I believe I did this right. I need to turn on output buffering to use WordFence’s 2FA with Google Authenticator and it to prompt you for a token and not use the silly scheme “{password} wf{token}” as your password, WordFence requires output buffering. see https://www.wordfence.com/help/tools/two-factor-authentication/
I added a PR to do just this https://github.com/roots/trellis/pull/1028 (I also created an issue so I can tick and tie the PR to an issue which I like to have as an audit trail)
I believe the result of the PR is it will allow you to automatically turn output buffering on if you add a php.yml to your target environment’s group_vars with the setting in it. This will default OB to Off so i want to make sure that is the intention of trellis 