helhum/typo3-secure-web

Set up secure TYPO3 web directory containing only public assets

helhum/typo3-secure-web

This package is superseded by TYPO3 Composer installers 4 and 5 (TYPO3 v11 and v12) and the native public/private resources handling., _(*1)

This is a composer package that aims to create a web directory for TYPO3, which only contains the entry scripts and links to public assets., _(*3)

This package works with all TYPO3 versions higher than 9.5.20., _(*4)

Installation

composer require helhum/typo3-secure-web, _(*5)

Configuration

Put the following in your root composer.json file:, _(*6)

    "extra": {
        "typo3/cms": {
            "root-dir": "private",
            "web-dir": "public"
        }
    }

This package will then set up the web server document root inside the public folder and TYPO3 inside the private folder. The private folder will look familiar and will contain typo3, typo3conf, fileadmin, typo3temp folders, while public will only have the entry scripts and links to fileadmin, typo3temp/assets and , Resources/Public of all installed (system) extensions., _(*7)

Note that if your FAL local storage(s) has(have) a different folder name than fileadmin, you need to create links to this(these) folder(s) in the public directory as well. , _(*8)