updating firewall config for webpack-dev-server 4

Author: weaverryan

frontend/encore/dev-server.rst

@@ -18,55 +18,6 @@ As a consequence, the ``link`` and ``script`` tags need to point to the new serv
 :ref:`processing your assets through entrypoints.json <load-manifest-files>` in some other way),
 you're done: the paths in your templates will automatically point to the dev server.
 
-Enabling HTTPS using the Symfony Web Server
--------------------------------------------
-
-If you're using the :doc:`Symfony web server </setup/symfony_server>` locally with HTTPS,
-you'll need to also tell the dev-server to use HTTPS. To do this, you can reuse the Symfony web
-server SSL certificate:
-
-.. code-block:: terminal
-
-    # Unix-based systems
-    $ yarn dev-server --https --pfx=$HOME/.symfony/certs/default.p12
-
-    # Windows
-    $ encore dev-server --https --pfx=%UserProfile%\.symfony\certs\default.p12
-
-To avoid repeating yourself, you can also update ``package.json`` to include
-these options automatically:
-
-.. code-block:: diff
-
-    {
-        ...
-        "scripts": {
-    -        "dev-server": "encore dev-server",
-    +        "dev-server": "encore dev-server --https --pfx=$HOME/.symfony/certs/default.p12 --allowed-hosts=mydomain.wip",
-            ...
-        }
-    }
-
-If you experience issues related to CORS (Cross Origin Resource Sharing), add
-the ``--firewall false`` and ``--port`` options to the ``dev-server``
-command in the ``package.json`` file:
-
-.. code-block:: diff
-
-    {
-        ...
-        "scripts": {
-    -        "dev-server": "encore dev-server",
-    +        "dev-server": "encore dev-server --port 8080 --firewall false",
-            ...
-        }
-    }
-
-.. caution::
-
-    Beware that `it's not recommended to disable host checking`_ in general, but
-    here it's required to solve the CORS issue.
-
 dev-server Options
 ------------------
 
@@ -100,6 +51,51 @@ method in your ``webpack.config.js`` file:
 
     The ``Encore.configureDevServerOptions()`` method was introduced in Encore 0.28.4.
 
+Enabling HTTPS using the Symfony Web Server
+-------------------------------------------
+
+If you're using the :doc:`Symfony web server </setup/symfony_server>` locally with HTTPS,
+you'll need to also tell the dev-server to use HTTPS. To do this, you can reuse the Symfony web
+server SSL certificate:
+
+.. code-block:: javascript
+
+    // webpack.config.js
+    // ...
+
+    Encore
+        // ...
+
+    .configureDevServerOptions(options => {
+        options.https = {
+            pfx: '/path/to/.symfony/certs/default.p12',
+        }
+    })
+
+Then make sure you run the ``dev-server`` with the ``--https`` option:
+
+.. code-block:: terminal
+
+    $ yarn encore dev-server --https
+
+CORS Issues
+-----------
+
+If you experience issues related to CORS (Cross Origin Resource Sharing), set
+the ``firewall`` option:
+
+.. code-block:: javascript
+
+    // webpack.config.js
+    // ...
+
+    Encore
+        // ...
+
+    .configureDevServerOptions(options => {
+        options.firewall = false;
+    })
+
 Hot Module Replacement HMR
 --------------------------
 
@@ -116,4 +112,3 @@ your page. HMR works automatically with CSS (as long as you're using the
     CSS. That is no longer needed.
 
 .. _`webpack-dev-server`: https://webpack.js.org/configuration/dev-server/
-.. _`it's not recommended to disable host checking`: https://webpack.js.org/configuration/dev-server/#devserverdisablehostcheck