Bắt đầuStart here

Hướng dẫn deployDeployment guide

Dựng mới và cập nhật toàn bộ hệ thống: stack fxconsole, bốn broker, cổng firewall, chứng chỉ, terminal MT5, vps-agent, cùng cách kiểm tra, rollback và xử lý sự cố. Setting up and updating the whole system: the fxconsole stack, the four brokers, firewall ports, certificates, MT5 terminals and vps-agent, plus how to verify, roll back and troubleshoot.

• Cập nhậtUpdated 28/09/2026
• NguồnSource deploy.sh
• monitor/*/docker-compose.yml
• monitor/*/.env.example
• monitor/EaLinkBroker/README.md
• monitor/VpsStreamBroker/README.md
• monitor/claude-cli/README.md
• monitor/vps-agent/README.html

Cần deploy những gìWhat gets deployed

Kiến trúc, cổng và luồng dữ liệu: Kiến trúc hệ thống.

Architecture, ports and data flows: System architecture.

Điều kiện tiên quyếtPrerequisites

mkdir -p ~/goldenrobber && cd ~/goldenrobber
git clone <repo-url> GoldenRobber
cd GoldenRobber && git checkout main

Cài đặt lần đầuFirst-time setup

fxconsolefxconsole

1. Tạo file .env từ mẫu và khoá quyền:Create .env from the example and lock its permissions:

   cd ~/goldenrobber/GoldenRobber/monitor/fxconsole
   cp .env.example .env
   chmod 600 .env

2. Điền các biến trong bảng dưới (chỉ tên; giá trị lấy từ nơi ghi ở cột phải).Fill the variables in the table below (names only; take values from where the right-hand column says).
3. Khởi động stack (tạo luôn mạng fxconsole_default):Start the stack (this also creates the fxconsole_default network):

   docker compose up -d --build
   docker compose logs -f app

   Container app tự: tạo thư mục storage + chmod, composer install/update và npm ci/install khi manifest mới hơn, npm run build, php artisan key:generate --force chỉ khi .env chưa có APP_KEY=base64:, php artisan migrate --force, php artisan view:clear, rồi php-fpm -F. scheduler chờ vendor/autoload.php, chạy schedule:clear-cache rồi schedule:work. The app container: creates storage dirs + chmod, runs composer install/update and npm ci/install when manifests are newer, npm run build, php artisan key:generate --force only if .env has no APP_KEY=base64:, php artisan migrate --force, php artisan view:clear, then php-fpm -F. scheduler waits for vendor/autoload.php, runs schedule:clear-cache, then schedule:work.
4. Sao lưu .env (đã có APP_KEY) ra nơi an toàn.Back up .env (now holding APP_KEY) somewhere safe.
5. Đăng nhập admin, mở /admin/settings: kiểm tra app_version, điền EALinkBroker Secret Key (settings.broker_internal_secret), secret admin firehose (broker_admin_secret), VpsStreamBroker hostname / port, nhịp hb_interval_secs / stream_cadence_ms, Guacamole, token khởi tạo VPS. Giá trị trong DB thắng giá trị .env.Log in as admin, open /admin/settings: check app_version, fill EALinkBroker Secret Key (settings.broker_internal_secret), the admin firehose secret (broker_admin_secret), VpsStreamBroker hostname / port, the hb_interval_secs / stream_cadence_ms cadences, Guacamole, the VPS bootstrap token. DB values win over .env.
6. Đăng ký EA product: /admin/easupported → Thêm EA → slug (vd goldenrobber) → secret token tự sinh. URL https://fxconsole.gamelau.uk/easupported/goldenrobber đi vào InpCloudMyApiDomain, token đi vào InpCloudBearerToken (gõ trên terminal, không commit).Register the EA product: /admin/easupported → Add EA → slug (e.g. goldenrobber) → the secret token is generated. The URL https://fxconsole.gamelau.uk/easupported/goldenrobber goes into InpCloudMyApiDomain, the token into InpCloudBearerToken (typed on the terminal, never committed).

Các brokerBrokers

Chứng chỉ VpsStreamBroker cho fxconsoleVpsStreamBroker certificate for fxconsole

docker cp fxconsole-vps-stream-broker:/app/certs/server.cert /tmp/broker-ca.cert
docker cp /tmp/broker-ca.cert fxconsole-app:/tmp/broker-ca.cert
docker exec fxconsole-app php artisan vps-stream-broker:cert-import /tmp/broker-ca.cert

claude-cli (một lần)claude-cli (one time)

cd ~/goldenrobber/GoldenRobber/monitor/fxconsole
docker compose exec -it claude-cli claude login
# open the printed URL, approve, paste the code back

# back up the OAuth creds (treat the file as a secret)
docker compose exec claude-cli sh -c 'tar czf - -C /home/node .claude .config' > claude-creds-backup.tgz

Cloudflare TMap worker (tuỳ chọn)Cloudflare TMap worker (optional)

cd cloudflare-tmap-worker
npm install
wrangler login
npm run db:create      # copy database_id into wrangler.toml
npm run db:migrate
npm run secret:set     # enter TMAP_SECRET_KEY
npm run deploy         # → https://gr-tmap.<account>.workers.dev → InpCloudCfDomain

Thêm domain worker vào Allow WebRequest của terminal. Chi tiết: Cloudflare TMap worker.

Add the worker domain to the terminal's Allow WebRequest list. Details: Cloudflare TMap worker.

Deploy thường ngày với deploy.shRoutine deploy with deploy.sh

cd ~/goldenrobber/GoldenRobber
bash deploy.sh

flowchart TD
  A["git restore ."] --> B["git checkout main"]
  B --> C["git pull origin main"]
  C --> D["fxconsole: down, up -d --build"]
  D --> E["AccountStatusBroker: ensure_env, down, up -d --build"]
  E --> F["TickBroker: ensure_env, down, up -d --build"]
  F --> G["VpsStreamBroker: ensure_env, down, up -d --build"]
  G --> H["EaLinkBroker: ensure_env, down, up -d --build"]
  H --> I["== Deploy done == + .env notes + claude login reminder"]

fxconsole luôn đi trước để mạng fxconsole_default và fxconsole-redis tồn tại khi broker khởi động. fxconsole always goes first so fxconsole_default and fxconsole-redis exist when the brokers start.

== .env của broker ==
  TẠO MỚI  monitor/<Broker>/.env  — cần điền: <KEY1> <KEY2>
  ĐIỀN DB  monitor/<Broker>/.env: DB_HOST DB_PORT DB_NAME DB_USER DB_PASSWORD  (lấy từ monitor/fxconsole/.env)
  THIẾU DB monitor/<Broker>/.env: DB_PASSWORD trống và fxconsole/.env không có giá trị
  → Mở các file trên, điền ô còn trống (vd secret), rồi áp dụng lại cho service đó:
      cd ~/goldenrobber/GoldenRobber/monitor/<Broker> && docker compose up -d

cd ~/goldenrobber/GoldenRobber
git pull origin main
bash deploy.sh

Checklist firewall và port-forwardFirewall and port-forward checklist

# Linux / Git Bash
openssl s_client -connect fxconsole.gamelau.uk:9600 -servername fxconsole.gamelau.uk
openssl s_client -connect fxconsole.gamelau.uk:9602 -servername fxconsole.gamelau.uk
openssl s_client -connect fxconsole.gamelau.uk:9605 -servername fxconsole.gamelau.uk
openssl s_client -connect fxconsole.gamelau.uk:9607 -quiet
# Windows VPS
Test-NetConnection fxconsole.gamelau.uk -Port 9605

Phía MT5: SocketConnect() chỉ chạy với host có trong Tools → Options → Expert Advisors → Allow WebRequest for listed URL, cùng danh sách mà WebRequest dùng.

MT5 side: SocketConnect() only works for hosts listed in Tools → Options → Expert Advisors → Allow WebRequest for listed URL, the same list WebRequest uses.

Chứng chỉ TLSTLS certificates

cd ~/goldenrobber/GoldenRobber/monitor/<Broker>
docker compose down
cp -a certs "certs.bak-$(date +%F)"
rm -rf certs/
docker compose up -d      # regenerates with the current CERT_HOST

Kiểm tra sau deployVerify after deploy

fxconsole

cd ~/goldenrobber/GoldenRobber/monitor/fxconsole
docker compose ps                         # app, web, scheduler, redis, timescale, claude-cli, guacd, guacamole: Up
docker compose logs --tail=100 app        # migrate --force ran, php-fpm started
docker compose logs --tail=50 scheduler   # schedule:work running
curl -I http://127.0.0.1:8080             # nginx answers
docker exec -it fxconsole-redis redis-cli PING   # PONG

Tỷ giá, hệ số chia, EA của tôi (fxconsole ≥ 2026.09.14.2)Exchange rate, money divisor, My EAs (fxconsole ≥ 2026.09.14.2)

cd ~/goldenrobber/GoldenRobber/monitor/fxconsole
docker compose exec app php artisan migrate:status | grep 2026_09_1      # 09_13 000001..000004, 09_14 000001, 09_16 000001: Ran
docker compose exec app php artisan schedule:list | grep fx:sync         # every minute
docker compose exec app php artisan fx:sync-usdt-vnd --force             # USDT/VND = … (median of 10 SELL ads)
docker compose exec app sh -c 'grep fx.usdt_vnd storage/logs/laravel.log | tail -n 5'

1. Migration: container app tự migrate khi boot. Bốn migration ngày 2026-09-13 tạo fx_rates, thêm users.currency, mt5_accounts.is_cent (sau đó cho phép rỗng bằng ->change()) và broker_profiles.cent_servers; migration 2026_09_14_000001 chuyển hai cột này thành mt5_accounts.money_divisor và broker_profiles.server_divisors (Cent → /100, Standard → /1) rồi xoá cột cũ. Migration lỗi thì xem log app.Migrations: the app container migrates on boot. The four 2026-09-13 migrations create fx_rates and add users.currency, mt5_accounts.is_cent (then made nullable with ->change()) and broker_profiles.cent_servers; migration 2026_09_14_000001 turns those two into mt5_accounts.money_divisor and broker_profiles.server_divisors (Cent → /100, Standard → /1) and drops the old columns. If one fails, read the app log.
2. Tỷ giá: lệnh --force in ra giá. failed — HTTP 403 / 429 = Binance chặn IP server. Trên web, nút $ cạnh nút ngôn ngữ phải có mục VND bấm được và dòng "1 USDT = … ₫".Rate: the --force run prints the rate. failed — HTTP 403 / 429 = Binance is blocking the server IP. On the web, the $ button next to the language button must offer a clickable VND option and a "1 USDT = … ₫" line.
3. Hệ số chia: /admin/brokers → sửa broker → chọn /100 cạnh các server cent (/10 nếu broker báo ×10). Trên /deployments, cột Hệ số của account trên server đó hiện "/100 tự động". Ngoại lệ: chọn dòng → menu Hệ số chia.Money divisor: /admin/brokers → edit the broker → pick /100 next to the cent servers (/10 if the broker reports ×10). On /deployments, the Divisor column of accounts on that server shows "/100 auto". Exceptions: select the rows → Money divisor menu.
4. EA của tôi: đăng nhập bằng user có account đang chạy GoldenRobber → /easupported hiện thẻ EA với đủ account. Trống thì mở /admin/easupported/{slug} bằng admin: account không có ở đó = EA chưa heartbeat tới URL này (sửa InpCloudMyApiDomain / token).My EAs: log in as a user with accounts running GoldenRobber → /easupported shows the EA card with every account. If empty, open /admin/easupported/{slug} as admin: an account missing there = the EA is not heartbeating to that URL (fix InpCloudMyApiDomain / token).

Các broker: log khởi động cần thấyBrokers: startup log lines to expect

docker logs --tail=50 fxconsole-tick-broker
docker logs --tail=50 fxconsole-account-status-broker
docker logs --tail=50 fxconsole-vps-stream-broker
docker logs --tail=50 fxconsole-ea-link-broker

EaLinkBroker từ đầu tới cuốiEaLinkBroker end to end

# 1. TLS + challenge from outside
openssl s_client -connect fxconsole.gamelau.uk:9607 -quiet
# → {"t":"challenge","v":1,"nonce":"…","server_t":…}
# after 5 s → {"t":"hello_err","reason":"timeout"} and the connection closes

# 2. Full auth + heartbeat with the bundled client (or inside the container:
#    docker compose exec ea-link-broker node test-client.js …)
node test-client.js --host fxconsole.gamelau.uk --port 9607 \
  --slug goldenrobber --token '<secret>' \
  --composite vantage::vantagemarkets-live-3::25938032 --magic 21478308 \
  --node ops-test --inst 1
# → hello_ok, then hb_ok every 20 s   (--key <64hex> passes sha256(token) directly)

# 3. Fire a signal from another shell
docker exec -it fxconsole-redis redis-cli PUBLISH laravel-database-ea:link:cfg \
  '{"slug":"goldenrobber","targets":[{"composite_id":"vantage::vantagemarkets-live-3::25938032","magic":"21478308"}],"rev":1}'
# client prints {"t":"cfg","rev":1} and answers cfg_ack
# broker logs: cfg rev=1 slug=goldenrobber targets=1 delivered=1

# 4. Presence
docker exec -it fxconsole-redis redis-cli HGETALL \
  'laravel-database-ea_link:presence:goldenrobber:vantage::vantagemarkets-live-3::25938032:21478308'

VpsStreamBrokerVpsStreamBroker

# heartbeat keys of connected agents (refresh every heartbeat, expire 15 s)
docker exec -it fxconsole-redis redis-cli --scan --pattern 'laravel-database-vps:agent:*'
docker exec -it fxconsole-redis redis-cli GET laravel-database-vps:agent:42:heartbeat

# fake command push (agent 42 connected → "cmd push → vps=42 cmd_id=99999 kind=test")
docker exec -it fxconsole-redis redis-cli \
  PUBLISH laravel-database-vps:cmd '{"vps_id":42,"cmd_id":99999,"kind":"test"}'

# live UI path: open /vps as admin in two tabs, Disable a VPS in one,
# the badge must flip in the other within ~100 ms
docker exec -it fxconsole-redis redis-cli SUBSCRIBE laravel-database-vps:state

Phía terminal MT5MT5 terminal side

1. Allow WebRequest: Tools → Options → Expert Advisors → Allow WebRequest for listed URL, thêm https://fxconsole.gamelau.uk (chỉ cần origin; một dòng phủ heartbeat, TMap, /api/account-status, /api/sync-*). Socket tới broker dùng chung danh sách này, nên host của InpLinkHost / InpBrokerHost cũng phải có. Dùng Cloudflare worker thì thêm domain worker. Thiếu → WebRequest trả -1.Allow WebRequest: Tools → Options → Expert Advisors → Allow WebRequest for listed URL, add https://fxconsole.gamelau.uk (origin only; one line covers the heartbeat, TMap, /api/account-status, /api/sync-*). Broker sockets use the same list, so the InpLinkHost / InpBrokerHost hosts must be there too. Using the Cloudflare worker? Add its domain. Missing → WebRequest returns -1.
2. Copy file .ex5 vào MQL5\Experts của terminal (đúng đường dẫn mà chart/profile tham chiếu).Copy the .ex5 into the terminal's MQL5\Experts (the path the chart/profile references).
3. Gỡ EA khỏi chart rồi gắn lại. F7 (mở hộp thoại input) khi EA đang gắn không nạp binary mới.Remove the EA from the chart, then attach it again. F7 (the inputs dialog) on an attached EA does not load the new binary.
4. Nếu MT5 hiện hộp thoại "Welcome to LiveUpdate": chọn Later. Restart sẽ tắt mọi EA đang chạy.If MT5 shows the "Welcome to LiveUpdate" dialog: choose Later. Restart kills every running EA.
5. Nạp .set (bản chia sẻ trong README/configs/ có token trống), gõ InpCloudBearerToken ngay trên terminal, kiểm tra lại tab Inputs sau khi nạp (input thiếu trong .set cũ giữ giá trị cũ).Load the .set (the shareable copy in README/configs/ has a blank token), type InpCloudBearerToken on the terminal itself, and re-check the Inputs tab afterwards (inputs missing from an older .set keep stale values).
6. Kiểm tra panel: tiêu đề có build (vd GoldenRobber v1.42 (b3), tên file không cho biết build), Server: CONNECTED (Ns ago), Link: UP fxconsole.gamelau.uk:9607 (Ns) (1.42+), dòng Node: … | LEADER.Check the panel: the title shows the build (e.g. GoldenRobber v1.42 (b3); the filename does not tell you the build), Server: CONNECTED (Ns ago), Link: UP fxconsole.gamelau.uk:9607 (Ns) (1.42+), the Node: … | LEADER line.

Checklist rollout GoldenRobber 1.42GoldenRobber 1.42 rollout checklist

ServerServer

1. bash deploy.sh (fxconsole ≥ 2026.09.12.3: endpoint /api/internal/ea-link/key, notify sau Apply/Clear, badge Link, broker đọc secret từ DB).bash deploy.sh (fxconsole ≥ 2026.09.12.3: the /api/internal/ea-link/key endpoint, notify after Apply/Clear, Link badge, brokers read secrets from the DB).
2. monitor/EaLinkBroker/.env có DB_*; log có settings DB: on và PSubscribed to *ea:link:cfg.monitor/EaLinkBroker/.env has DB_*; the log shows settings DB: on and PSubscribed to *ea:link:cfg.
3. /admin/settings → EALinkBroker Secret Key đã có giá trị./admin/settings → EALinkBroker Secret Key is set.
4. Cổng 9607 mở trên OVH + IPFire; openssl s_client -connect fxconsole.gamelau.uk:9607 -quiet trả challenge.Port 9607 open on OVH + IPFire; openssl s_client -connect fxconsole.gamelau.uk:9607 -quiet returns a challenge.

Terminal demoDemo terminal

1. Copy GoldenRobber-1.42.ex5; Allow WebRequest có https://fxconsole.gamelau.uk.Copy GoldenRobber-1.42.ex5; Allow WebRequest contains https://fxconsole.gamelau.uk.
2. Nạp v1.42.b7-pass58.set, gõ token, gỡ EA rồi gắn lại, LiveUpdate → Later.Load v1.42.b7-pass58.set, type the token, remove and re-attach the EA, LiveUpdate → Later.
3. Panel: GoldenRobber v1.42 (b7), Server: CONNECTED, Link: UP …. Trên /admin/easupported/goldenrobber: account Online, badge Link.Panel: GoldenRobber v1.42 (b7), Server: CONNECTED, Link: UP …. On /admin/easupported/goldenrobber: account Online, Link badge.
4. Apply một hot config vô hại cho account demo → log Experts có [EaLink] cfg rev=… đã áp trong N ms, broker log cfg rev=… delivered=1, dòng Hot Reload trên panel đổi trong ≈ 1 s. Rồi Clear config và kiểm tra EA về giá trị input.Apply a harmless hot config to the demo account → the Experts log shows [EaLink] cfg rev=… đã áp trong N ms, the broker logs cfg rev=… delivered=1, the panel's Hot Reload line changes within ≈ 1 s. Then Clear config and check the EA reverts to its inputs.
5. Thử mất Link: docker compose stop ea-link-broker → panel Link: DOWN, retry Ns, EA vẫn nhận config qua heartbeat; docker compose start ea-link-broker → Link UP lại.Test losing the link: docker compose stop ea-link-broker → panel Link: DOWN, retry Ns, the EA still gets config via heartbeat; docker compose start ea-link-broker → Link UP again.

vps-agent và gói MT5vps-agent and MT5 packages

VPS mớiNew VPS

1. Server sẵn sàng: VpsStreamBroker chạy, cổng 9605 mở, CA sẵn cho /api/agent/broker-config, "VpsStreamBroker hostname / port" đã điền, VPS_INIT_BOOTSTRAP_TOKEN đã đặt (nếu provisioning tự động).Server ready: VpsStreamBroker running, port 9605 open, CA available to /api/agent/broker-config, "VpsStreamBroker hostname / port" filled, VPS_INIT_BOOTSTRAP_TOKEN set (for zero-touch provisioning).
2. Compile HeartbeatAgent.au3, CmdAgent.au3 (AutoIt 3.3.16+, chế độ GUI, thư mục lib/ cạnh source), copy vào C:\VpsAgent\ cùng vps-agent.ini (copy từ /vps) hoặc vps-agent.ini.init-template, bootstrap-fresh-vm.ps1, prepare-vm.ps1. Hoặc dùng gói vps-agent-setup-1.3.2-phase9.zip.Compile HeartbeatAgent.au3, CmdAgent.au3 (AutoIt 3.3.16+, GUI mode, lib/ next to the sources), copy into C:\VpsAgent\ with vps-agent.ini (copied from /vps) or vps-agent.ini.init-template, bootstrap-fresh-vm.ps1, prepare-vm.ps1. Or use the vps-agent-setup-1.3.2-phase9.zip package.
3. Màn hình VM: độ phân giải 1600×900, scale 100% (mặc định của Windows), đặt ở Settings › System › Display trước khi snapshot để mọi VM clone ra giống nhau. Không đổi scale: CmdAgent điền danh sách WebRequest trong Options của MT5 bằng cách click theo toạ độ pixel cố định (mỗi dòng 18 px, tính ở scale 100%).VM display: 1600×900 resolution, 100% scale (the Windows default), set in Settings › System › Display before the snapshot so every cloned VM matches. Do not change the scale: CmdAgent fills the WebRequest list in MT5's Options by clicking fixed pixel offsets (18 px rows, measured at 100% scale).
4. Windows mới cài, một lần mỗi OS image: powershell -ExecutionPolicy Bypass -File .\bootstrap-fresh-vm.ps1 (Administrator), rồi snapshot VM.Fresh Windows, once per OS image: powershell -ExecutionPolicy Bypass -File .\bootstrap-fresh-vm.ps1 (Administrator), then snapshot the VM.
5. .\prepare-vm.ps1 (Administrator): chuẩn bị AutoLogon, gỡ MOTW, shortcut Startup cho HeartbeatAgent, cài stunnel + cấu hình từ /api/agent/broker-config, cài dịch vụ TightVNC. Với init = pending: gửi MAC tới /api/agent/init-config, ghi lại ini, đổi tên máy, reboot..\prepare-vm.ps1 (Administrator): AutoLogon prep, MOTW strip, Startup shortcut for HeartbeatAgent, stunnel install + config from /api/agent/broker-config, TightVNC service install. With init = pending: posts the MAC to /api/agent/init-config, rewrites the ini, renames the computer, reboots.
6. Reboot, rồi kiểm tra: tasklist | findstr /I "HeartbeatAgent CmdAgent stunnel"; heartbeat-agent.log có BROKER: HELLO ok — stream healthy và HB via broker stream …; broker log [vps=N] HELLO ok.Reboot, then check: tasklist | findstr /I "HeartbeatAgent CmdAgent stunnel"; heartbeat-agent.log shows BROKER: HELLO ok — stream healthy and HB via broker stream …; the broker logs [vps=N] HELLO ok.

Nâng cấp agentAgent upgrade

Gói tài khoản MT5MT5 account packages

1. /admin/brokers: raw name phải khớp đúng ACCOUNT_COMPANY; gói và VPS đều gắn một broker, chỉ ghép được khi cùng broker./admin/brokers: the raw name must match ACCOUNT_COMPANY exactly; packages and VPSes are each tied to a broker and can only be paired when they match.
2. Chuẩn bị ZIP: thư mục MT5 portable có EA + profile chart; input khác nhau theo user để trong .set dưới MQL5/Presets/ với giá trị giữ chỗ. Tính SHA-256 (certutil -hashfile package.zip SHA256). Tên gói trong repo có dạng GoldenRobber-Pass58_v1-42-b3-Vantage-build-6182.zip.Prepare the ZIP: a portable MT5 folder with the EA + chart profile; per-user inputs go in a .set under MQL5/Presets/ with a placeholder value. Compute SHA-256 (certutil -hashfile package.zip SHA256). Package names in the repo look like GoldenRobber-Pass58_v1-42-b3-Vantage-build-6182.zip.
3. /admin/packages: URL ZIP (hoặc upload qua /admin/packages/upload, nginx cho phép tới 1024 MB, 600 s), version, profile, MT5 build (tuỳ chọn), SHA-256, danh sách URL Allow WebRequest, value injection (vd MQL5/Presets/AccountStatusUpdater.set · InpAccountSecretKey · user.mt5_secret_key)./admin/packages: ZIP URL (or upload via /admin/packages/upload, nginx allows up to 1024 MB, 600 s), version, profile, MT5 build (optional), SHA-256, Allow WebRequest URL list, value injections (e.g. MQL5/Presets/AccountStatusUpdater.set · InpAccountSecretKey · user.mt5_secret_key).
4. User deploy ở /deployments/new; theo dõi ở /vps/{id} và /deployments. Account đã deploy không tự nâng cấp khi gói đổi; có route bulk-upgrade theo gói.Users deploy on /deployments/new; watch /vps/{id} and /deployments. Deployed accounts do not auto-upgrade when a package changes; there is a per-package bulk-upgrade route.

MySQL trên aaPanelMySQL on aaPanel

-- current retention and binlog files
SHOW VARIABLES LIKE 'binlog_expire_logs_seconds';
SHOW BINARY LOGS;
-- emergency cleanup (check replicas first if any)
PURGE BINARY LOGS BEFORE NOW() - INTERVAL 1 DAY;

VPN WireGuard (CT 107)WireGuard VPN (CT 107)

Rollback theo thành phầnRollback per component

Xử lý sự cốTroubleshooting

Đọc tiếpRead next