Use typo3-secure-web

.gitignore

-bin
 vendor
-typo3_src
-html/index.php
-html/typo3
-html/fileadmin/
-html/typo3conf/ext/*
-!html/typo3conf/ext/t3omy/
-!html/typo3conf/ext/t3o_slack/
-!html/typo3conf/ext/karma/
-html/typo3conf/AdditionalConfiguration.php
-html/typo3conf/deprecation_*
-html/typo3conf/ENABLE_INSTALL_TOOL
-html/typo3conf/PackageStates.php
-html/typo3conf/l10n
-html/typo3temp/
-html/uploads/
+html
+!html/humans.txt
+private
+!private/typo3conf/LocalConfiguration.php
+!private/typo3conf/AdditionalConfiguration.ddev.php
+!private/typo3conf/.gitignore
 /auth.json
-/html/typo3conf/realurl_autoconf.php
 .php_cs.cache
 .ddev/db_snapshots
+.ddev/sequelpro.spf
 .data
-/.ddev/sequelpro.spf
 .idea

composer.json

@@ -16,10 +16,6 @@
       "type": "vcs",
       "url": "https://git-t3o.typo3.org/t3o/t3olayout.git"
     },
-    {
-      "type": "vcs",
-      "url": "https://git-t3o.typo3.org/t3o/t3o_ldap.git"
-    },
     {
       "type": "vcs",
       "url": "https://git-t3o.typo3.org/t3o/gitlab_api.git"
@@ -30,11 +26,9 @@
     "issues": "https://git-t3o.typo3.org/t3o/my/issues"
   },
   "require": {
-    "typo3/cms": "^8.7",
     "helhum/typo3-console": "^5.0",
     "dmitryd/typo3-realurl": "^2.1",
     "t3o/t3olayout": "^3.0",
-    "t3o/t3o_ldap": "^1.0",
     "in2code/femanager": "^4.0",
     "in2code/userprofile": "^0.2",
     "sjbr/static-info-tables": "^6.5",
@@ -42,7 +36,9 @@
     "gordalina/cachetool": "^3.2",
     "t3o/t3omy": "@dev",
     "t3o/karma": "@dev",
-    "t3o/t3o_slack": "@dev"
+    "t3o/t3o_slack": "@dev",
+    "t3o/t3o_ldap": "@dev",
+    "helhum/typo3-secure-web": "^0.2.8"
   },
   "config": {
     "platform": {
@@ -52,6 +48,7 @@
   "extra": {
     "typo3/cms": {
       "web-dir": "html",
+      "root-dir": "private",
       "cms-package-dir": "{$vendor-dir}/typo3/cms"
     }
   },

html/typo3conf/AdditionalConfiguration.ddev.php → private/typo3conf/AdditionalConfiguration.ddev.php

@@ -4,13 +4,16 @@
  */
 $GLOBALS['TYPO3_CONF_VARS']['SYS']['trustedHostsPattern'] = '.*';
 
-$GLOBALS['TYPO3_CONF_VARS']['DB']['Connections']['Default'] = array_merge($GLOBALS['TYPO3_CONF_VARS']['DB']['Connections']['Default'], [
-                    'dbname' => 'db',
-                    'host' => 'db',
-                    'password' => 'db',
-                    'port' => '3306',
-                    'user' => 'db',
-]);
+$GLOBALS['TYPO3_CONF_VARS']['DB']['Connections']['Default'] = array_merge(
+    $GLOBALS['TYPO3_CONF_VARS']['DB']['Connections']['Default'],
+    [
+        'dbname' => 'db',
+        'host' => 'db',
+        'password' => 'db',
+        'port' => '3306',
+        'user' => 'db',
+    ]
+);
 
 $GLOBALS['TYPO3_CONF_VARS']['MAIL'] = [
     'transport' => 'smtp',
@@ -22,4 +25,3 @@ $GLOBALS['TYPO3_CONF_VARS']['MAIL'] = [
 ];
 
 $GLOBALS['TYPO3_CONF_VARS']['BE']['installToolPassword'] = '$P$CZqeoYBTHC0kXKny4tpTvBSzzV5wVY0'; /* joh316 */
-$GLOBALS['TYPO3_CONF_VARS']['BE']['loginSecurityLevel'] = 'normal';