# 更新软件源索引
sudo apt update

Hit:1 http://security.ubuntu.com/ubuntu jammy-security InRelease
Hit:2 http://archive.ubuntu.com/ubuntu jammy InRelease
Hit:3 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
Reading package lists... Done

# 安装 Nginx、MariaDB、git、cron、whois（域名刷新任务依赖 whois 客户端）
sudo apt install -y nginx mariadb-server git cron whois

# 安装 PHP 8.3 全家桶（PPA，见 4.2）及 ITFlow 必需扩展
sudo apt install -y php8.3-fpm php8.3-intl php8.3-mysql php8.3-curl \
  php8.3-gd php8.3-mbstring php8.3-zip php8.3-xml php8.3-cli

# 安装 PPA 管理工具并添加 ondrej/php 源
sudo apt install -y software-properties-common
sudo add-apt-repository -y ppa:ondrej/php
sudo apt update
sudo apt install -y php8.3-fpm php8.3-intl php8.3-mysql php8.3-curl \
  php8.3-gd php8.3-mbstring php8.3-zip php8.3-xml php8.3-cli

php8.3 -v | head -1

PHP 8.3.36 (cli) (built: Oct 21 2026 14:31:50) (NTS)

# 核对 7 个必需扩展全部就位
php8.3 -m | grep -E '^(intl|mysqli|curl|gd|mbstring|zip|xml)$'

curl
gd
intl
mbstring
mysqli
xml
zip

# 启动并自启 MariaDB
sudo systemctl enable --now mariadb

Synchronizing state of mariadb.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable mariadb

# 启动并自启 PHP-FPM 8.3
sudo systemctl enable --now php8.3-fpm

# 确认两个服务均为运行态
systemctl is-active mariadb
systemctl is-active php8.3-fpm

active
active

ls /run/php/ | grep 8.3

php8.3-fpm.sock

sudo mysql -u root

CREATE DATABASE itflow;
CREATE USER 'itflow'@'localhost' IDENTIFIED BY 'q1w2e3r4';
GRANT ALL PRIVILEGES ON itflow.* TO 'itflow'@'localhost';
FLUSH PRIVILEGES;
SHOW DATABASES;

+--------------------+
| Database           |
+--------------------+
| information_schema |
| itflow             |
| mysql              |
| performance_schema |
| sys                |
+--------------------+

EXIT;

mariadb -u itflow -pq1w2e3r4 itflow -e 'SELECT 1;'

1
1

cd /var/www/html
sudo rm -f index.nginx-debian.html
sudo git clone https://github.com/itflow-org/itflow.git .

Cloning into '.'...
remote: Enumerating objects: 71104, done.
remote: Total 71104 (delta 2159), reused 1941 (delta 1879), pack-reused 68585 (from 3)
Receiving objects: 100% (71104/71104), 140.21 MiB | 16.91 MiB/s, done.
Resolving deltas: 100% (47713/47713), done.

sudo git checkout v26.10
sudo git describe --tags

Note: switching to 'v26.10'.
v26.10

sudo git log -1 --format='%h %ci %s'

c05ccb738 2026-10-01 15:25:55 -0400 Merge pull request #1303 from itflow-org/develop

grep APP_VERSION /var/www/html/includes/app_version.php

DEFINE("APP_VERSION", "26.10");

sudo chown -R www-data:www-data /var/www/html
sudo chmod -R 775 /var/www/html

ls -ld /var/www/html

drwxrwxr-x 20 www-data www-data 4096 Oct 23 23:30 /var/www/html

sudo tee /etc/nginx/sites-available/itflow.conf > /dev/null <<'EOF'
server {
    listen 80 default_server;
    listen [::]:80 default_server;

    server_name _;
    root /var/www/html;
    index index.php index.html;

    client_max_body_size 500M;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
    }

    location ~ /\.ht {
        deny all;
    }
}
EOF

# 停用默认站点，启用 ITFlow 站点，并做语法检查
sudo rm -f /etc/nginx/sites-enabled/default
sudo ln -s /etc/nginx/sites-available/itflow.conf /etc/nginx/sites-enabled/itflow.conf
sudo nginx -t

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

sudo systemctl reload nginx

upload_max_filesize = 500M
post_max_size = 500M
max_execution_time = 300

sudo systemctl restart php8.3-fpm
grep -E '^(upload_max_filesize|post_max_size|max_execution_time)' /etc/php/8.3/fpm/php.ini

max_execution_time = 300
post_max_size = 500M
upload_max_filesize = 500M

Company Demo MSP Ltd created

* * * * * php /var/www/html/cron/cron.php >/dev/null

sudo cat /var/www/html/config.php

<?php

$dbhost = 'localhost';
$dbusername = 'itflow';
$dbpassword = 'q1w2e3r4';
$database = 'itflow';
$mysqli = mysqli_connect($dbhost, $dbusername, $dbpassword, $database) or die('Database Connection Failed');
$config_app_name = 'ITFlow';
$config_base_url = 'localhost:8146';
$config_https_only = TRUE;
$repo_branch = 'master';
$installation_id = 'Xldc1Vdqw7vWWAtRqfNghYhiOkh_wz4J';
$config_enable_setup = 0;

# 数据表数量核验（含表头行共 142 行 = 141 张表）
sudo mariadb -u root itflow -e 'SHOW TABLES;' | wc -l

142

# 数据库 schema 版本核验（26.10 对应 2.7.9）
sudo mariadb -u root itflow -e "SELECT config_current_database_version FROM settings;"

config_current_database_version
2.7.9

sudo chmod 640 /var/www/html/config.php

curl -s -o /dev/null -w '%{http_code}\n' http://localhost/login.php

200

echo '* * * * * www-data php /var/www/html/cron/cron.php >/dev/null' | sudo tee /etc/cron.d/itflow
sudo chmod 644 /etc/cron.d/itflow
sudo systemctl enable --now cron

active

sudo mariadb -u root itflow -e "SELECT config_cron_last_dispatch_at FROM settings;"

+-----------------------------+
| config_cron_last_dispatch_at |
+-----------------------------+
| 2026-10-23 23:37:01         |
+-----------------------------+

Oct 23 15:37:01 itflow-server CRON[27105]: (www-data) CMD (php /var/www/html/cron/cron.php >/dev/null)

sudo mariadb -u root itflow -e "SELECT config_enable_cron FROM settings;"

+-------------------+
| config_enable_cron |
+-------------------+
|                 1 |
+-------------------+

sudo -u www-data php /var/www/html/cron/backup.php

Scheduled Full Backup complete

sudo mariadb -u root itflow -e "SELECT backup_file_name, backup_size, backup_status, backup_source FROM backups;"

+--------------------------------------------------------------+-------------+---------------+----------------+
| backup_file_name                                             | backup_size | backup_status | backup_source  |
+--------------------------------------------------------------+-------------+---------------+----------------+
| itflow_20261023-233527_full_m-gi5Kk0HsVtFbW7qhioTff0oEhjrpaW.zip |       19260 | Complete      | Cron           |
+--------------------------------------------------------------+-------------+---------------+----------------+

php /var/www/html/scripts/setup_cli.php --help

ITFlow CLI Setup Script

Usage:
  php setup_cli.php [options]

Options:
  --host        Database host (required)
  --username    Database username (required)
  --password    Database password (required)
  --database    Database name (required)
  --base-url    Base URL (without protocol, e.g. example.com/itflow) (required)
  --locale      Locale (e.g. en_US) (required)
  --timezone    Timezone (e.g. UTC) (required)
  --currency    Currency code (e.g. USD) (required)
  --company-name        Company name (required)
  --country     Company country (e.g. United States) (required)
  --user-name   Admin user full name (required)
  --user-email  Admin user email (required)
  --user-password       Admin user password (min 8 chars) (required)
  --address     Company address (optional)
  --city        Company city (optional)
  --state       Company state (optional)
  --zip Company postal code (optional)
  --phone       Company phone (optional)
  --company-email       Company email (optional)
  --website     Company website (optional)
  --repo-branch Git repo branch to track (optional, default master)
  --non-interactive     Run in non-interactive mode (fail if required args missing)
  --help                Show this help message

If running interactively (without --non-interactive), any missing required arguments will be prompted.
If running non-interactively, all required arguments must be provided.

sudo mariadb -u root -e "DROP DATABASE IF EXISTS itflow; CREATE DATABASE itflow; GRANT ALL PRIVILEGES ON itflow.* TO 'itflow'@'localhost'; FLUSH PRIVILEGES;"
sudo rm -f /var/www/html/config.php
sudo php /var/www/html/scripts/setup_cli.php \
  --host=localhost --username=itflow --password=q1w2e3r4 --database=itflow \
  --base-url=192.0.2.10 --locale=en_US --timezone=Asia/Shanghai --currency=USD \
  --company-name="Demo MSP Ltd" --country=China \
  --user-name=Administrator --user-email=admin@example.com --user-password=q1w2e3r4 \
  --address="1 Server Street" --city=Beijing --phone="+86-10-00000000" \
  --non-interactive

Welcome to the ITFlow CLI Setup.

=== Database Setup ===
Git repo branch to track [master]:
=== Localization ===

=== Company Details ===
State/Province (optional): Postal Code (optional): Company Email (optional): Website (optional):
=== Create First User ===
Importing database schema...
Database imported successfully.
User Administrator created successfully.

Setup complete!
You can now log in with the user you created at: https://localhost:8146/login.php

Two things left before ITFlow can send mail, parse tickets or bill anyone:

  1. Add this single entry to the crontab of the user that owns the ITFlow files:

     * * * * * php /var/www/html/cron/cron.php >/dev/null

  2. Turn cron on in Maintenance > Cron. It ships off, and every job stops
     itself until it is enabled. Per-job schedules live on the same page.

sudo git -C /var/www/html describe --tags
sudo mariadb -u root itflow -e 'SHOW TABLES;' | wc -l

v26.10
142

Composer detected issues in your platform:

Your Composer dependencies require a PHP version ">= 8.2.0". You are running 8.1.2-1ubuntu2.28.

Cron: job 'mail_queue' failed - Composer detected issues in your platform: Your Composer dependencies require a PHP version ">= 8.2.0". You are running 8.1.2-1ubuntu2.28.

Login is restricted as ITFlow defaults to HTTPS-only for enhanced security. To login using HTTP, modify the config.php file by setting config_https_only to false. However, this is strongly discouraged, especially when accessing from potentially unsafe networks like the internet.

sudo sed -i 's/$config_https_only = TRUE;/$config_https_only = FALSE;/' /var/www/html/config.php

PHP Warning:  fopen(/tmp/itflow_cron_696309544e04e1eb7f6819c8a312c17f.lock): Failed to open stream: Permission denied in /var/www/html/cron/includes/cron_lock.php on line 80
Cannot open the cron lock file at /tmp/itflow_cron_696309544e04e1eb7f6819c8a312c17f.lock - check permissions and open_basedir.

sudo rm -f /tmp/itflow_cron_*.lock

Error: This script must be run by the file owner (www-data) to proceed.
You could try sudo -u www-data php update_cli.php

fatal: detected dubious ownership in repository at '/var/www/html'
To add an exception for this directory, call:

        git config --global --add safe.directory /var/www/html

Stopped: Email Parser: Feature is not enabled - check Settings > Ticketing > Email-to-ticket parsing. See https://docs.itflow.org/ticket_email_parse  -- Quitting..

sudo rm -f /etc/cron.d/itflow
sudo rm -f /etc/nginx/sites-enabled/itflow.conf && sudo systemctl reload nginx

sudo rm -rf /var/www/html

sudo mariadb -u root -e "DROP DATABASE IF EXISTS itflow; DROP USER IF EXISTS 'itflow'@'localhost'; FLUSH PRIVILEGES;"

sudo mariadb -u root -e "CREATE DATABASE itflow_demo; SHOW DATABASES LIKE 'itflow_demo';"

Database (itflow_demo)
itflow_demo

sudo mariadb -u root -e "DROP DATABASE itflow_demo; SHOW DATABASES LIKE 'itflow_demo';"

sudo apt remove -y nginx mariadb-server 'php8.3-*' && sudo apt autoremove -y