.env

@@ -1,7 +1,15 @@
-##
+#  * .env                contains default values for the environment variables needed by the app
-##  Manually dump .env files in .env.local.php with
+#  * .env.local          uncommitted file with local overrides
-## `$ composer symfony:dump-env prod`
+#  * .env.$APP_ENV       committed environment-specific defaults
-##
+#  * .env.$APP_ENV.local uncommitted environment-specific overrides
+#
+# Real environment variables win over .env files.
+#
+# DO NOT DEFINE PRODUCTION SECRETS IN THIS FILE NOR IN ANY OTHER COMMITTED FILES.
+# https://symfony.com/doc/current/configuration/secrets.html
+#
+# Run "composer dump-env prod" to compile .env files for production use (requires symfony/flex >=1.2).
+# https://symfony.com/doc/current/best_practices.html#use-environment-variables-for-infrastructure-configuration
 
 ## Locale
 LOCALE=fr

symfony.lock

@@ -516,12 +516,12 @@
         "version": "v5.1.3"
     },
     "symfony/flex": {
-        "version": "1.0",
+        "version": "1.20",
         "recipe": {
             "repo": "github.com/symfony/recipes",
-            "branch": "master",
+            "branch": "main",
             "version": "1.0",
-            "ref": "c0eeb50665f0f77226616b6038a9b06c03752d8e"
+            "ref": "146251ae39e06a95be0fe3d13c807bcf3938b172"
         },
         "files": [
             ".env"