Question 1

Why does the Docker first-run script fail with 'Your lock file does not contain a compatible set of packages' error?

Accepted Answer

This error occurs due to a PHP version mismatch between the Docker container (PHP 7.4) and package requirements that need PHP 8.1 or higher, combined with outdated lock file constraints. To fix: 1) Update the Dockerfile base image to a PHP 8.1+ version (e.g., php:8.1-fpm) and rebuild the container. 2) After starting the container, run 'composer update --with-all-dependencies' to resolve conflicting package versions (like specshaper/encrypt-bundle vs doctrine/orm). If you still face issues, manually edit composer.json to allow compatible versions of doctrine/common or other conflicting packages. These steps align the environment with current dependency requirements. Note that v2.0 of the project simplifies self-hosting and avoids these legacy conflicts.

Question 2

How to fix CSRF vulnerability when the application is missing CSRF tokens?

Accepted Answer

Add unpredictable CSRF tokens tied to user sessions. Include the token in all state-changing requests (forms, AJAX). Strictly validate the token server-side before processing any action. Use existing framework libraries (e.g., Spring Security, Django CSRF) or implement manually: generate high-entropy token on login, store in session, embed in forms as hidden field, and verify on submission.

Question 3

How to fix calendar schedule reverting to UTC after saving in Personal Management System?

Accepted Answer

This is a confirmed frontend bug, not a backend or container configuration issue. While the calendar correctly displays local time during schedule creation, flawed timezone logic in `TuiCalendarService.ts` causes the frontend to send UTC-formatted date data to the backend after saving. Adjusting the php-fpm container's `TZ` environment variable or mounting localtime volumes will not resolve this issue.
Temporary workaround: Manually add your local timezone's UTC offset when creating schedules (e.g. add 2 hours for the Europe/Berlin timezone).
For source code deployments: Update the timezone handling logic in `TuiCalendarService.ts`, then run `npm run build` to rebuild the frontend. The bug has been fixed in the official frontend rewrite, but the full stable release of the rewrite is still months away.

Question 4

How do I fix the mailpit Docker build failure and missing PHP autoload files in Personal Management System?

Accepted Answer

Use the pre-built Mailpit image instead of building it locally. Replace the `pms-mail` service configuration in `docker-compose.yml` with:

```yaml
pms-mail:
  container_name: pms-mail
  hostname: pms-mail
  image: axllent/mailpit:latest
  restart: always
  tty: true
  ports:
    - "8082:8025"
    - "1025:1025"
  volumes:
    - pms-mailpit-db:/data
```

Then start the service:

```bash
docker compose up -d pms-mail
```

If nginx/PHP reports missing autoload files, regenerate Composer's autoloader inside the php-fpm container:

```bash
docker exec -it <php-fpm_container_name_or_id> sh
composer dump-autoload
exit
```

Finally restart the stack:

```bash
docker compose restart
```

This workaround was reported for fresh installations on Ubuntu 20.04 and 24.04.

Personal Management System

Core Features

What It Can't Do

Use Cases

Tags

Getting Started

Similar Projects