From d5a573124b6ec696c13044124a8289a93a872d8e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B6rn=20Fromme?= <fromme@dreipunktnull.com>
Date: Fri, 20 Oct 2023 13:20:18 +0200
Subject: [PATCH] Fix: Force https for all requests

---
 config/packages/security.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/config/packages/security.yaml b/config/packages/security.yaml
index bbacc0e..3f86cbb 100644
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -21,7 +21,8 @@ security:
                 path: app_security_logout
                 target: app_security_login
     access_control:
-        - { path: ^/profile, roles: ROLE_USER }
+        - { path: '^/profile', roles: ROLE_USER, requires_channel: https }
+        - { path: '^/', roles: PUBLIC_ACCESS, requires_channel: https }
 
 when@test:
     security: