Hilfe
Antworten auf die häufigsten Fragen. Die vollständige Dokumentation jedes Moduls steht im Dolibarr-Wiki.
Allgemeine Fragen
Where do I find the zip after buying on the Dolistore?
In your Dolistore account, open the Orders section. Every paid order gives access to the zip download. You will also find the order reference there, which is the one I ask for when you open a support request.
How do I install a module?
Go to Home, Setup, Modules, then to the "Deploy/install external app/module" tab. Upload the zip, then enable the module in the list. If the upload is refused, the Dolibarr custom folder is not writable. In that case, copy the folder from the zip into htdocs/custom over FTP or SSH.
What should I do after updating a module?
Replace the module files, then disable and re-enable it in Setup, Modules. Re-enabling is what applies the database and permission changes. Your settings and data are kept.
What information should a request include?
- the module version and the Dolibarr version (Home, Setup, About)
- the exact error message or a screenshot
- what you were doing just before
- the hosting type (shared, server, Docker)
I lost my phone, how do I sign in?
Use one of your 10 backup codes instead of the app code. If you have none left, ask an administrator to reset your 2FA from the module administration. You will set up a new one at your next login.
Which apps work with 2FA?
Any TOTP app works, for example Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, Aegis or FreeOTP. The QR code is generated on your server, without going through a third-party service. Each user can also pick a security key such as a YubiKey, or their device biometrics (Windows Hello, Touch ID, Face ID).
Can 2FA be made mandatory for everyone?
Yes, you just tick a box in the module administration. Users who do not have a second factor yet are asked to set one up at their next login. The dashboard shows how adoption is going, and you can reset an account's 2FA or make it enrol again.
The YubiKey or Windows Hello does not work
Security keys and biometrics (WebAuthn / FIDO2) only work when Dolibarr is opened over HTTPS. This is a browser rule, the module cannot change it. As long as you are on HTTP, use the TOTP app or the backup codes.
I am on Dolibarr 16, 17 or 18. Should I update?
Yes, install version 6.0.3 or later. Before it, Dolibarr 16 to 18 did not ask for the second factor, because the check relied on a hook that only exists from Dolibarr 19. After replacing the files, disable then re-enable the module.
I locked myself out, what can I do?
The pause lasts 5 minutes the first time, then gets longer each time it happens again, up to the cap you set. Wait for the pause to end, or sign in from another address, then unblock yours in the current blocks screen. To keep it from happening again, add your address to the allow list with the "add my current IP" button.
The city shown on the map is wrong
IP geolocation is only approximate, especially on mobile networks, where the address may be tied to another city of the operator. The "connection source" shows the operator and the network type (fixed, mobile, hosting or VPN), which helps you tell whether the city is reliable. For your offices or your VPN, declare the real position in "Declared places" and it will take priority over the public databases.
Are IP addresses sent to an outside service?
No. Geolocation uses a database installed on your server, either the free DB-IP Lite or MaxMind GeoLite2 with your key. The maps in alert emails are drawn on your server too. There is no API key and no subscription.
Why no alert on the first day?
Each account's first login is learned silently and becomes the known device and country. After that, an alert is only sent for a new device or a new country. This avoids a wave of false alerts on the day you install it.
Where is the recycle bin?
You can reach it in three ways, from every page. Right after a deletion, the message offers an "Undo this deletion" link. The bin icon at the top right shows how many items can be recovered. It is also in the Tools, Recycle bin menu. If you want a tab in the top bar, you can turn it on in the module settings.
Does restoring an invoice bring back its payments?
No. The invoice comes back with its lines, extra fields, categories, links and attached files. Its payments, accounting entries and stock movements do not come back. The check screen reminds you of this before you confirm.
How long do items stay in the bin?
They stay 30 days by default, and you can change this for each record type. An automatic purge runs every day and erases what is past the delay. You can also empty the bin by hand.
A deletion does not show in the bin
The module captures deletions made through Dolibarr. It does not see those made directly in SQL, or by a module that bypasses Dolibarr triggers, and the settings page lists the installed modules in that case. Some types are not covered yet, such as supplier documents, members, shipments, contracts, expense reports and tickets.
Which fields does DocFinder search?
It searches the document number, the customer name, line descriptions, product reference and label, public and private notes, and the phone, email and name of contacts. Each field can be turned on or off in the settings, and so can the scope (quotes, invoices or both).
How do I find a document from a phone number?
Type the number exactly as you have it. "06 12 34 56 78", "06.12.34.56.78" or "+33 6…" give the same result. The customer's quotes and invoices are shown, with the matching contact under their name.
A user does not see DocFinder
They are missing the access permission. You can grant it from the "User access" card in the module settings, without opening each user record. Everyone then only sees the documents they are already allowed to read in Dolibarr.
Can my customer open the PDF normally?
Yes. By default, the PDF opens with a double-click, without a password. Only editing, extraction and assembly are blocked. You choose whether printing and copying text stay allowed.
Can the restrictions be removed?
Without an opening password, common readers such as Adobe Acrobat or Foxit respect the restrictions, but a specialised tool can remove them. If the document must stay truly confidential, set an opening password. The PDF is then encrypted, and nobody can read it without that password.
Does online signature work with a protected quote?
Yes. Your customer signs online and the signature is placed in the approval box of the quote, InfraS PackPlus templates included. The original PDF and the signed PDF are then protected again. Bulk generation from the lists keeps working too.
What about Factur-X invoices?
They are protected if your server has qpdf or pikepdf, which keep the embedded XML file. With the built-in engine, the module leaves them as they are so the XML is not lost. Also note that an encrypted PDF is no longer PDF/A compliant.
Can an invoice be issued twice?
No. There is only one invoice per subscription and per period, and a unique key in the database guarantees it. Even if generation runs twice, the period already invoiced is skipped.
Do I need a scheduled task (cron)?
It is not required. Without cron, due invoices are generated while a user allowed to create invoices is browsing Dolibarr. If you prefer generation at a fixed time, the dashboard shows the automation status and the exact crontab line to add.
Are payment reminders sent automatically?
No. The module suggests tiered reminders, at 30, 60 and 180 days by default, each with its own email template. Nothing is sent without your approval. From the unpaid screen, you can send reminders for several invoices at once.
An invoice was generated without a PDF
It is flagged "PDF missing" in the log and on the subscription record, with a "Generate the PDF" button. Since version 1.4.1, if the PDF model of the template invoice no longer exists, the module uses the default invoice model, then another active model. A missing PDF is also generated when the email is sent.
The invoice due date is too far away
The due date depends on the payment terms. You can choose them for each subscription, or impose one on all generated invoices from the settings, including a fixed day of the month such as "the 10th". The due date is recalculated before validation, so the PDF shows the right date.
The native Dolibarr backup fails, will BackupGuard work?
In most cases, yes. BackupGuard exports the database in PHP and does not need mysqldump, which is often missing or forbidden on shared hosting and in Docker containers. As soon as it is enabled, the module dashboard shows a diagnostic of your server.
How do I open a backup without Dolibarr?
Encrypted backups use the standard format of the openssl command, so they open on any machine with this command:
openssl enc -d -aes-256-cbc -pbkdf2 -in backup.zip.enc -out backup.zip
The resulting zip contains database.sql, manifest.json and the documents folder.
Where can backups be sent?
A local copy is always made. You can add, at the same time, a WebDAV space (Nextcloud, ownCloud, kDrive, Infomaniak), S3-compatible storage (AWS, Scaleway, OVH, Backblaze B2, Wasabi, MinIO), an FTP or FTPS server, and an SFTP server if the PHP ssh2 extension is present. The "Test connection" button writes then deletes a test file, and shows you the remote server's real error if it fails.
My hosting has no cron
Use the trigger URL with a secret key, which you will find in the settings. An external cron service, or any daily call to that address, is enough. The Dolibarr scheduled job and a command-line script are still available if you need them.
Can I restore on another server?
Yes. Install a fresh Dolibarr with only BackupGuard, then start the restore from the browser. The module analyses the file without changing anything and first makes a safety backup of the current state. If the restore stops halfway, the "Back to the previous state" button takes you back to where you started. For very large databases, a command-line script is provided.
Does the Dolibarr update work in Docker?
In a container, the Dolibarr files come from the image and would be overwritten the next time it is recreated. The module therefore shows you the steps to follow instead of changing the files. On regular hosting or a server, the update is done from the browser, after a full backup, and you can go back to the previous files.
The Excel button does not show on a list
There are three things to check. The user needs the "Export a list" permission, which new users get by default. The list must not be among the excluded lists in the settings. Finally, it must come from a module that follows Dolibarr conventions. When all is well, the button shows in the title bar, next to the pagination.
How many rows can be exported?
For "the whole filtered list", the limit is 5,000 rows by default, and you can raise it up to 50,000. Data goes through in small chunks and, above a certain threshold, the file is written as a stream, so ordinary hosting is enough.
Will amounts be numbers in Excel?
Yes. Amounts become real numbers and dates become real Excel dates, while references stay text, so "2026-001" never turns into a date. In CSV, the file is UTF-8 with BOM, Excel opens it directly, and you choose the separator.
Can I see who exported what?
Yes. The export log, in the module settings, shows for each file the user, the list, the date and the number of rows. The files themselves are not kept, they are deleted on download or after one hour.