Exponential Platform Legacy v3.3.44.8

A release of the 3.3 line (branch 3.x: Symfony 5.4 LTS, se7enxweb/oss ~3.3.0.0, LegacyBridge 3, the Exponential 6 legacy kernel). It stops the shipped .htaccess from forcing the development environment, makes TRUSTED_PROXIES work, corrects the Apache examples for this line's public/ layout, and ships the book.

:::bash
composer create-project se7enxweb/exponential-platform-legacy:~3.3.44.8 my_project

Fixes in the code and configuration

• public/.htaccess no longer forces APP_ENV=dev (66f13e1). In v3.3.44.7 it set the dev environment for every request under Apache, whatever .env.local said. APP_ENV now comes from the server environment, .env.local or .env.
• TRUSTED_PROXIES sets the proxies Symfony trusts (d820756): framework.trusted_proxies in config/packages/ezpublish.yaml reads it and trusts X-Forwarded-For, -Proto and -Port from those proxies. Before, only the platform's deprecated fallback read it. The comments in .env, .platform.app.yaml and the installation guide now say so (ef13795).
• The legacy settings no longer activate ezplatformsearch (5ace002), an extension this line does not install.
• Composer has the ibexa-assets script that make and the Deployer recipe call (21004ae); the Makefile installs the pinned Node.js version and drops the images target (8374e7c).
• Platform.sh runs the 3.x layout (public/, index.php, APP_* variables) on PHP 8.3 (aa00125).
• The Apache examples in doc/apache2 fit this line (7248e69). vhost.template was the 2.5 template (web/, app.php), so a virtual host generated from it answered every dynamic URL with 404. It now serves public/ with public/index.php, sets APP_ENV, APP_DEBUG, APP_HTTP_CACHE and TRUSTED_PROXIES from the placeholders bin/vhost.sh fills, keeps the legacy asset rules and sends DFS images to index.php; the Readme and the example .htaccess follow. Its rule against scripts under var/ matches again (984732f).

Existing projects: Composer does not update public/.htaccess, config/ or doc/. Apply the commits above to your copy by hand, using each commit as the recipe (chapter 10 of the book lists them).

Documentation

• The book in doc/book/: thirteen chapters on all four release lines, the same book as on master (where the newest copy is), with a note on which branch the copy is on (887613e). The README has a documentation section (2236fbf) and the installation guide points to the book (1f6fb31).
• The README and the installation guide use legacy commands that exist: there is no ezpublish:legacy:clear-cache or ezpublish:legacy:generate-autoloads in any LegacyBridge release; the guides now run bin/php/ezcache.php and bin/php/ezpgenerateautoloads.php through exponential:legacy:script, and run the legacy cronjobs through the bridge so they get the platform's database settings (e20aed5, e278fde).
• The guides clone over HTTPS instead of SSH (f557295).
• SECURITY.md and the README name security@se7enx.com, the same policy as on master (9b626bc).

Full list of changes: https://github.com/se7enxweb/exponential-platform-legacy/compare/v3.3.44.7...v3.3.44.8