bin/tools_via_composer/infection/composer.json

+{
+    "name": "adullact/comptoir-du-libre_dev-tools_infection",
+    "description": "Infection (mutation testing tool) used by CI and developers in Comptoir-du-Libre project.",
+    "homepage": "https://gitlab.adullact.net/Comptoir/comptoir-du-libre",
+    "type": "metapackage",
+    "license": "AGPL-3.0-or-later",
+    "minimum-stability": "stable",
+    "prefer-stable": true,
+    "authors": [
+        {
+            "name": "Adullact",
+            "homepage": "https://adullact.org",
+            "role": "Developer"
+        }
+    ],
+    "require": {
+        "php": "8.1.* || 8.2.* || 8.3.* || 8.4.*",
+        "infection/infection": "^0.29.8"
+    },
+    "config": {
+        "allow-plugins": {
+            "infection/extension-installer": true
+        }
+    }
+}

comptoir_users_dev.json

+comptoir_users_dev_2025.01.20_10h27.02.json
\ No newline at end of file

documentation/ressources_post-it.md

+# Ressources POST IT
+
+## IMPORT 
+
+### missing file extension
+
+```bash
+362 - CodiMD
+    files/Softwares/CodiMD/avatar
+    afdc568e-e8ea-4866-8c74-8a15388bfec0
+    200 https://comptoir-du-libre.org/img/files/Softwares/CodiMD/avatar/afdc568e-e8ea-4866-8c74-8a15388bfec0
+    DEBUG ----> Content Type
+```
+
+## Legal notice examples
+
+### FR
+
+- https://www.multi.coop/legal?locale=fr
+- ...
+
+
+## UI - Popin modale
+
+Popin modale responsive et accessible
+- https://www.kortic.com/popin-modale-accessible-et-responsive-compatible-mobile-et-desktop.html
+
+
+## UI - HTML `<detail>` examples
+
+- https://www.sitepoint.com/style-html-details-element/
+- https://freefrontend.com/html-details-summary-css/
+- https://www.alsacreations.com/article/lire/1335-html5-details-summary.html
+
+## UI - Tag selector 
+
+**Selectize** (need `JQuery`)
+- https://selectize.dev
+- https://github.com/selectize/selectize.js
+- example: https://selectize.dev/docs/demos/tagging
+
+**Select2** (need `JQuery`)
+- https://select2.org
+- https://github.com/select2/select2
+- example: https://select2.org/tagging
+
+**Choices.js** (vanilla `Javascript`)
+- https://choices-js.github.io/Choices/
+- https://github.com/Choices-js/Choices
+- example: https://select2.org/tagging
+
+**Select-a11y** (still maintained?)
+- https://pidila.gitlab.io/scampi/documentation/select-a11y.html
+- https://gitlab.com/pidila/select-a11y
+- example: https://pidila.gitlab.io/select-a11y/
+
+jQuery accessible autocomplete list (still maintained?)
+- https://a11y.nicolas-hoffmann.net/autocomplete-list/
+- https://github.com/nico3333fr/jquery-accessible-autocomplete-list-aria
+- example:
+
+alphagov / Accessible autocomplete
+- https://github.com/alphagov/accessible-autocomplete
+- example : https://alphagov.github.io/accessible-autocomplete/examples/
+
+see also :
+- [10 Best Multiple Select Plugins In JavaScript (2025 Update)](https://www.jqueryscript.net/blog/best-multiple-select.html#vanilla)
+
+
+## UI - HTML tables
+
+- https://datatables.net/
+- https://github.com/DataTables/DataTables
+
+## UI - Accessible modal window
+
+Van11y accessible modal window system, using ARIA
+- https://van11y.net/accessible-modal/
+- https://github.com/nico3333fr/van11y-accessible-modal-window-aria
+- example: https://van11y.net/downloads/modal/demo/
+
+## UI - Accessible tab panel
+
+Van11y accessible tabs panel system, using ARIA
+- https://van11y.net/accessible-tab-panel/
+- https://github.com/nico3333fr/van11y-accessible-tab-panel-aria
+- example: https://van11y.net/downloads/tab-panel/demo/
+
+Tabs Pattern by ARIA Authoring Practices Guide (APG)
+- https://www.w3.org/WAI/ARIA/apg/patterns/tabs/
+- example 1 : https://www.w3.org/WAI/ARIA/apg/patterns/tabs/examples/tabs-automatic/
+- example 2 : https://www.w3.org/WAI/ARIA/apg/patterns/tabs/examples/tabs-manual/
+
+
+## UI - Accessibility
+
+ARIA Authoring Practices Guide (APG)
+- https://www.w3.org/WAI/ARIA/apg/patterns/
+  - https://www.w3.org/WAI/ARIA/apg/patterns/menubar/
+  - https://www.w3.org/WAI/ARIA/apg/patterns/tabs/
+
+
+## UI - CSS charts
+
+- Library: https://chartscss.org/
+- https://css-tricks.com/css-charts-grid-custom-properties/
+
+Warning:
+- use the `style` attribute instead of the `data` attribute to manage data values
+- cannot be used with current CSP rules
+
+## Bootstrap
+
+- https://getbootstrap.com/docs/5.3/components/scrollspy/
+- ...
+
+https://getbootstrap.com/docs/5.3/examples/
+- https://getbootstrap.com/docs/5.3/examples/features/
+- https://getbootstrap.com/docs/5.3/examples/album/
+- https://getbootstrap.com/docs/5.3/examples/footers/
+- https://getbootstrap.com/docs/5.3/examples/headers/

phive.xml

+<?xml version="1.0" encoding="UTF-8"?>
+<phive xmlns="https://phar.io/phive">
+  <phar name="captainhook" version="^5.14.4" installed="5.14.4" location="./bin/.phive/captainhook" copy="true"/>
+  <phar name="churn" version="^1.7.1" installed="1.7.1" location="./bin/.phive/churn" copy="true"/>
+  <phar name="composer-require-checker" version="^4.5.0" installed="4.5.0" location="./bin/.phive/composer-require-checker" copy="true"/>
+  <phar name="composer-unused" version="^0.8.5" installed="0.8.5" location="./bin/.phive/composer-unused" copy="true"/>
+  <phar name="deptrac" version="^1.0.2" installed="1.0.2" location="./bin/.phive/deptrac" copy="true"/>
+  <phar name="grumphp" version="^1.15.0" installed="1.15.0" location="./bin/.phive/grumphp" copy="true"/>
+  <phar name="phan" version="^5.4.1" installed="5.4.1" location="./bin/.phive/phan" copy="true"/>
+  <phar name="phpcpd" version="^6.0.3" installed="6.0.3" location="./bin/.phive/phpcpd" copy="true"/>
+  <phar name="phploc" version="^7.0.2" installed="7.0.2" location="./bin/.phive/phploc" copy="true"/>
+  <phar name="phpmd" version="^2.15.0" installed="2.15.0" location="./bin/.phive/phpmd" copy="true"/>
+  <phar name="phpstan" version="^1.10.50" installed="1.10.50" location="./bin/.phive/phpstan" copy="true"/>
+  <phar name="phpunit" version="^10.0.11" installed="10.0.11" location="./bin/.phive/phpunit" copy="true"/>
+  <phar name="php-cs-fixer" version="^3.45.0" installed="3.45.0" location="./bin/.phive/php-cs-fixer" copy="true"/>
+  <phar name="psalm" version="^5.18.0" installed="5.18.0" location="./bin/.phive/psalm" copy="true"/>
+</phive>

webapp/.env

+#######################################################################################################################
+# In all environments, the following files are loaded if they exist,
+# the latter taking precedence over the former:
+#
+#  * .env                contains default values for the environment variables needed by the app
+#  * .env.local          uncommitted file with local overrides
+#  * .env.$APP_ENV       committed environment-specific defaults
+#  * .env.$APP_ENV.local uncommitted environment-specific overrides
+#
+# Real environment variables win over .env files.
+#
+# DO NOT DEFINE PRODUCTION SECRETS IN THIS FILE NOR IN ANY OTHER COMMITTED FILES.
+# https://symfony.com/doc/current/configuration/secrets.html
+#
+# Run "composer dump-env prod" to compile .env files for production use (requires symfony/flex >=1.2).
+# https://symfony.com/doc/current/best_practices.html#use-environment-variables-for-infrastructure-configuration
+#######################################################################################################################
+#    - APP_SECRET                   Application secret to generate CSRF tokens
+#    - DATABASE_URL                 Database configuration (PostgreSQL)
+#    - MAILER_DSN                   SMTP configuration
+#######################################################################################################################
+#    - WEBAPP_DEFAULT_URI           Default URI used to generate URLs in a non-HTTP context
+#    - WEBAPP_EMAIL_FROM            Sender's email address to send emails from the web application
+#    - WEBAPP_EMAIL_ALERTING_TO     Email address for alert notifications (web application not working properly, ...)
+#    - WEBAPP_NAME                  Name of web application displayed to users
+#    - WEBAPP_SHORTNAME             Shortname of web application displayed to users
+#    - WEBAPP_I18N_DEFAULT_LOCALE   User interface language (default: 'en')
+#    - WEBAPP_SESSION_LIFETIME      Lifetime of the session in seconds (default: 3600 = 1 hour).
+#    - WEBAPP_TIMEZONE              Time Zone of web application (default: Europe/Paris)
+#    - WEBAPP_TRUSTED_HOSTS         List of allowed domains and IP to prevent HTTP Host header attacks
+#######################################################################################################################
+#    - WEBAPP_EXTERNAL_SILL_HOME_URL            SILL website URL
+#    - WEBAPP_EXTERNAL_SILL_SOFWARE_FR_LINK     SILL French URL to display a software
+#    - WEBAPP_EXTERNAL_SILL_SOFWARE_EN_LINK     SILL English URL to display a software
+#    - WEBAPP_EXTERNAL_SILL_JSON_DATA_URL       URL of SILL data in JSON format
+#######################################################################################################################
+#    - WEBAPP_STAT_MATOMO_ENABLED               Enable MATOMO (default: false)
+#    - WEBAPP_STAT_MATOMO_HOST                  MATOMO host
+#    - WEBAPP_STAT_MATOMO_WEBSITE_ID            MATOMO website ID
+#######################################################################################################################
+#    - WEBAPP_USER_CONFIG_RESET_PASSWORD_TOKEN_LIFETIME   Lifetime of reset password token in seconds (default: 1200 = 20 minutes).
+#    - WEBAPP_USER_CONFIG_MIN_PASSWORD_LENGTH             Minimum user password length (default: 12)
+#    - WEBAPP_SOFTWARE_VERSION_DISPLAYED_PUBLICLY         Public display of software version (default: true)
+#######################################################################################################################
+
+###> symfony/framework-bundle ###
+APP_ENV=dev
+APP_SECRET=f3ac0e2df6034f896e4ffbcd1bd7ebd9
+###< symfony/framework-bundle ###
+
+###> doctrine/doctrine-bundle ###
+# Format described at https://www.doctrine-project.org/projects/doctrine-dbal/en/latest/reference/configuration.html#connecting-using-a-url
+# IMPORTANT: You MUST configure your server version, either here or in config/packages/doctrine.yaml
+#
+# DATABASE_URL="sqlite:///%kernel.project_dir%/var/data.db"
+# DATABASE_URL="mysql://app:!ChangeMe!@127.0.0.1:3306/app?serverVersion=8.0.32&charset=utf8mb4"
+# DATABASE_URL="mysql://app:!ChangeMe!@127.0.0.1:3306/app?serverVersion=10.11.2-MariaDB&charset=utf8mb4"
+# DATABASE_URL="postgresql://app:!ChangeMe!@127.0.0.1:5432/app?serverVersion=16&charset=utf8"
+###< doctrine/doctrine-bundle ###
+DATABASE_URL="postgresql://comptoir_pg_user:comptoir_pg_password_ChangeIt@127.0.0.1:5432/comptoir_pg_database?serverVersion=14&charset=utf8"
+    ##################################################################################################
+    #               PostgreSQL, you MUST configure
+    #               your server version here (see: "?serverVersion=<yourPostgreServerVersion>")
+    ##################################################################################################
+
+###> symfony/messenger ###
+# Choose one of the transports below
+# MESSENGER_TRANSPORT_DSN=amqp://guest:guest@localhost:5672/%2f/messages
+# MESSENGER_TRANSPORT_DSN=redis://localhost:6379/messages
+MESSENGER_TRANSPORT_DSN=doctrine://default?auto_setup=0
+###< symfony/messenger ###
+
+###> symfony/mailer ###
+# MAILER_DSN=null://null
+###< symfony/mailer ###
+MAILER_DSN=smtp://smtp.example.org:465
+    ##################################################################################################
+    # Some examples:
+    # - if "smtp-user" is user email  ---> smtp://username%40example.org:userPassword@smtp.example.org:465
+    # - without "smtp-user"           ---> smtp://smtp.example.org:465
+    ##################################################################################################
+
+#######################################################################
+WEBAPP_DEFAULT_URI='https://webapp.example.org/'   # The default URI used to generate URLs in a non-HTTP context
+WEBAPP_EMAIL_FROM=no-reply@webapp.example.org
+WEBAPP_EMAIL_ALERTING_TO=sysadmin@webapp.example.org
+WEBAPP_NAME='Comptoir du Libre'
+WEBAPP_SHORTNAME='Comptoir'
+WEBAPP_I18N_DEFAULT_LOCALE='fr' # allowed values: 'en' or 'fr'
+WEBAPP_SESSION_LIFETIME=3600
+WEBAPP_TIMEZONE='Europe/Paris'
+#######################################################################
+WEBAPP_USER_CONFIG_PASSWORD_RESET_TOKEN_LIFETIME=1200
+WEBAPP_USER_CONFIG_MIN_PASSWORD_LENGTH=12
+WEBAPP_SOFTWARE_VERSION_DISPLAYED_PUBLICLY=true
+#######################################################################
+WEBAPP_EXTERNAL_SILL_HOME_URL='https://code.gouv.fr/sill/'
+WEBAPP_EXTERNAL_SILL_SOFWARE_FR_LINK='https://code.gouv.fr/sill/fr/software?id='
+WEBAPP_EXTERNAL_SILL_SOFWARE_EN_LINK='https://code.gouv.fr/sill/en/software?id='
+WEBAPP_EXTERNAL_SILL_JSON_DATA_URL='https://code.gouv.fr/sill/api/sill.json'
+#######################################################################
+# TODO: WEBAPP_OLD_ must be deleted after migration
+# TODO:             from the old website to the new Comptoir website
+WEBAPP_OLD_EXPORT_TYPE='dev' # Allowed: 'dev', 'prod'
+WEBAPP_OLD_EXPORT_TOKEN=''
+WEBAPP_OLD_EXPORT_SOFTWARE_JSON_URL='https://example.org/export/software_fullexport.json'
+WEBAPP_OLD_EXPORT_SOFTWARE_UPDATE_URL='https://example.org/software_fullexport_update/'
+WEBAPP_OLD_EXPORT_BIZ_MAPPING_JSON_URL='https://example.org/export/business-mapping_fullexport.json'
+WEBAPP_OLD_EXPORT_BIZ_MAPPING_UPDATE_URL='https://example.org/software_fullexport_update/'
+WEBAPP_OLD_EXPORT_USER_JSON_URL='https://example.org/export/users_fullexport.json'
+WEBAPP_OLD_EXPORT_USER_UPDATE_URL='https://example.org/users_fullexport_update/'
+#######################################################################
+WEBAPP_STAT_MATOMO_ENABLED=false
+WEBAPP_STAT_MATOMO_HOST="" # example: https://matomo.example.org (without final slash)
+WEBAPP_STAT_MATOMO_WEBSITE_ID=42
+#######################################################################
+
+# Webapp - List of allowed domains and IP to prevent HTTP Host header attacks
+WEBAPP_TRUSTED_HOSTS=''
+    ##################################################################################################
+    # If the incoming request's hostname doesn't match the regular expression,
+    # the application won't respond and the user will receive a 400 response.
+    #
+    #       Only allows incoming requests with example.org hostname
+    #       WEBAPP_TRUSTED_HOSTS='^127.0\.org$'
+    #
+    #       Only allows incoming requests with example.org hostname
+    #       WEBAPP_TRUSTED_HOSTS='^example\.org$'
+    #
+    #       Only allows incoming requests with example.org or trusted.example.com hostnames
+    #       WEBAPP_TRUSTED_HOSTS='^example\.org$|^trusted\.example\.com$'
+    #
+    #       Only allow incoming requests for all subdomains of example.org
+    #       WEBAPP_TRUSTED_HOSTS='^(.+\.)?example\.org$'
+    ##################################################################################################
+
+
+#######################################################################################################################
+#######################################################################################################################
+
+# We strongly recommend leaving the following environment variables unchanged
+SOFTWARE_NAME='Comptoir'
+SOFTWARE_RELEASE='version_major.minor.patch'
+    ##################################################################################################
+    # Do not modify if you have not identified
+    # the technical implications: HTTP headers using theses values, ...
+    ##################################################################################################

webapp/.env.dev

+#######################################################################################################################
+# Committed environment variables for the DEV environment
+#######################################################################################################################
+# In all environments, the following files are loaded if they exist,
+# the latter taking precedence over the former:
+#
+#  * .env                contains default values for the environment variables needed by the app
+#  * .env.local          uncommitted file with local overrides
+#  * .env.$APP_ENV       committed environment-specific defaults
+#  * .env.$APP_ENV.local uncommitted environment-specific overrides
+#
+# Real environment variables win over .env files.
+#######################################################################################################################
+APP_ENV=dev
+#######################################################################################################################
+WEBAPP_TRUSTED_HOSTS='^127.0.0.1$'
+# WEBAPP_TRUSTED_HOSTS='^127.0.0.1$'
+# WEBAPP_TRUSTED_HOSTS='^localhost$'
+# WEBAPP_TRUSTED_HOSTS='^webapp\.localhost$'
+# WEBAPP_TRUSTED_HOSTS='^127.0.0.1$|^localhost$'
+# WEBAPP_TRUSTED_HOSTS='^127.0.0.1$|^localhost$|^webapp\.localhost$'
+#######################################################################################################################
+WEBAPP_NAME='Comptoir du Libre DEV'
+WEBAPP_SHORTNAME='Comptoir DEV'
+WEBAPP_EMAIL_ALERTING_TO=sysadmin@dev.example.org
+WEBAPP_EMAIL_FROM=no-reply@dev.example.org
+WEBAPP_I18N_DEFAULT_LOCALE='fr' # allowed values: 'en' or 'fr'
+#WEBAPP_TIMEZONE='Europe/Paris'
+#WEBAPP_TIMEZONE='America/New_York'
+#######################################################################################################################
+MAILER_DSN=smtp://127.0.0.1:1025
+# MAILER_DSN=smtp://user%40example.org:password@mail.example.org:465
+# MAILER_DSN=smtp://example.org:465
+# MAILER_DSN=smtp://smtp.example.org:465
+# MAILER_DSN=smtp://smtp-user:smtp-password@smtp.example.org:465
+# MAILER_DSN=null://null
+    ##################################################################################################
+    # Some examples:
+    # - smtp-user is user email   ---> smtp://username%40example.org:userPassword@smtp.example.org:465
+    # - without smtp-user         ---> smtp://smtp.example.org:465
+    ##################################################################################################
+    # MAILER_DSN=null://null
+    # MAILER_DSN=smtp://user%40example.org:password@mail.example.org:465
+    #    error 500 ---> Failed to authenticate on SMTP server with username "user@example.org"
+    #                   using the following authenticators: "LOGIN", "PLAIN".
+    #                   Authenticator "LOGIN" returned "Expected response code "235" but got code "535",
+    #                   with message "535 5.7.8 Error: authentication failed: authentication failure".".
+    # MAILER_DSN=smtp://mail.example.org:465
+    #    error 500 ---> Expected response code "250/251/252" but got code "554",
+    #                   with message "554 5.7.1 <sysadmin@dev.example.org>: Recipient address rejected: Access denied".
+    # MAILER_DSN=smtp://smtp.example.org:465
+    #    error 500 ---> Connection could not be established with host "ssl://smtp.example.org:465":
+    #                   stream_socket_client(): php_network_getaddresses: getaddrinfo failed: Name or service not known
+    # MAILER_DSN=smtp://example.org:465
+    #    error 500 ---> Connection could not be established with host "ssl://smtp.example.org:465":
+    #                   stream_socket_client(): unable to connect to ssl://example.org:465 (Connection timed out)
+    # MAILER_DSN=smtp://0.0.0.0:9091
+    #    error 500 ---> Connection could not be established with host "0.0.0.0:9091":
+    #                   stream_socket_client(): unable to connect to 0.0.0.0:9091 (Connection refused)
+    ##################################################################################################
+
+
+
+#######################################################################################################################
+#######################################################################################################################
+#######################################################################################################################
+
+# We strongly recommend leaving the following environment variables unchanged
+SOFTWARE_NAME='Comptoir-DEV-Software'
+    ##################################################################################################
+    # Do not modify if you have not identified
+    # the technical implications: HTTP headers using this value, ...
+    ##################################################################################################

webapp/.env.prod

+#######################################################################################################################
+# In all environments, the following files are loaded if they exist,
+# the latter taking precedence over the former:
+#
+#  * .env                contains default values for the environment variables needed by the app
+#  * .env.local          uncommitted file with local overrides
+#  * .env.$APP_ENV       committed environment-specific defaults
+#  * .env.$APP_ENV.local uncommitted environment-specific overrides
+#
+# Real environment variables win over .env files.
+#
+# DO NOT DEFINE PRODUCTION SECRETS IN THIS FILE NOR IN ANY OTHER COMMITTED FILES.
+# https://symfony.com/doc/current/configuration/secrets.html
+#
+# Run "composer dump-env prod" to compile .env files for production use (requires symfony/flex >=1.2).
+# https://symfony.com/doc/current/best_practices.html#use-environment-variables-for-infrastructure-configuration
+#######################################################################################################################
+#    - APP_SECRET                   Application secret to generate CSRF tokens
+#    - DATABASE_URL                 Database configuration (PostgreSQL)
+#    - MAILER_DSN                   SMTP configuration
+#######################################################################################################################
+#    - WEBAPP_DEFAULT_URI           Default URI used to generate URLs in a non-HTTP context
+#    - WEBAPP_EMAIL_FROM            Sender's email address to send emails from the web application
+#    - WEBAPP_EMAIL_ALERTING_TO     Email address for alert notifications (web application not working properly, ...)
+#    - WEBAPP_NAME                  Name of web application displayed to users
+#    - WEBAPP_SHORTNAME             Shortname of web application displayed to users
+#    - WEBAPP_I18N_DEFAULT_LOCALE   User interface language (default: 'en')
+#    - WEBAPP_SESSION_LIFETIME      Lifetime of the session in seconds (default: 3600 = 1 hour).
+#    - WEBAPP_TIMEZONE              Time Zone of web application (default: Europe/Paris)
+#    - WEBAPP_TRUSTED_HOSTS         List of allowed domains and IP to prevent HTTP Host header attacks
+#######################################################################################################################
+#    - WEBAPP_EXTERNAL_SILL_HOME_URL            SILL website URL
+#    - WEBAPP_EXTERNAL_SILL_SOFWARE_FR_LINK     SILL French URL to display a software
+#    - WEBAPP_EXTERNAL_SILL_SOFWARE_EN_LINK     SILL English URL to display a software
+#    - WEBAPP_EXTERNAL_SILL_JSON_DATA_URL       URL of SILL data in JSON format
+#######################################################################################################################
+#    - WEBAPP_STAT_MATOMO_ENABLED               Enable web analytics MATOMO (default: false)
+#    - WEBAPP_STAT_MATOMO_HOST                  MATOMO host
+#    - WEBAPP_STAT_MATOMO_WEBSITE_ID            MATOMO website ID
+#######################################################################################################################
+#    - WEBAPP_USER_CONFIG_RESET_PASSWORD_TOKEN_LIFETIME   Lifetime of reset password token in seconds (default: 1200 = 20 minutes).
+#    - WEBAPP_USER_CONFIG_MIN_PASSWORD_LENGTH             Minimum user password length (default: 12)
+#    - WEBAPP_SOFTWARE_VERSION_DISPLAYED_PUBLICLY         Public display of software version (default: true)
+#######################################################################################################################
+
+
+
+# Environment
+APP_ENV=prod
+
+# Application secret is required to generate CSRF tokens
+APP_SECRET=ThisTokenIsNotSoSecretChangeIt
+    ##################################################################################################
+    # Its value should be a series of characters, numbers and symbols chosen randomly
+    # and the recommended length is around 32 characters.
+    # https://symfony.com/doc/current/reference/configuration/framework.html#secret
+    ##################################################################################################
+
+# Database configuration (PostgreSQL)
+DATABASE_URL="postgresql://comptoir_pg_user:comptoir_pg_password_ChangeIt@127.0.0.1:5432/comptoir_pg_database?serverVersion=14&charset=utf8"
+    ##################################################################################################
+    # you MUST configure your PostgreSQL server version.
+    # ----> "?serverVersion=<your-PostgreSQL-Server-Version>"
+    ##################################################################################################
+
+# SMTP configuration
+MAILER_DSN=smtp://smtp-user:smtp-password@smtp.example.org:465
+    ##################################################################################################
+    # Some examples:
+    # - if "smtp-user" is user email  ---> smtp://username%40example.org:userPassword@smtp.example.org:465
+    # - without "smtp-user"           ---> smtp://smtp.example.org:465
+    ##################################################################################################
+
+#######################################################################################################################
+
+# Webapp - Default URI used to generate URLs in a non-HTTP context
+WEBAPP_DEFAULT_URI='https://example.org/'
+
+# Webapp - Sender's email address to send emails from the web application
+WEBAPP_EMAIL_FROM=no-reply@example.org
+
+# Webapp - Email address for alert notifications (web application not working properly, ...)
+WEBAPP_EMAIL_ALERTING_TO=sysadmin@example.org
+
+# Webapp - Name of web application displayed to users
+WEBAPP_NAME='Comptoir du Libre'
+WEBAPP_SHORTNAME='Comptoir'
+
+# Webapp - User interface language
+WEBAPP_I18N_DEFAULT_LOCALE='fr' # allowed values: 'en' or 'fr'
+
+# Webapp - Lifetime of the session in seconds
+WEBAPP_SESSION_LIFETIME=3600
+
+# Webapp - Time Zone
+WEBAPP_TIMEZONE='Europe/Paris'
+
+# Webapp - List of allowed domains and IP to prevent HTTP Host header attacks
+WEBAPP_TRUSTED_HOSTS='^example\.org$'
+    ##################################################################################################
+    # If the incoming request's hostname doesn't match the regular expression,
+    # the application won't respond and the user will receive a 400 response.
+    #
+    #       Only allows incoming requests with example.org hostname
+    #       WEBAPP_TRUSTED_HOSTS='^example\.org$'
+    #
+    #       Only allows incoming requests with example.org or trusted.example.com hostnames
+    #       WEBAPP_TRUSTED_HOSTS='^example\.org$|^trusted\.example\.com$'
+    #
+    #       Only allow incoming requests for all subdomains of example.org
+    #       WEBAPP_TRUSTED_HOSTS='^(.+\.)?example\.org$'
+    ##################################################################################################
+
+
+#######################################################################################################################
+
+# SILL website URL
+WEBAPP_EXTERNAL_SILL_HOME_URL='https://code.gouv.fr/sill/'
+
+# SILL French URL to display a software
+WEBAPP_EXTERNAL_SILL_SOFWARE_FR_LINK='https://code.gouv.fr/sill/fr/software?id='
+
+# SILL English URL to display a software
+WEBAPP_EXTERNAL_SILL_SOFWARE_EN_LINK='https://code.gouv.fr/sill/en/software?id='
+
+# URL of SILL data in JSON format
+WEBAPP_EXTERNAL_SILL_JSON_DATA_URL='https://code.gouv.fr/sill/api/sill.json'
+
+#######################################################################################################################
+
+# Web analytics MATOMO
+WEBAPP_STAT_MATOMO_ENABLED=false
+WEBAPP_STAT_MATOMO_HOST="" # example: https://matomo.example.org (without final slash)
+WEBAPP_STAT_MATOMO_WEBSITE_ID=42
+
+#######################################################################################################################
+
+# Lifetime of reset password token in seconds
+WEBAPP_USER_CONFIG_PASSWORD_RESET_TOKEN_LIFETIME=1200
+
+# Minimum user password length
+WEBAPP_USER_CONFIG_MIN_PASSWORD_LENGTH=12
+
+# Public display of software version (default: true)
+WEBAPP_SOFTWARE_VERSION_DISPLAYED_PUBLICLY=true
+
+#######################################################################################################################

webapp/.env.test

+#######################################################################################################################
+# Comomn environment variables for the TEST environment
+#######################################################################################################################
+# In all environments, the following files are loaded if they exist,
+# the latter taking precedence over the former:
+#
+#  * .env                contains default values for the environment variables needed by the app
+#  * .env.local          uncommitted file with local overrides
+#  * .env.$APP_ENV       committed environment-specific defaults
+#  * .env.$APP_ENV.local uncommitted environment-specific overrides
+#
+# Real environment variables win over .env files.
+#######################################################################################################################
+KERNEL_CLASS='App\Kernel'
+APP_SECRET='$ecretf0rt3st'
+SYMFONY_DEPRECATIONS_HELPER=999999
+PANTHER_APP_ENV=panther
+PANTHER_ERROR_SCREENSHOT_DIR=./var/error-screenshots
+#######################################################################################################################
+#WEBAPP_TRUSTED_HOSTS='^127.0.0.1$'
+WEBAPP_TRUSTED_HOSTS='^localhost$'
+#######################################################################################################################
+WEBAPP_NAME='Comptoir du Libre TEST'
+WEBAPP_SHORTNAME='ComptoirTest'
+WEBAPP_EMAIL_ALERTING_TO=sysadmin@test.example.org
+WEBAPP_EMAIL_FROM=no-reply@test.example.org
+WEBAPP_I18N_DEFAULT_LOCALE='fr'
+#WEBAPP_TIMEZONE='America/New_York'
+#######################################################################################################################
+MAILER_DSN=null://null
+#######################################################################################################################
+#######################################################################################################################
+#######################################################################################################################
+
+# We strongly recommend leaving the following environment variables unchanged
+# We strongly recommend leaving the following environment variables unchanged
+SOFTWARE_NAME='Comptoir-TEST-Software'
+    ##################################################################################################
+    # Do not modify if you have not identified
+    # the technical implications: HTTP headers using this value, ...
+    ##################################################################################################

webapp/.gitignore

+
+###> symfony/framework-bundle ###
+/.env.local
+/.env.local.php
+/.env.*.local
+/config/secrets/prod/prod.decrypt.private.php
+/public/bundles/
+/var/
+/vendor/
+###< symfony/framework-bundle ###
+
+###> phpunit/phpunit ###
+/phpunit.xml
+.phpunit.result.cache
+###< phpunit/phpunit ###
+
+###> symfony/phpunit-bridge ###
+.phpunit.result.cache
+/phpunit.xml
+###< symfony/phpunit-bridge ###
+
+###> symfony/asset-mapper ###
+/public/assets/
+/assets/vendor/
+###< symfony/asset-mapper ###

webapp/assets/app.js

+import './bootstrap.js';
+/*
+ * Welcome to your app's main JavaScript file!
+ *
+ * This file will be included onto the page via the importmap() Twig function,
+ * which should already be in your base.html.twig.
+ */
+import './styles/app.css';
+
+console.log('This log comes from assets/app.js - welcome to AssetMapper! 🎉');

webapp/assets/bootstrap.js

+import { startStimulusApp } from '@symfony/stimulus-bundle';
+
+const app = startStimulusApp();
+// register any custom, 3rd party controllers here
+// app.register('some_controller_name', SomeImportedController);

webapp/assets/controllers.json

+{
+    "controllers": {
+        "@symfony/ux-turbo": {
+            "turbo-core": {
+                "enabled": true,
+                "fetch": "eager"
+            },
+            "mercure-turbo-stream": {
+                "enabled": false,
+                "fetch": "eager"
+            }
+        }
+    },
+    "entrypoints": []
+}