Bone Flow Calendar License Server v1.0.11 - deployment
======================================================
Current VPS: Sakura VPS / Ubuntu / Apache + PHP / HTTPS pcsr.net

A. Existing v1.0.9 server (recommended migration)
1. Upload MIGRATE-v1.0.9-to-v1.0.11.sh to a writable VPS location such as /tmp/.
2. VPS console:
   sudo bash /tmp/MIGRATE-v1.0.9-to-v1.0.11.sh
3. VPS console:
   sudo chown -R ubuntu:www-data /var/www/boneflow-license-private
   sudo chmod 750 /var/www/boneflow-license-private /var/www/boneflow-license-private/calendar
4. WinSCP: upload ONLY config.php and server-common.php from
   UPLOAD-PRIVATE-TO-VAR-WWW-BONEFLOW-LICENSE-PRIVATE/calendar/
   into /var/www/boneflow-license-private/calendar/.
   Keep the migrated live PRIVATE-KEY.php, ADMIN-KEY.php and activation-tokens.php.
5. WinSCP: upload contents of UPLOAD-PUBLIC-TO-VAR-WWW-HTML/ into /var/www/html/.
6. VPS console:
   sudo chown -R www-data:www-data /var/www/boneflow-license-private
   sudo chmod 700 /var/www/boneflow-license-private /var/www/boneflow-license-private/calendar
   sudo chmod 600 /var/www/boneflow-license-private/calendar/*
   sudo rm -rf /var/www/html/.boneflow-license-private
7. Open:
   https://pcsr.net/boneflow/license/calendar/health.php
   Expected: status READY / protection OUTSIDE_WEBROOT / privateOutsideDocumentRoot true / legacyWebrootPrivateAbsent true.

B. Fresh server
1. VPS console:
   sudo mkdir -p /var/www/boneflow-license-private/calendar
   sudo chown -R ubuntu:www-data /var/www/boneflow-license-private
   sudo chmod 750 /var/www/boneflow-license-private /var/www/boneflow-license-private/calendar
2. WinSCP upload contents of UPLOAD-PRIVATE-TO-VAR-WWW-BONEFLOW-LICENSE-PRIVATE/calendar/ to /var/www/boneflow-license-private/calendar/.
3. WinSCP upload contents of UPLOAD-PUBLIC-TO-VAR-WWW-HTML/ to /var/www/html/.
4. VPS console:
   sudo chown -R www-data:www-data /var/www/boneflow-license-private
   sudo chmod 700 /var/www/boneflow-license-private /var/www/boneflow-license-private/calendar
   sudo chmod 600 /var/www/boneflow-license-private/calendar/*
5. Verify health URL above.

ADMIN-FIRST-KEY.txt and FIRST-TEST-TOKEN.txt stay on the seller PC. Do NOT upload them.
