Settings and the secrets vault
Settings & Secrets holds every module's settings in one place, grouped in a side menu. Changes here stay in step with each module's own settings button, and the search box at the top finds a setting by name.
The groups
| Group | Sections |
|---|---|
| Company | Business Profile, POS & Tax, Devices & Printers, Customers, Localization & Currency |
| Website | Branding & Layout, Blog, Website Pages, Social Media, Loyalty & Referrals, Marketing & SEO |
| Operations | Repairs, Refurbishment, Service Calls, Trade-ins, Tasks, Shipping & Delivery, Shipping Zones, Appointments & Booking, Returns & Refunds, Warranties & RMA, Support & Live Chat |
| Catalogue | Inventory & Products, Services, Marketplace Channels, Vendors & Suppliers, Telephony & Live Chat |
| Finance | Finance & Accounting, Invoicing, Default Accounts, HR & Payroll, Payroll, Reports, Square Payments & Terminal, Taxes & Compliance, Gift Cards |
| Access | Users & Roles, Roles & Permissions, Notifications, Security & 2FA, Data Privacy & Consent, Audit Logs |
| Templates | Document Templates, Email Builder, Email Templates |
| System | Integrations & API Keys, Master Account, Mobile App, Change Log, Backups & Data, Cron & Scheduled Jobs, Accounting Sync, Text Messages (SMS), Import Data, System Health, Email Delivery, Storage Usage, Login History, Data Sync |
The secrets vault
Only two things live in a file: the database connection and the app secret, in secure_data/secrets.php outside the web root. Every other credential, such as your mail password, Square token, UPS keys, SMS keys and AI keys, is entered in Integrations & API Keys and stored encrypted in your database.
- Secret fields are masked after saving. You never see the stored value again.
- Secrets are used on the server only and never sent to the browser.
- Leave an integration blank to keep it off.
- Paste keys exactly as your provider gives them.
System tools
- System Health: recent errors, when each scheduled job last ran, the send queue, disk space and slow requests.
- Email Delivery: the mail settings in use, recent sends and a test.
- Storage Usage: disk used by uploads, backups and
secure_data/, and the database size. - Login History: recent sign-ins, from the audit log.
- Change Log: a dated record of notable changes, including each update.
- Import Data: bring in customers, products and repair tickets from a CSV export. Exports from RepairShopr and RepairDesk map without edits; other files can be mapped by hand. A dry run reports what would happen before anything is written.
Privacy
Data Privacy & Consent sets the cookie banner and consent model, how long customer data is kept, and whether customers can download their data or ask for their account to be deleted from the client portal.