc/current/security/impersonating_user.html
+            # switch_user: true
+
+    # Easy way to control access for large sections of your site
+    # Note: Only the *first* access control that matches will be used
+    access_control:
+        # those lines are added by chill-bundles recipes, and are requires to make chill-bundles working
+        - { path: ^/(login|logout), roles: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: ^/public, roles: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: ^/wopi, roles: IS_AUTHENTICATED_FULLY }
+        # access for homepage, the homepage redirect admin to admin section
+        - { path: ^/$, roles: [ IS_AUTHENTICATED_REMEMBERED ] }
+        - { path: ^/homepage$, roles: [ IS_AUTHENTICATED_REMEMBERED ] }
+        # idem
+        - { path: ^/([a-z]+/)?homepage, roles: [ IS_AUTHENTICATED_REMEMBERED ] }
+        # admin section, only for admin
+        - { path: ^/([a-z]+/)?admin, roles: ROLE_ADMIN }
+        # other pages, only for regular user (no admin)
+        - { path: ^/, roles: ROLE_USER }
+        # this is the end of line added by chill-project/chill-bundles recipes
+
+when@test:
+    security:
+        password_hashers:
+            # By default, password hashers are resource intensive and take time. This is
+            # important to generate secure password hashes. In tests however, secure hashes
+            # are not important, waste resources and increase test times. The following
+            # reduces the work factor to the lowest possible values.
+            Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface:
+                algorithm: auto
+                cost: 4 # Lowest possible value for bcrypt
+                time_cost: 3 # Lowest possible value for argon
+                memory_cost: 10 # Lowest possible value for argon
--- a/config/packages/security_chill.yaml
+++ b/config/packages/security_chill.yaml
@@ -0,0 +1,9 @@
+security:
+    access_decision_manager:
+        strategy: unanimous
+        allow_if_all_abstain: false
+
+when@test:
+    security:
+        role_hierarchy:
+            CHILL_MASTER_ROLE: [ CHILL_INHERITED_ROLE_1 ]
--- a/config/packages/sensio_framework_extra.yaml
+++ b/config/packages/sensio_framework_extra.yaml
@@ -0,0 +1,3 @@
+sensio_framework_extra:
+    router:
+        annotations: false
--- a/config/packages/translation.yaml
+++ b/config/packages/translation.yaml
@@ -0,0 +1,7 @@
+framework:
+    default_locale: en
+    translator:
+        default_path: '%kernel.project_dir%/translations'
+        fallbacks:
+            - en
+        providers:
--- a/config/packages/translation_chill.yaml
+++ b/config/packages/translation_chill.yaml
@@ -0,0 +1,4 @@
+framework:
+    default_locale:  '%env(resolve:LOCALE)%'
+    translator:
+        fallbacks: [ '%env(resolve:LOCALE)%' ]
--- a/config/packages/twig.yaml
+++ b/config/packages/twig.yaml
@@ -0,0 +1,6 @@
+twig:
+    default_path: '%kernel.project_dir%/templates'
+
+when@test:
+    twig:
+        strict_variables: true
--- a/config/packages/twig_chill.yaml
+++ b/config/packages/twig_chill.yaml
@@ -0,0 +1,16 @@
+twig:
+    ## In Symfony 5, bootstrap_5 theme is supported. But not yet in sf4 !!
+    # see sf5 https://symfony.com/doc/current/form/form_themes.html
+    # see sf4 https://symfony.com/doc/4.4/form/form_themes.html
+    #
+    # While waiting for the upgrade, we get the form theme file
+    # (https://github.com/symfony/symfony/tree/5.4/src/Symfony/Bridge/Twig/Resources/views/Form),
+    # put it in ChillMainBundle/Resources/views/Form/bootstrap5/
+    # and adapt it lightly.
+    #
+    form_themes: ['@ChillMain/Form/bootstrap5/bootstrap_5_horizontal_layout.html.twig']
+
+when@dev:
+    twig:
+        globals:
+            responsive_debug: false
--- a/config/packages/validator.yaml
+++ b/config/packages/validator.yaml
@@ -0,0 +1,13 @@
+framework:
+    validation:
+        email_validation_mode: html5
+
+        # Enables validator auto-mapping support.
+        # For instance, basic validation constraints will be inferred from Doctrine's metadata.
+        #auto_mapping:
+        #    App\Entity\: []
+
+when@test:
+    framework:
+        validation:
+            not_compromised_password: false
--- a/config/packages/webpack_encore.yaml
+++ b/config/packages/webpack_encore.yaml
@@ -0,0 +1,41 @@
+webpack_encore:
+    # The path where Encore is building the assets - i.e. Encore.setOutputPath()
+    output_path: '%kernel.project_dir%/public/build'
+    # If multiple builds are defined (as shown below), you can disable the default build:
+    # output_path: false
+
+    # Set attributes that will be rendered on all script and link tags
+    script_attributes:
+        defer: true
+        # Uncomment (also under link_attributes) if using Turbo Drive
+        # https://turbo.hotwired.dev/handbook/drive#reloading-when-assets-change
+        # 'data-turbo-track': reload
+    # link_attributes:
+        # Uncomment if using Turbo Drive
+        # 'data-turbo-track': reload
+
+    # If using Encore.enableIntegrityHashes() and need the crossorigin attribute (default: false, or use 'anonymous' or 'use-credentials')
+    # crossorigin: 'anonymous'
+
+    # Preload all rendered script and link tags automatically via the HTTP/2 Link header
+    # preload: true
+
+    # Throw an exception if the entrypoints.json file is missing or an entry is missing from the data
+    # strict_mode: false
+
+    # If you have multiple builds:
+    # builds:
+        # frontend: '%kernel.project_dir%/public/frontend/build'
+
+        # pass the build name as the 3rd argument to the Twig functions
+        # {{ encore_entry_script_tags('entry1', null, 'frontend') }}
+
+#when@prod:
+#    webpack_encore:
+#        # Cache the entrypoints.json (rebuild Symfony's cache when entrypoints.json changes)
+#        # Available in version 1.2
+#        cache: true
+
+when@test:
+    webpack_encore:
+        strict_mode: false
--- a/config/packages/wopi.yaml
+++ b/config/packages/wopi.yaml
@@ -0,0 +1,2 @@
+wopi:
+    server: "%env(resolve:EDITOR_SERVER)%"
--- a/config/packages/workflow.yaml
+++ b/config/packages/workflow.yaml
@@ -0,0 +1,2 @@
+framework:
+    workflows: null
--- a/config/preload.php
+++ b/config/preload.php
@@ -0,0 +1,5 @@
+<?php
+
+if (file_exists(dirname(__DIR__).'/var/cache/prod/App_KernelProdContainer.preload.php')) {
+    require dirname(__DIR__).'/var/cache/prod/App_KernelProdContainer.preload.php';
+}
--- a/config/routes.yaml
+++ b/config/routes.yaml
@@ -0,0 +1,8 @@
+#index:
+#    path: /
+#    controller: App\Controller\DefaultController::index
+
+#load routes for chill bundles
+chill_routes:
+    resource: .
+    type: chill_routes
--- a/config/routes/annotations.yaml
+++ b/config/routes/annotations.yaml
@@ -0,0 +1,3 @@
+kernel:
+    resource: ../../src/app/Kernel.php
+    type: annotation
--- a/config/routes/framework.yaml
+++ b/config/routes/framework.yaml
@@ -0,0 +1,4 @@
+when@dev:
+    _errors:
+        resource: '@FrameworkBundle/Resources/config/routing/errors.xml'
+        prefix: /_error
--- a/config/services.yaml
+++ b/config/services.yaml
@@ -0,0 +1,13 @@
+# This file is the entry point to configure your own services.
+# Files in the packages/ subdirectory configure your dependencies.
+
+# Put parameters here that don't need to change on each machine where the app is deployed
+# https://symfony.com/doc/current/best_practices.html#use-parameters-for-application-configuration
+parameters:
+
+services:
+    # default configuration for services in *this* file
+    _defaults:
+        autowire: true      # Automatically injects dependencies in your services.
+        autoconfigure: true # Automatically registers your services as commands, event subscribers, etc.
+