Safora Quickstart, as shipped in the download

SAFORA — QUICKSTART
===================

Food-Safety (HACCP) Digital Logbook — self-hosted PHP + MySQL/SQLite.


REQUIREMENTS
------------
  - PHP 8.1+ (tested on 8.3) with extensions: pdo, pdo_sqlite (or pdo_mysql)
  - MySQL 5.7+ OR SQLite 3 (SQLite requires no extra setup)
  - A web server (Apache with mod_rewrite, or Nginx with try_files)
  - No Composer packages, no API keys, no external services.


SHARED HOSTING / CPANEL (RECOMMENDED FOR MOST BUYERS)
------------------------------------------------------
1. Upload the contents of the `app/` folder to your web root (e.g. public_html/)
   or a subdirectory (e.g. public_html/safora/).

2. Make sure this directory is writable by PHP:
     data/

   Via cPanel File Manager: right-click -> Permissions -> set to 755 or 775.

3. Visit https://yourdomain.com/install/ in your browser.

4. Fill in the installer:
     - Database: choose MySQL (fill in host/name/user/pass) or SQLite (no setup)
     - Business name and temperature unit (°C or °F)
     - Timezone (determines "today" and the date each check is filed under)
     - Your manager name, email + password

5. The installer writes config.php and redirects you to the login page.

6. Log in, then set up:
     - Equipment (your fridges, freezers, hot-hold units) under Setup > Equipment
     - Opening / closing / cleaning checklists under Setup > Checklists
   Active fridges & freezers plus opening/closing/daily checklists are the checks
   Safora expects each day to mark the day green.

7. Start recording checks from "Record a check".


TRY IT WITH DEMO DATA FIRST
---------------------------
  - On the dashboard, click "Load demo data" for ~2 weeks of realistic records
    (a green/amber/red mix), then "Reset all data" when done.
  - Or from the command line:  php bin/demo.php
      (login: manager@safora.app with the one-time password it prints)


VPS / SELF-HOSTED (APACHE)
--------------------------
  <VirtualHost *:80>
    DocumentRoot /var/www/safora/app
    <Directory /var/www/safora/app>
      AllowOverride All
      Require all granted
    </Directory>
  </VirtualHost>


DOCKER (QUICK TEST)
-------------------
  docker run --rm -p 8080:8080 \
    -v "$(pwd)/app:/var/www/html" \
    -w /var/www/html \
    php:8.3-cli \
    php -S 0.0.0.0:8080 router.php

  Then visit http://localhost:8080/install/


AUDIT EXPORTS
-------------
  - Audit export > choose a date range > Download PDF pack or CSV.
  - The PDF pack contains a daily compliance summary (with manager sign-offs) and
    a full check log. It is a genuine PDF — email it, print it, or hand it to an
    Environmental Health Officer.


POST-INSTALL SECURITY CHECKLIST
--------------------------------
  [ ] config.php is protected (the .htaccess does this automatically)
  [ ] data/ is not web-accessible (.htaccess blocks it automatically)
  [ ] Use HTTPS in production
  [ ] Keep PHP updated


LOOKING AFTER IT (from 4.0)
---------------------------
  * Updates: open Updates in the menu, save your license key once, press Check for updates.
    Reaching 4.0 from 3.x is the last update by hand: replace the files; config.php and data/ stay.
  * Sample data: the installer offers to start with a sample; remove it later with one click.
  * Backups: "Back up once a day by itself" is on by default (/restore); add an S3-compatible bucket there for
    a copy somewhere else. The Health page (/health) says whether all of this is working.
  * On Nginx: use the server block in the manual ("On Nginx: keep data/ private", https://ownware.io/p/safora/manual);
    it opens the installer and keeps data/ private.
  * One-line install for technical owners:
    curl -fsSL https://ownware.io/install.sh | sh -s -- safora <your license key>

NOTES
-----
  * All temperatures are stored in °C; the display unit is a per-business setting.
  * HACCP thresholds (cooking 75°C, reheating 82°C, fridge 5°C, freezer -18°C) are
    pre-set defaults and can be changed in Settings to match your own food-safety
    management system.
  * Safora keeps your records. It does not certify compliance and does not replace
    a food-safety management system or professional food-safety advice.