AureusERP on AWS User Guide

Overview

AureusERP is a comprehensive, free and open source Enterprise Resource Planning platform for small and medium enterprises and larger organisations. Built on the Laravel framework and the FilamentPHP admin panel, it brings accounting, invoicing, inventory, purchases, sales, human resources, recruitment, CRM and project management together in one place, with a modular plugin system so you enable only the features your business needs.

cloudimg's Amazon Machine Image delivers AureusERP fully installed and configured: a Laravel application on PHP 8.3 with OPcache, served by nginx over HTTPS with php-fpm, backed by MariaDB. The database schema migrations, the Filament Shield roles and permissions, the seeded reference data and the compiled front-end assets are already in place, so you land directly on the admin sign-in with no setup wizard to complete. The MariaDB datadir and the application code each live on their own dedicated, independently resizable EBS volume, so you can grow the database or application storage without touching the operating system disk. Backed by 24/7 cloudimg support.

The application encryption key, the database password and a fresh administrator email and password are all generated on the first boot of every deployed instance and written to /root/aureuserp-credentials.txt with mode 0600, so no two instances launched from the same AMI ever share a credential and there is no default administrator login.

Prerequisites

Before you deploy this image you need:

• An Amazon Web Services account where you can launch EC2 instances
• IAM permissions to launch instances, create security groups, and subscribe to AWS Marketplace products
• An EC2 key pair in the target Region for SSH access to the instance
• A VPC and subnet in the target Region, with a security group allowing inbound port 22 from your management network and inbound ports 80 and 443 from the networks your users will reach AureusERP from
• The AWS CLI (version 2) installed locally if you plan to deploy from the command line

Step 1: Launch the Instance from the AWS Marketplace

Sign in to the AWS Management Console, open the EC2 service, and select Launch instance. Under Application and OS Images choose AWS Marketplace AMIs and search for AureusERP. Select the cloudimg listing, choose Select, then Continue on the subscription summary.

Pick an instance type of m5.large or larger. Choose your EC2 key pair under Key pair (login). Under Network settings select your VPC and subnet, and either create or select a security group that allows inbound port 22 from your management network and inbound ports 80 and 443 from the networks your users will use. Leave the root and data volumes at their default sizes or larger.

Select Launch instance. First boot initialisation takes approximately one minute after the instance state becomes Running and the status checks pass; during that time the instance generates its unique secrets and TLS certificate.

Step 2: Launch the Instance from the AWS CLI

The following block launches an instance from the cloudimg AureusERP Marketplace AMI into an existing subnet and security group. Replace <ami-id> with the AMI ID shown on the Marketplace listing, <key-name> with your EC2 key pair name, <subnet-id> with your subnet ID, and <security-group-id> with a security group that opens ports 22, 80 and 443 as described above.

aws ec2 run-instances \
  --image-id <ami-id> \
  --instance-type m5.large \
  --key-name <key-name> \
  --subnet-id <subnet-id> \
  --security-group-ids <security-group-id> \
  --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value=aureuserp}]'

Step 3: Connect and Retrieve Initial Credentials

Connect to the instance over SSH using your EC2 key pair. The login user depends on the operating system variant you launched:

Replace <key> with the path to your private key and <vm-ip> with the instance's public IP address or DNS name.

ssh -i <key> ubuntu@<vm-ip>

The administrator email and password, the database credentials and the panel URL are generated on first boot and written to a root-only file. Retrieve them with:

sudo cat /root/aureuserp-credentials.txt

The file lists the AureusERP admin URL, the administrator sign-in email (aureuserp.admin.user) and password (aureuserp.admin.pass), and the MariaDB database name, user and password. Store these somewhere safe and treat the file as sensitive.

You can confirm the application stack is running and healthy at any time:

for svc in nginx php8.3-fpm mariadb; do echo "$svc: $(systemctl is-active $svc)"; done

curl -k -s -o /dev/null -w 'admin login page: HTTP %{http_code}\n' https://127.0.0.1/admin/login

MariaDB listens only on the loopback interface, so the database is never exposed to the network:

sudo ss -tlnp | grep ':3306'

Step 4: Sign In to AureusERP

The instance ships a per instance self-signed TLS certificate, so the admin panel is served over HTTPS from the moment it boots. In your browser, go to:

https://<vm-ip>/admin

Because the certificate is self-signed, your browser shows a one-time security warning on the first visit — accept it to continue (Step 7 explains how to install a trusted domain certificate). Sign in with the administrator email and password from /root/aureuserp-credentials.txt. Plain HTTP on port 80 automatically redirects to HTTPS.

After signing in you land on the AureusERP admin panel. AureusERP is organised as installable plugins, so you can browse the available apps — Accounting, Invoices, Inventories, Purchases, Sales, Contacts, Employees, Projects, Manufacturing and more — and enable only the modules your business needs.

Step 5: Configure Your Company and Reference Data

Open the Settings area to manage companies, teams, users, roles and the seeded reference data. The Companies list is where you set up the organisation (or organisations) AureusERP runs for, including the base currency, contact details and branding.

Selecting New Company opens the company form, where you record the company name, registration and tax identifiers, address, contact information and logo. The same create-and-edit pattern applies across every AureusERP module.

AureusERP ships with a full set of seeded reference data. The Currencies list, for example, includes every ISO currency with its symbol, ISO code, decimal places and rounding, ready to activate for multi-currency accounting and sales.

Step 6: Enable Modules (Plugins)

From the Plugins area you can review the available apps and their dependencies and install the ones you need. Each module — Accounting, Invoices, Inventories, Purchases, Sales, Employees, Projects and others — is a self-contained plugin that adds its own resources and navigation to the admin panel once enabled, so the platform grows with your business rather than presenting every feature at once.

Step 7: Enable HTTPS with a Trusted Certificate

The image serves the admin panel over HTTPS with a self-signed certificate out of the box. For production use behind a domain name, replace it with a trusted certificate from a certificate authority such as Let's Encrypt. Point a DNS record at the instance, then install certbot and issue a certificate. Replace <your-domain> with your domain name and <your-email> with your contact email.

sudo snap install --classic certbot
sudo ln -sf /snap/bin/certbot /usr/local/bin/certbot
sudo certbot --nginx -d <your-domain> -m <your-email> --agree-tos --no-eff-email

Certbot obtains the certificate, configures nginx to use it and sets up automatic renewal. After issuing the certificate, update the APP_URL value in /var/www/aureuserp/.env to https://<your-domain> and clear the cache with sudo -u www-data php /var/www/aureuserp/artisan optimize:clear so the panel's asset and session URLs match your domain.

Step 8: Back Up and Maintain Your Instance

AureusERP stores its data in MariaDB (on the dedicated database volume) and its application files under /var/www/aureuserp (on the dedicated application volume). Back up the database regularly with a logical dump. Replace <backup-dir> with a directory of your choice.

sudo mariadb-dump --single-transaction aureuserp > <backup-dir>/aureuserp-$(date +%F).sql

For a complete point-in-time backup you can also take EBS snapshots of both data volumes from the EC2 console or the AWS CLI. Apply operating system security updates with sudo apt-get update && sudo apt-get upgrade and reboot when a new kernel is installed. The administrative command line interface for the application is available with sudo -u www-data php /var/www/aureuserp/artisan <command>.

Architecture Summary

Support

cloudimg provides 24/7 technical support for this AureusERP AMI by email and live chat. We help with deployment and initial configuration, retrieving first-boot administrator credentials, enabling and configuring ERP modules and plugins, application and dependency upgrades, database and storage administration, TLS certificate setup for a trusted domain, performance tuning, and troubleshooting.

Contact us at support@cloudimg.co.uk. Critical issues receive a one-hour average response.