Allow forced_ssl tweaking

app/config/config_prod.yml

@@ -70,6 +70,7 @@ nelmio_security:
             '^/.*': DENY
     forced_ssl:
         enabled: '%force_ssl%'
+        hosts: '%forced_ssl_hosts%'
         hsts_max_age: 31104000 # 1y
     csp:
         enabled: true

app/config/defaults.yml

@@ -11,3 +11,4 @@ parameters:
     mailer_auth_mode: login
     fingers_crossed_handlers: []
     aws_metadata: {}
+    forced_ssl_hosts: []