Interesting dilemma. I always have started with the fresh Ubuntu server as recommended, and I follow the usual DigitalOcean tuts ('cause I always forget) to tightening up SSH, disallowing root login, BUT I do create a second sudo user, and set up SSH to allow logins only by key, no passwords. Then, when I install Cloudron while logged in with the root user, it all goes well, root can't login, but my secondary sudo user still can. Maybe it was the name you choose? In reading your steps, I don't see that you did anything particular to the SSH service. So perhaps when Cloudron gets installed it does something which takes precedence over your non-steps, locking that user out. In my /home directory there is root, yellowtent and secondarysudouser. I suggest setting up your SSH service first, then install Cloudron.

the reasoning for using cloudflareaccess would be to insure that my admins need approval before accessing the box. cloudron doesn't offer that level of security. also for me, i illiminate the threat of public internet access by only filtering ports to cloudflare at the firewall level. currently, there is no good way to run cloudflare argo tunnels on cloudron.

@lukas Enpass for personal, Vaultwarden for business/shared, if that helps. On a Mac the shortcut for Enpass quick access is option-command-p, so anything is just a shortcut and search away.

@jdaviescoates said in Easy Indie App—Run your own X in a few clicks:

Yeah btw.so itself looks/ sounds like it'll be a useful app to add to the wishlist once it's ready. I just asked and they said:

Yes, it will be possible to self-host btw and the code will available soon (we're pre-launch)!

It is now possible to self-host so I've just added it to the wishlist here: https://forum.cloudron.io/post/73350

This dude's commentary is pretty decent:

@doodlemania2 Speed! Always! ⚡

unfortunately, i also had an issue with it.

basically what i did, i put my testing page https://wp-test.blindsoft.net through it, using a docker container, sense i like using docker.
then i put the hostname as wp-test.
unfortunately, it only shows a 502 gateway error.

I assume you are referring to this forum ? In your profile, if you click on the existing avatar icon, it pops up a dialog to change it.

nice find in https://forum.cloudron.io/post/72531
[...] updated cloludron [...]

So, I just looked closely at Sylius. Their demo site was good, seems like it does everything an ecommerce site would do. Going to try and get it up and running in "auction mode" if that's even a thing. The docker image is incredibly simple, even though it's written in Symphony which is definitely NOT simple hehe.
https://github.com/Sylius/Sylius-Docker-Standard/blob/master/traditional/ubuntu/Dockerfile

Just came across this in that context https://mastodon.nebulon.de/@yassie_j@0w0.is/110917653668829228

Self Sabotage ☠️💀

@LoudLemur said in Bram Moolenaar has died:

Thanks, I hope you are right but I with so many physicians discussing it, I worry it might be true.

Some random physicians „discussing“ something in a video is not evidence.

@privsec Make sure you're doing plugin unloading with something like FreeSoul, Asset Cleanup or Performer plugin, too. Save from having everything loaded on every page.

Might be some ideas in the reports output for the Cloudron app package config of headers and security policy etc, too @girish @nebulon

I def think you have to strike a balance for sure but remember that the ease by which you access these services and sites is dependant on the sacrifice of one or more of your privacy, security or anonymity. You have to make that call for your own needs. What I will say is that the SPN provides the granular control you are looking for and I often hear people getting rid of Portmaster for the reasons you mention above. With SPN, I can set it so that Brave always opens with a connection in my home country but private windows in brave open in another. I have it set so that LibreWolf opens in the country I want to be streaming from and WaterFox is two hops obfuscated. The SPN then lets you determine the traffic even further. It’s worth diving into and maybe I should do a video l cause it is complex but their white paper does a good job explaining the architecture.