## Configure Environment and Secrets for Symfony

**Framework Operation**: Configuration and secrets for a Symfony app on Ample. Verified on Symfony: an --env value delivered encrypted and reported as present without being echoed (secret=set). Build and start:

```bash
composer install --no-dev from composer.lock with Symfony Runtime's dotenv disabled (extra.runtime.disable_dotenv; .env never ships, its values arrive as encrypted env, and compile-time parameters such as DEFAULT_URI need a default), then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template with APP_ENV=prod.
```

### Prerequisites
- A Symfony project (composer install --no-dev from composer.lock with Symfony Runtime's dotenv disabled (extra.runtime.disable_dotenv; .env never ships, its values arrive as encrypted env, and compile-time parameters such as DEFAULT_URI need a default), then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template with APP_ENV=prod).
- An Ample account token with servers:write.

### Workflow Steps
1. **Build and Start**  
   `composer install --no-dev from composer.lock with Symfony Runtime's dotenv disabled (extra.runtime.disable_dotenv; .env never ships, its values arrive as encrypted env, and compile-time parameters such as DEFAULT_URI need a default), then FrankenPHP serving public/ (php-server with the index.php fallback) reading PORT on the php-8.5 template with APP_ENV=prod; the server must bind 0.0.0.0 on PORT.`

2. **Pass Values on Deploy**  
   Use --env KEY=value (repeatable) or --env-file; values are encrypted at rest and reused on redeploys. Declare names only in ample.toml.
   
   ```bash
   ample deploy . --name  --public --env MY_SECRET=...
   ```

3. **Verify**  
   Fetch the live URL and /p/configuration-secrets on the example; on failure read the build and runtime logs.
   
   ```bash
   ample logs  --kind build
   ```

### Limitations
- Verified on the php-8.5 template at s-1vcpu-1gb; other sizes and Symfony major versions are not verified.
- Region, compliance attestations and request-duration limits are unknown and not claimed.

### Cost Estimate
- **Monthly Amount**: $5.00 (USD)
- Components:
  - App server (s-1vcpu-1gb): $5.00

### Success Checks
- App responds on its public URL (/), expect "ample canary symfony patterns".
- Configuration-secrets check from the example, expect "see the pattern fixture checks".