ITFlow Self-Hosted IT Documentation and MSP Platform

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

# Why ITFlow on AWS Marketplace ITFlow is an open source IT documentation and business management platform built for managed service providers and internal IT teams. It gives you one authoritative place to record every client along with their contacts, locations, assets, networks and credentials, then runs the work around them: tickets with email parsing and a client portal, projects, invoices, quotes, recurring billing, expenses, and domain and SSL certificate expiry tracking. This AMI delivers ITFlow fully configured and hardened so you have a working platform within minutes of launch - eliminating the manual dependency installation, web server configuration, database setup, TLS provisioning and hardening that a self-managed deployment requires. ## What You Get in Minutes Instead of Hours - Client and asset management - Record clients, contacts, locations, assets, networks, racks, and an encrypted credential vault with TOTP support

• Ticketing with email parsing - Route inbound email into tickets automatically; give clients their own portal to submit and track requests
• Billing and invoicing - Manage quotes, invoices, recurring billing, and expenses from one interface
• Domain and certificate monitoring - Track domain and SSL certificate expiry dates across your client base
• Projects - Plan and track project work linked to clients and billing ## Application Stack ITFlow runs on PHP 8.3 with OPcache and the mysqli, intl, curl, mbstring, gd and xml extensions, served by Apache with libapache2-mod-php. MariaDB provides the database over a local unix socket. Scheduled jobs (mail queue, ticket email parser, domain and certificate refresher) run every five minutes from a systemd timer using the PHP CLI - never from a public web endpoint. ## Security: No Credential Ships in the Image ITFlow derives its encrypted credential vault master key from the administrator password, so the account must be created with its final password rather than rotated afterwards. This image installs ITFlow on your own instance at first boot using ITFlow's official installer, generating a database password, an administrator password and a TLS certificate uniquely for that instance. The administrator password is written to a root-only file and its location is shown in the login banner. There is no default credential to find, and none to change. ## Served Over HTTPS, Hardened Beyond a Stock Install The platform serves over HTTPS from the moment it starts - critical for a product storing your clients' passwords and TOTP secrets in an encrypted vault. The self-signed certificate is generated for your instance; the paired deployment guide walks through installing a certificate from your own CA or from Let's Encrypt. Additional hardening measures include: - Web installation wizard deleted rather than merely disabled
• PHP execution blocked in the customer-writable document and attachment tree
• Vendored library tree and CLI installers denied from the web ## Dedicated Data Volume A dedicated data volume holds the MariaDB database and your uploaded client documents, ticket attachments and invoice PDFs. Customer data stays independent of the operating system disk so it can be snapshotted, backed up, and grown on its own schedule. ## Getting Started Launch the AMI, accept the self-signed certificate on first connection, and log in with the generated administrator credentials shown in the login banner file. The paired cloudimg deployment guide walks you through the complete setup end to end against this exact build, including TLS certificate replacement, mail configuration, and client portal activation. If you would like a guided onboarding walkthrough, contact cloudimg support via email or live chat. ## Use Cases - Run an MSP practice management and IT documentation platform in your own VPC for data residency or compliance
• Track clients, assets, networks and an encrypted credential vault
• Route inbound email into tickets with a client-facing portal
• Manage projects, quotes, invoices and recurring billing from one self-hosted application ## cloudimg Support 24/7 technical support by email and live chat covering deployment, TLS certificate installation, mail and ticket email parsing setup, client portal configuration, credential vault and TOTP usage, invoicing and billing setup, domain and SSL certificate expiry tracking, upgrades, backup and restore, and MariaDB administration. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.