Qisutu 1.0.2 正式发布：开源可自托管的工单与服务台系统

开源、可自托管的工单与服务台系统 Qisutu 发布了 1.0.2 稳定版，标志着该系统已脱离开发阶段并可用于生产环境 1。该系统基于 Perl/CGI、MariaDB/MySQL、Template Toolkit 及浏览器界面构建，采用 GNU Affero General Public License v3.0 或更高版本（AGPL-3.0-or-later）授权，版权归 Franziska Steps 所有（Copyright (C) 2026） 1。

在功能特性上，Qisutu 提供代理与客户门户、LDAP/AD 集成、CMDB、知识库及 REST-API，并支持内部附加模块 API 1.0 以实现版本化模块依赖与隔离 REST 路由 1。其邮件处理功能兼容标准 IMAP 以及 Microsoft 365 和 Google Workspace/Gmail 的 OAuth2/XOAUTH2 协议，内置守护进程每 5 分钟自动拉取已配置邮箱，无需额外 Cronjob 1。在安全机制方面，系统支持基于时间的一次性密码（TOTP）双因素认证，QR 码仅在浏览器本地生成，且密码、Client-Secrets、Access/Refresh Token 及 2FA 密钥均使用安装相关密钥加密存储于 var/secure/security.key 1。此外，该系统界面支持德语、英语、法语、意大利语、巴西葡萄牙语、欧洲葡萄牙语、西班牙语、荷兰语、波兰语、捷克语和土耳其语等 11 种语言 1。

Qisutu 1.0.2 has been officially released as a stable, production-ready version, marking its transition out of the development phase 1. The software is an open-source, self-hosted ticketing and service desk system built on Perl/CGI, MariaDB/MySQL, Template Toolkit, and a browser-based interface 1. It is distributed under the GNU Affero General Public License v3.0 or later (AGPL-3.0-or-later), with copyright held by Franziska Steps for the year 2026 1.

The platform offers features including agent and customer portals, email handling, LDAP/AD integration, a CMDB, a knowledge base, and a REST-API 1. The system supports 11 interface languages: German, English, French, Italian, Brazilian Portuguese, European Portuguese, Spanish, Dutch, Polish, Czech, and Turkish 1. Its email integration capabilities cover standard IMAP, as well as Microsoft 365 and Google Workspace/Gmail OAuth2/XOAUTH2 protocols 1. Additionally, a built-in daemon automatically fetches emails from configured mailboxes every five minutes, eliminating the need for an external cronjob 1.

The system implements Time-based One-Time Password (TOTP) two-factor authentication, ensuring that QR codes are generated exclusively within the local browser environment 1. Sensitive data, including passwords, client secrets, access and refresh tokens, and 2FA keys, are encrypted using an installation-specific key and stored securely in var/secure/security.key 1. The platform also includes CSRF protection and provides an internal add-on module API 1.0, which supports versioned module dependencies and isolated REST routes for modular extensions 1.