Updated: 28 September 2026 · Applies to: Bolt CMS 6.1 on Ubuntu 24.04, Debian 12, AlmaLinux 9 and Rocky Linux 9
Fedora 29 is end of life; for servers we recommend AlmaLinux 9, Rocky Linux 9 or Ubuntu 24.04. Bolt is a lightweight open-source CMS built on Symfony. The current version is Bolt 6.1, which needs PHP 8.2 or newer.
Before you start
- A VPS or dedicated server with a fresh Ubuntu 24.04 / Debian 12 or AlmaLinux 9 / Rocky Linux 9 installation, and root or sudo access.
- A domain or subdomain pointing to the server (an A record), if you want HTTPS.
- The system updated:
apt update && apt upgradeordnf upgrade.
Install Apache, MariaDB and PHP
Ubuntu 24.04 / Debian 12:
apt install apache2 mariadb-server php libapache2-mod-php php-mysql php-xml php-mbstring php-curl php-zip php-gd php-intl systemctl enable --now apache2 mariadb
AlmaLinux 9 / Rocky Linux 9 (choose a current PHP stream first):
dnf module reset php && dnf module enable php:8.3 dnf install httpd mariadb-server php php-fpm php-mysqlnd php-xml php-mbstring php-gd php-intl php-opcache php-pecl-zip systemctl enable --now httpd mariadb php-fpm
Secure MariaDB (set a root password or keep socket login, remove test data): mariadb-secure-installation.
Also install: apt install php-curl php-gd php-intl php-mbstring php-xml php-zip php-sqlite3 (Ubuntu/Debian) and restart Apache.
On AlmaLinux/Rocky: dnf install php-gd php-intl php-mbstring php-xml php-pdo php-pecl-zip, then systemctl restart php-fpm httpd.
Install Composer
apt install composer # Ubuntu 24.04 / Debian 12
# or the official installer (any system):
php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
php composer-setup.php --install-dir=/usr/local/bin --filename=composer
rm composer-setup.php
Create the project
cd /var/www composer create-project bolt/project bolt cd bolt php bin/console bolt:setup # creates the database (SQLite by default) and the admin user chown -R www-data:www-data var public/files public/thumbs config # apache on AlmaLinux/Rocky
To use MariaDB instead of SQLite, set DATABASE_URL in .env.local before running the setup. The web server must serve the public folder.
Create the Apache site
Create /etc/apache2/sites-available/example.com.conf (Ubuntu/Debian) or /etc/httpd/conf.d/example.com.conf (AlmaLinux/Rocky):
<VirtualHost *:80>
ServerName example.com
ServerAlias www.example.com
DocumentRoot /var/www/bolt/public
<Directory /var/www/bolt/public>
AllowOverride All
Require all granted
</Directory>
</VirtualHost>
Ubuntu/Debian: a2ensite example.com && a2enmod rewrite && systemctl reload apache2. AlmaLinux/Rocky: apachectl configtest && systemctl reload httpd.
Add a free SSL certificate
apt install certbot python3-certbot-apache # Ubuntu / Debian dnf install epel-release && dnf install certbot python3-certbot-apache # AlmaLinux / Rocky certbot --apache -d example.com -d www.example.com
Certbot installs a timer that renews the certificate automatically; test it with certbot renew --dry-run.
Log in at https://example.com/bolt.
Note: On AlmaLinux 9 / Rocky Linux 9 SELinux is on. Let Apache/Nginx write where the application needs it, for example: semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/bolt/var/storage(/.*)?" && restorecon -R /var/www/bolt/var, and allow outgoing connections if the app calls APIs: setsebool -P httpd_can_network_connect 1.
Ucartz services for this topic
- KVM VPS hosting: NVMe SSD and full root access, with Free Basic Managed Support.
- Unmanaged dedicated servers: full root access and free IPMI KVM, with Free Basic Managed Support.
- Linux server management: hardening, patching, monitoring and automation for Ubuntu, Debian, RHEL and AlmaLinux.
