IgonHosting SaaS

IgonHosting turns Dolibarr into a multi-tenant hosting control panel. It allows web hosting companies, MSPs and IT integrators to create and manage multiple independent Dolibarr instances on a single shared server, each with its own isolated database, domain and SSL certificate.

WHAT IS IGONHOSTING?

IgonHosting is installed on a master Dolibarr instance. From there, you can create as many tenant instances as needed. Each tenant is a fully operational, independent Dolibarr environment sharing the PHP code of the server but with completely isolated data.

IgonTenant is the companion security module automatically activated on each new tenant. It prevents tenant administrators from accessing system administration pages, ensuring they cannot interfere with the server or other instances.

AUTOMATED INSTANCE CREATION

Creating a new instance takes 30 to 90 seconds. The module handles automatically:
- Database and user creation (MySQL/MariaDB or PostgreSQL)
- Dolibarr schema installation in the new database
- Tenant data directory creation
- Apache or Nginx virtual host configuration and activation
- Let's Encrypt SSL certificate request
- IgonTenant security module activation

CODE UPDATES VIA GIT

All tenants share the same PHP codebase. A single Git update from the control panel updates all tenants simultaneously:
- Integrates with any Dolibarr Git repository (GitHub, self-hosted)
- Automatic backup of conf.php before and after update
- Only stable releases accepted (beta, alpha, rc, dev versions are rejected)
- Update status dashboard showing current tag, branch and pending commits

DATABASE MIGRATIONS

After a code update, each tenant may need its Dolibarr database migrated. IgonHosting manages the full migration chain automatically:
- Detects required migration steps (e.g. v20 → v21 → v22 → v23 → v24)
- Executes upgrade.php and upgrade2.php for each intermediate version
- Resilient: if a step fails, the tenant stays at the last completed version
- Resume from failure: next execution continues from the last successful step
- Repair button for tenants with schema inconsistencies

BACKUP SYSTEM

- Manual database backup per instance from the instance card
- Automatic backup before each Git code update
- Backups stored in each tenant's own data directory
- Restore with a single click (with explicit confirmation)
- Backup status indicator on the updates page

SSL MANAGEMENT

- Obtain Let's Encrypt certificates at instance creation
- Force certificate renewal from the instance card
- Real-time SSL status per instance (valid / expiring soon / expired)
- Days remaining until expiration displayed in the instance list

BILLING INTEGRATION

The instance list shows the billing status of each tenant's associated client:
- Active recurring invoice template: direct link to the template
- Inactive or completed template: link to review it
- No template: direct link to create a new invoice
- Quick billing overview without leaving the hosting panel

SECURITY ARCHITECTURE

- AES-256-CBC encryption for all database passwords stored in the master database
- Privileged operations (vhost, SSL, Git) executed via a dedicated helper script with sudo
- The helper script validates all arguments with strict regular expressions
- sudoers rule grants www-data access only to that specific script
- IgonTenant restricts access to /admin/modules.php, /admin/security.php, /install/ and other critical pages

INSTANCE MANAGEMENT

- Enable / disable virtual host (traffic redirected to configured URL when disabled)
- Copy admin URL to clipboard
- Edit name, notes, monthly fee and associated client
- Delete instance: removes record, database and virtual host (data directory preserved for safety)

TECHNICAL REQUIREMENTS

- Dolibarr 17.0 or higher
- PHP 7.4 or higher
- Apache 2 or Nginx (any version)
- MariaDB 10.3+ / MySQL 8.0+ or PostgreSQL
- Certbot (for automatic SSL certificates)
- Git 2.0+ (optional, for code updates)
- Root or sudo access to the server

IDEAL FOR

- Web hosting providers offering Dolibarr as a service
- Managed Service Providers (MSP)
- IT integrators managing Dolibarr for multiple clients
- Companies requiring isolated Dolibarr environments per client or department

---
Author: Ildefonso González — Igontek (https://www.igontek.com)
Compatibility: Dolibarr 17.0+
License: GPLv3