Self-Hosted Platform Administration
Maintenance CLI reference
Supported maintenance commands for self-hosted Sigora operators.
Run maintenance commands as the approved service account for your deployment. Use the full command form below unless the release instructions specify otherwise:
php /var/www/sigora/workers/maintenance.php <command>Run only commands that are part of your approved operating procedure. Review the maintenance log after a command and avoid running disruptive commands repeatedly during an incident.
| Command | Operator purpose |
|---|---|
analytics:aggregate, analytics:rollup, usage:calculate, analytics:prune | Maintain analytics and usage reporting. |
organization-logs:process | Complete or expire requested organization-log collections. |
trust-bundle:refresh [--force] | Refresh Microsoft client-authentication trust material. Use --force only when an investigation or release procedure requires it. |
mstenant:refresh-domains / domains:refresh | Refresh verified domains for configured Microsoft tenants. |
selfcheck:nodestatus | Review Node health and raise applicable platform alerts. |
selfcheck:expirations | Check configured secret and certificate expiry. |
node-rotations:check | Identify Node-secret rotations that need operator attention. |
assignments:sync-group-names / sync-group-mapping-names | Refresh displayed Microsoft group names for assignments. |
cleanup | Apply configured retention cleanup. Review retention requirements before scheduling it. |
platform:root-totp-recover --confirm-root-totp-reset | Reset only the built-in root account’s TOTP enrollment. |
Use the supplied update process for upgrades. Do not run release-specific migration commands independently unless the release instructions explicitly require them.