{"catalogRevision":"cat_f13ab9a494120b5e","recipeId":"page:guides:symfony:configuration-secrets","recipeRevision":"r1","canonicalPath":"/guides/symfony/configuration-secrets","label":"Configure environment and secrets for Symfony","family":"Framework operation","summary":"Configuration and secrets for a Symfony app on Ample. Verified on Symfony: an --env value delivered encrypted and reported as present without being echoed (secret=set). Build and start: composer install --no-dev from composer.lock with Symfony Runtime's dotenv disabled (extra.runtime.disable_dotenv; .env never ships, its values arrive as encrypted env, and compile-time parameters such as DEFAULT_URI need a default), then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template with APP_ENV=prod.","representativeQueries":["Configure environment and secrets for Symfony","Where can I host Configure environment and secrets built with Symfony?","I need a tested app-configuration delivery method and secret-handling guidance; platform injection/rotation is not assumed."],"breadcrumbIds":["discovery","stack","stack:frameworks","stack:framework-symfony","page:guides:symfony:configuration-secrets"],"breadcrumbs":[{"id":"discovery","label":"Agent hosting discovery","canonicalPath":"/discover/discovery","kind":"root"},{"id":"stack","label":"Frameworks and execution targets","canonicalPath":"/discover/stack","kind":"facet"},{"id":"stack:frameworks","label":"Frameworks","canonicalPath":"/discover/stack/frameworks","kind":"group"},{"id":"stack:framework-symfony","label":"Symfony","canonicalPath":"/discover/stack/framework-symfony","kind":"atom"},{"id":"page:guides:symfony:configuration-secrets","label":"Configure environment and secrets for Symfony","canonicalPath":"/guides/symfony/configuration-secrets","kind":"recipe"}],"parentIds":["stack:framework-symfony","intent:configure-deployment","pattern:public-web-service"],"parents":[{"id":"stack:framework-symfony","label":"Symfony","canonicalPath":"/discover/stack/framework-symfony","kind":"atom"},{"id":"intent:configure-deployment","label":"Configure deployment","canonicalPath":"/discover/intent/configure-deployment","kind":"atom"},{"id":"pattern:public-web-service","label":"Public web service","canonicalPath":"/discover/pattern/public-web-service","kind":"atom"}],"resourceRequirements":["primitive:compute"],"infrastructureRequirements":[{"primitiveId":"primitive:compute","label":"Compute","canonicalPath":"/discover/primitive/compute","status":"verified","summary":"Apps run in isolated x86_64 Firecracker microVMs that auto-pause when idle and wake on request; sizes are the priced VM sizes."}],"framework":"Symfony","workload":"Configure environment and secrets","releaseStatus":"published","supportStatus":"verified","executionStatus":"ready","docsOnly":false,"prerequisites":["A Symfony project (composer install --no-dev from composer.lock with Symfony Runtime's dotenv disabled (extra.runtime.disable_dotenv; .env never ships, its values arrive as encrypted env, and compile-time parameters such as DEFAULT_URI need a default), then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template with APP_ENV=prod)","An Ample account token with servers:write"],"testedConfiguration":{"template":"php-8.5","runtime":"php","size":"s-1vcpu-1gb","install":"composer install --no-dev --prefer-dist --no-interaction --no-progress --optimize-autoloader","start":"frankenphp php-server --listen :$PORT --root public"},"inputSchema":{"additionalProperties":false,"properties":{"env":{"description":"Encrypted environment variables","items":{"pattern":"^[A-Z][A-Z0-9_]*=.*$","type":"string"},"maxItems":50,"type":"array"},"name":{"description":"App name","maxLength":63,"minLength":1,"pattern":"^[a-z0-9-]+$","type":"string"},"path":{"description":"Project directory or ample.toml service","maxLength":512,"minLength":1,"type":"string"},"release_command":{"description":"Migration command run before activation","maxLength":512,"type":"string"}},"required":["env","name","path"],"type":"object"},"outputSchema":null,"workflowSteps":[{"title":"Build and start","body":"composer install --no-dev from composer.lock with Symfony Runtime's dotenv disabled (extra.runtime.disable_dotenv; .env never ships, its values arrive as encrypted env, and compile-time parameters such as DEFAULT_URI need a default), then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template with APP_ENV=prod; the server must bind 0.0.0.0 on PORT."},{"title":"Pass values on deploy","body":"Use --env KEY=value (repeatable) or --env-file; values are encrypted at rest and reused on redeploys. Declare names only in ample.toml.","command":"ample deploy . --name <app-name> --public --env MY_SECRET=..."},{"title":"Verify","body":"Fetch the live URL and /p/configuration-secrets on the example; on failure read the build and runtime logs.","command":"ample logs <deployment_id> --kind build"}],"examples":[{"title":"Symfony pattern fixture","description":"Verified configuration and secrets on Symfony.","sourceRef":"tests/deploy-canaries/symfony-patterns"}],"successChecks":[{"description":"app responds on its public URL","kind":"http_get","path":"/","expect":"ample canary symfony patterns"},{"description":"configuration-secrets check from the example","kind":"http_get","path":"/p/configuration-secrets","expect":"see the pattern fixture checks"}],"limitations":["Verified on the php-8.5 template at s-1vcpu-1gb; other sizes and Symfony major versions are not verified.","Region, compliance attestations and request-duration limits are unknown and not claimed."],"costEstimate":{"currency":"USD","monthlyAmount":5.0,"authoritative":true,"basis":"size prices from pricing.toml (loaded by the API) at build revision 752d2a7584688a5d233b2c53d38307d289b04d3e","components":[{"name":"app server","size":"s-1vcpu-1gb","quantity":1.0,"monthlyAmount":5.0}],"note":"Always-on monthly price of the tested sizes; apps auto-pause when idle. Buckets are allocation-priced per quota and not included."},"evidenceSummary":[{"kind":"canary_run","summary":"Symfony pattern fixture deployed on Ample (composer install --no-dev from composer.lock with Symfony Runtime's dotenv disabled (extra.runtime.disable_dotenv; .env never ships, its values arrive as encrypted env, and compile-time parameters such as DEFAULT_URI need a default), then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template with APP_ENV=prod); for this guide: an --env value delivered encrypted and reported as present without being echoed (secret=set).","observedAt":"2026-09-20T22:23:52Z","implementationRevision":"64a7bb8e37dd (CLI 64a7bb8)","expiresAt":"2027-03-19T22:23:52Z","scope":{"checks":["/p/configuration-secrets"],"template":"php-8.5"}}],"lastVerifiedAt":"2026-09-20T22:23:52Z","mcpBinding":{"registryRef":"mcp:ample_deploy","toolName":"ample_deploy","schemaHash":"876465fce906da0c224d62961d3343064108ebe30af80cf1b87094974e948853","observedAt":"2026-09-22T00:31:22.774679+00:00","implementationRevision":"e6446ceea69b","requiredScopes":["servers:write"],"bindingState":"current"},"unknowns":["region availability is unknown until a verified region fact is recorded","compliance attestations are unknown; none are claimed"],"formats":{"html":"https://ample.computer/guides/symfony/configuration-secrets","markdown":"https://ample.computer/guides/symfony/configuration-secrets.md","json":"https://api.ample.computer/v1/catalog/recipes/page%3Aguides%3Asymfony%3Aconfiguration-secrets"},"nextActions":[{"actionId":"browse-catalog","label":"Browse the catalog index","operationId":"catalog_index","method":"GET","relativePath":"/v1/catalog","origin":"api","parameters":{},"requiresAuthentication":false,"requiresApproval":false},{"actionId":"search-recipes","label":"Search published recipes by intent, stack and constraints","operationId":"search_recipes","method":"POST","relativePath":"/v1/catalog/search","origin":"api","parameters":{"body":{"limit":5,"query":"Configure environment and secrets for Symfony"}},"requiresAuthentication":false,"requiresApproval":false},{"actionId":"plan:page:guides:symfony:configuration-secrets","label":"Prepare a side-effect-free deployment plan for an authorized project","operationId":"plan_deployment","method":"POST","relativePath":"/v1/catalog/plan","origin":"api","parameters":{"body":{"inputs":{},"projectId":"<workspace or server id you own>","recipeId":"page:guides:symfony:configuration-secrets","recipeRevision":"r1"}},"requiresAuthentication":true,"requiresApproval":false},{"actionId":"auth-setup","label":"Read the existing agent authentication setup","operationId":"existing_auth_setup","method":"GET","relativePath":"/mcp/setup","origin":"api","parameters":{},"requiresAuthentication":false,"requiresApproval":false},{"actionId":"browse:stack:framework-symfony","label":"Browse Symfony","operationId":"browse_node","method":"GET","relativePath":"/v1/catalog/nodes/stack%3Aframework-symfony","origin":"api","parameters":{"nodeId":"stack:framework-symfony"},"requiresAuthentication":false,"requiresApproval":false},{"actionId":"browse:intent:configure-deployment","label":"Browse Configure deployment","operationId":"browse_node","method":"GET","relativePath":"/v1/catalog/nodes/intent%3Aconfigure-deployment","origin":"api","parameters":{"nodeId":"intent:configure-deployment"},"requiresAuthentication":false,"requiresApproval":false},{"actionId":"browse:pattern:public-web-service","label":"Browse Public web service","operationId":"browse_node","method":"GET","relativePath":"/v1/catalog/nodes/pattern%3Apublic-web-service","origin":"api","parameters":{"nodeId":"pattern:public-web-service"},"requiresAuthentication":false,"requiresApproval":false}]}