$ php /var/www/html/console.php system:version
FOSSBilling 0.8.8
$ mariadb --version
mariadb from 11.4.13-MariaDB, client 15.2 for debian-linux-gnu (x86_64) using  EditLine wrapper

ls -F /var/www/html/ | head -22

LICENSE
README.md
config-sample.php
config.php
console.php
cron.php
data/
di.php
index.php
ipn.php
library/
load.php
locale/
modules/
public/
rewrite-missing.html
robots.txt
themes/
vendor/

# 将 maintenance_mode.enabled 改为 true
sed -i "s@'enabled' => false,@'enabled' => true,@" /var/www/html/config.php
grep -A2 maintenance_mode /var/www/html/config.php | head -4

  'maintenance_mode' =>
  array (
    'enabled' => true,

curl -s -o /dev/null -w "front=%{http_code}\n" http://127.0.0.1:8148/
curl -s -o /dev/null -w "admin=%{http_code}\n" http://127.0.0.1:8148/admin/staff/login

front=503
admin=200

sudo -u www-data php /var/www/html/console.php cache:clear

Successfully cleared the cache.

mariadb -uroot -p fossbilling -N -e "SELECT COUNT(*) FROM setting;"

36

company_address_1              Demo address line 1
company_address_2              Demo address line 2
company_address_3              Demo address line 3
company_email                  support@yourcompany.com
company_favicon                public/branding/favicon.ico
company_logo                   public/branding/logo.svg
company_logo_dark              public/branding/logo-dark.svg
company_name                   Company Name
company_note                   This is a placeholder for your About Us page. It will be ava
company_privacy_policy         This is a sample Privacy Policy. Please replace this with yo
company_signature              FOSSBilling.org - Client Management, Invoicing and Support S
company_tel                    +123 456 12345
company_tos                    This is a sample Terms of Service. Please replace this with
funds_max_amount               200
funds_min_amount               10
hide_company_public            1
invoice_auto_approval          1
invoice_cn_series              CN-
invoice_cn_starting_number     1
invoice_due_days               5
invoice_hash_lifetime_days     90
invoice_issue_days_before_expire 14
invoice_overdue_invoked        2026-10-23 06:01:39
invoice_refund_logic           credit_note
invoice_series                 FOSS
invoice_starting_number        1
issue_invoice_days_before_expire 7
last_cron_exec                 2026-10-23 13:35:02
last_error_reporting_nudge     0.8.8
last_patch                     118
nameserver_1                   NULL
nameserver_2                   NULL
nameserver_3                   NULL
nameserver_4                   NULL
servicedomain_last_sync        2026-10-23 05:56:00
theme                          huraga

<?php
return array (
  'security' =>
  array (
    'mode' => 'strict',
    'force_https' => false,
    'trusted_proxies' =>
    array (
      'enabled' => false,
      'proxies' =>
      array (
      ),
      'headers' => 'x_forwarded',
    ),
    'session_lifespan' => 7200,
    'session_regeneration_grace_period' => 300,
    'perform_session_fingerprinting' => true,
    'debug_fingerprint' => false,
  ),
  'debug_and_monitoring' =>
  array (
    'debug' => false,
    'log_stacktrace' => true,
    'stacktrace_length' => 25,
    'report_errors' => true,
  ),
  'info' =>
  array (
    'salt' => '91499a121840efb7b9966bb8e559ba6f',
    'instance_id' => '5bfa4e49-331f-472d-925c-001452d82a86',
  ),
  'url' => '192.168.1.62:8148/',
  'admin_area_prefix' => '/admin',
  'update_branch' => 'release',
  'maintenance_mode' =>
  array (
    'enabled' => false,
    'allowed_urls' =>
    array (
    ),
    'allowed_ips' =>
    array (
    ),
  ),
  'disable_auto_cron' => true,
  'i18n' =>
  array (
    'locale' => 'en_US',
    'auto_detect_locale' => true,
    'timezone' => 'UTC',
    'date_format' => 'medium',
    'time_format' => 'short',
    'datetime_pattern' => '',
  ),
  'path_data' => '/var/www/html/data',
  'db' =>
  array (
    'driver' => 'pdo_mysql',
    'host' => 'localhost',
    'port' => 3306,
    'name' => 'fossbilling',
    'user' => 'fossbilling',
    'password' => 'q1w2e3r4',
  ),
  'cache' =>
  array (
    'driver' => 'filesystem',
    'redis' =>
    array (
      'host' => '127.0.0.1',
      'port' => 6379,
      'password' => NULL,
      'database' => 0,
      'tls' =>
      array (
        'enabled' => false,
        'verify_peer' => true,
        'verify_peer_name' => true,
        'cafile' => NULL,
        'allow_self_signed' => false,
      ),
    ),
    'memcached' =>
    array (
      'host' => '127.0.0.1',
      'port' => 11211,
    ),
  ),
  'twig' =>
  array (
    'debug' => false,
    'auto_reload' => true,
    'cache' => '/var/www/html/data/cache',
    'strict_variables' => true,
  ),
  'api' =>
  array (
    'require_referrer_header' => false,
    'allowed_ips' =>
    array (
    ),
    'CSRFPrevention' => true,
  ),
  'rate_limiter' =>
  array (
    'enabled' => true,
    'whitelist_ips' =>
    array (
    ),
    'policies' =>
    array (
    ),
  ),
);

'security' => [
    'mode' => 'strict',
    'force_https' => true,
    'trusted_proxies' => [
        'enabled' => false,
        'proxies' => [],
        'headers' => 'x_forwarded',
    ],
    'session_lifespan' => 7200,
    'session_regeneration_grace_period' => 300,
    'perform_session_fingerprinting' => true,
    'debug_fingerprint' => false,
],

'debug_and_monitoring' => [
    'debug' => false,
    'log_stacktrace' => true,
    'stacktrace_length' => 25,
    'report_errors' => false,
],

$ ls /var/www/html/data/log/
application
cron
event
index.html
php_error.log
routing

[23-Oct-2026 06:08:56 UTC] The template cache directory could not be written to. Please check the file permissions and available disk space for the "data/cache" directory. at /var/www/html/library/Box/App.php : 250
[23-Oct-2026 06:25:22 UTC] There was an error while updating the IP address database: Failed to connect to github.com port 443 after 21044 ms: Connection refused for "https://github.com/HostByBelle/IP-Geolocation-DB/releases/latest/download/pddl-asn-both.mmdb"..

'info' => [
    'salt' => bin2hex(random_bytes(16)),
    'instance_id' => 'XXXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXXX',
],

'url' => 'localhost/',
'admin_area_prefix' => '/admin',

'update_branch' => 'release',
'maintenance_mode' => [
    'enabled' => false,
    'allowed_urls' => [],
    'allowed_ips' => [],
],

# enabled=true 时
curl -s -o /dev/null -w "front=%{http_code}\n" http://127.0.0.1:8148/
curl -s -o /dev/null -w "admin=%{http_code}\n" http://127.0.0.1:8148/admin/staff/login

front=503
admin=200

'disable_auto_cron' => true,

$ tail -2 /var/www/html/data/log/cron/cron-2026-10-23.log
[23-Oct-2026 06:04:11 UTC] cron.INFO: Executed action to try cover unpaid invoices with client credits.
[23-Oct-2026 06:04:11 UTC] cron.INFO: Executed action to activate paid invoices.

cache
  cache:clear          Clears the cache
 cron
  cron:run             Executes the cron jobs
 system
  system:releasenotes  Returns the release notes of all newer versions of FOSSBilling
  system:run-patcher   Runs update patches and config migrations
  system:version       Returns the current version of FOSSBilling
 theme
  theme:list           Returns the list of the installed themes

'i18n' => [
    'locale' => 'en_US',
    'auto_detect_locale' => true,
    'timezone' => 'UTC',
    'date_format' => 'medium',
    'time_format' => 'short',
    'datetime_pattern' => '',
],

'path_data' => __DIR__.'/data',

$ ls -la /var/www/html/data/
total 32
drwxr-x---  5 www-data www-data 4096 Oct 23 06:04 .
drwxr-xr-x  9 www-data www-data 4096 Oct 23 06:20 ..
-rw-r--r--  1 www-data www-data   73 Oct  3 05:41 .htaccess
drwxr-xr-x 19 www-data www-data 4096 Oct 23 06:09 cache
-rw-r--r--  1 www-data www-data    1 Oct  3 05:41 index.html
drwxr-xr-x  6 www-data www-data 4096 Oct 23 05:56 log
-rw-r--r--  1 www-data www-data  208 Oct 23 05:34 update-finalization.json
drwxr-xr-x  2 www-data www-data 4096 Oct 23 05:41 uploads

'db' => [
    'driver' => 'pdo_mysql',
    'host' => getenv('DB_HOST') ?: '127.0.0.1',
    'name' => getenv('DB_NAME') ?: 'fossbilling',
    'user' => getenv('DB_USER') ?: 'foo',
    'password' => getenv('DB_PASS') ?: 'bar',
    'port' => getenv('DB_PORT') ?: '3306',
],

mariadb -uroot -p -N -e "SELECT COUNT(*) FROM information_schema.tables WHERE table_schema='fossbilling';"

60

'cache' => [
    'driver' => 'filesystem',
    'redis' => [
        'host' => '127.0.0.1',
        'port' => 6379,
        'password' => null,
        'database' => 0,
        'tls' => [
            'enabled' => false,
            'verify_peer' => true,
            'verify_peer_name' => true,
            'cafile' => null,
            'allow_self_signed' => false,
        ],
    ],
    'memcached' => [
        'host' => '127.0.0.1',
        'port' => 11211,
    ],
],

'twig' => [
    'debug' => false,
    'auto_reload' => true,
    'cache' => __DIR__.'/data/cache',
    'strict_variables' => true,
],

'api' => [
    'require_referrer_header' => false,
    'allowed_ips' => [],
    'CSRFPrevention' => true,
],

'rate_limiter' => [
    'enabled' => true,
    'whitelist_ips' => [],
    'policies' => [
        // 'client_signup' => ['policy' => 'fixed_window', 'limit' => 5, 'interval' => '1 hour'],
    ],
],

<?php
return [
    'security' => [
        'mode' => 'strict',
        'force_https' => true,              // TLS 就绪后必改
        'trusted_proxies' => [
            'enabled' => true,              // 仅当 HTTPS 在 Nginx/负载均衡终结时开启
            'proxies' => ['10.0.0.10'],     // 换成你真实代理的 IP
            'headers' => 'x_forwarded',
        ],
        'session_lifespan' => 7200,
        'session_regeneration_grace_period' => 300,
        'perform_session_fingerprinting' => true,
        'debug_fingerprint' => false,
    ],
    'debug_and_monitoring' => [
        'debug' => false,                   // 生产必须 false
        'log_stacktrace' => true,
        'stacktrace_length' => 25,
        'report_errors' => false,           // 不参与官方错误上报则 false
    ],
    'info' => [
        'salt' => '91499a121840efb7b9966bb8e559ba6f',      // 安装时生成，保持不动
        'instance_id' => '5bfa4e49-331f-472d-925c-001452d82a86', // 安装时生成，保持不动
    ],
    'url' => 'https://billing.example.com/',  // 换正式域名，尾斜杠必带
    'admin_area_prefix' => '/admin',
    'update_branch' => 'release',
    'maintenance_mode' => [
        'enabled' => false,
        'allowed_urls' => [],               // 维护时记得放行支付回调类 URL
        'allowed_ips' => [],
    ],
    'disable_auto_cron' => true,            // 系统 crontab 为唯一触发源
    'i18n' => [
        'locale' => 'zh_CN',                // 需先 locale-gen zh_CN.UTF-8，见 5.7
        'auto_detect_locale' => true,
        'timezone' => 'Asia/Shanghai',
        'date_format' => 'medium',
        'time_format' => 'short',
        'datetime_pattern' => '',
    ],
    'path_data' => '/var/www/html/data',
    'db' => [
        'driver' => 'pdo_mysql',
        'host' => 'localhost',
        'port' => 3306,
        'name' => 'fossbilling',
        'user' => 'fossbilling',
        'password' => 'q1w2e3r4',            // 示例口令；数据库侧同步改，账号权限含 LOCK TABLES/CREATE VIEW
    ],
    'cache' => [
        'driver' => 'filesystem',           // 出现多机部署再切 redis
        'redis' => ['host' => '127.0.0.1', 'port' => 6379, 'password' => null, 'database' => 0,
            'tls' => ['enabled' => false, 'verify_peer' => true, 'verify_peer_name' => true,
                'cafile' => null, 'allow_self_signed' => false]],
        'memcached' => ['host' => '127.0.0.1', 'port' => 11211],
    ],
    'twig' => [
        'debug' => false,
        'auto_reload' => true,
        'cache' => '/var/www/html/data/cache',
        'strict_variables' => true,
    ],
    'api' => [
        'require_referrer_header' => false,
        'allowed_ips' => [],                // 对外开放 API 时收窄到调用方 IP
        'CSRFPrevention' => true,           // 严禁关闭
    ],
    'rate_limiter' => [
        'enabled' => true,
        'whitelist_ips' => [],              // 有固定 IP 的对账程序再加白
        'policies' => [],                   // 留空用内置默认，需调时只覆盖个别键
    ],
];

# 1. 收紧配置文件写权限（安装完成页指引）
chmod 644 /var/www/html/config.php

# 2. 系统 cron 承担出账（www-data 身份）
echo "*/5 * * * * php /var/www/html/cron.php" | crontab -u www-data -

# 3. PHP 上传上限按需放宽后重启 Apache（默认 2M/8M 偏小）
#    /etc/php/8.3/apache2/php.ini 中 upload_max_filesize=20M、post_max_size=25M
apache2ctl -k restart

chown www-data:www-data /var/www/html/config.php
chmod 644 /var/www/html/config.php