Secure installation

Version 2.2.1 · fresh install or non-destructive database update

Server preflight

PHP 8.2+
8.4.18Ready

PHP extension: pdo_mysql
loadedReady

PHP extension: mysqli
loadedReady

PHP extension: mbstring
loadedReady

PHP extension: curl
loadedReady

PHP extension: fileinfo
loadedReady

PHP extension: openssl
loadedReady

PHP extension: json
loadedReady

PHP extension: sodium
loadedReady

PHP extension: gd
loadedReady

Application directory writable
/home/autostock/htdocs/autostock.infoReady

Storage writable
/home/autostock/htdocs/autostock.info/storageReady

Media writable
/home/autostock/htdocs/autostock.info/mediaReady

proc_open available
availableReady

FFmpeg
/usr/bin/ffmpeg · ffmpeg version 6.1.1-3ubuntu5 Copyright (c) 2000-2023 the FFmpeg developersReady

FFprobe
/usr/bin/ffprobe · ffprobe version 6.1.1-3ubuntu5 Copyright (c) 2007-2023 the FFmpeg developersReady

Package integrity
36 critical files verifiedReady

Operation

Website

Canonical domain, timezone and default language.

Application name

Application URL

Timezone

Default language

Database

New mode requires an empty database. Update mode creates a structure-only backup first.

Host

Port

Database

Username

Database password

Unix socket (optional)Leave empty for TCP using 127.0.0.1 and port 3306. A socket value must be an absolute local path.

Create the database when the account has permission

Owner administrator

The username and password hash are stored in .env. The plaintext password is never persisted.

Username

Password

Confirm password

Network trust

Forwarded client-IP headers are accepted only from these reverse proxies.

Trusted proxy IPs/CIDRs

Admin allowed IPs/CIDRs (optional)

Authorized live studio

Video.js is bundled and served locally, so no external player account or token is required. Enable playback and recording only for sources this installation is authorized to use. Public pages never link to an external model profile.

I confirm that this installation has authorization and all necessary rights for every configured live and recorded source.

Enable the local live player on the homepage and model live pages

Enable bounded visitor recording requests through the cron queue

Authorized model API hostsDiscovery and profile endpoints must use HTTPS and match this allowlist.

Authorized live stream hosts

Authorized avatar source hosts

Avatar refresh interval (seconds)

Server binaries

Recording workers run only from the central cron dispatcher. On Ubuntu 24.04 the ffmpeg package installs both FFmpeg and FFprobe. The expected paths are /usr/bin/ffmpeg and /usr/bin/ffprobe.

PHP CLI binary

FFmpeg binary

FFprobe binary