ITFlow 26.07 IT Documentation and MSP Management on Ubuntu 24.04 LTS

Why the cloudimg image

cloudimg delivers ITFlow fully installed behind Apache with MariaDB, served over HTTPS from the moment the instance boots, which matters for a product that stores your clients' passwords and TOTP secrets in an encrypted vault. The image is secure by default and carries no usable credential at all: rather than shipping a pre installed copy whose password would have to be rotated, ITFlow installs itself on your own instance at first boot, generating its own database password, its own administrator password and its own TLS certificate, and writing the credentials to a file only the root user can read. That ordering is deliberate, because ITFlow derives the credential vault's encryption key from the administrator password, so the per instance password has to be the original one rather than a replacement. The image is hardened past a stock install: the web installation wizard is deleted rather than merely disabled, PHP execution is blocked in the writable document tree, and scheduled jobs run from a system timer instead of a public web endpoint. Your database and uploaded client documents live on a dedicated data volume, the base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.