Cloudron Forum

@adhodgson said: I'd love to see something like Mailman or Sympa integrated into Cloudron.

@romu79230 said: a genuine Nextcloud backup-and-restore migration between these two Cloudron For the record this is very easy to do if you do what any decent technical person would do and not let the Cloudron go years out of date.

@girish a concrete follow-up to the layer discussion above, because I ran into a case where the "shared base gets old" effect matters more than the usual medium CVEs. Ubuntu fixed a critical Ghostscript bug on 21 September (CVE-2026-39919, CVSS 9.8, a crafted PDF with a JPEG 2000 image can run code; USN-8791-1, fixed in 10.06.0~dfsg-3ubuntu1.1 on 26.04). On my servers the fix is in some images and not in others, also in images that were built weeks after the fix: Image (build date) Ghostscript Nextcloud (16 Oct), Paperless-ngx (19 Oct), LAMP 10.06.0~dfsg-3ubuntu1.1 (fixed) WordPress Developer (7 Oct), FreeScout (17 Oct), EspoCRM, HumHub, LimeSurvey, Matomo 10.06.0~dfsg-3ubuntu1 Roundcube, YOURLS, AdGuard Home (24.04) 10.02.1~dfsg1-0ubuntu7.8 (fix is 7.9) The difference seems to be the shared PHP layer (the sury PHP_SERIES step with Imagick), which in these images was built on 20 September, one day before the fix. Apps that install Ghostscript again in their own layer (Nextcloud does apt-get install ghostscript ...) get the current version; apps that rely on the shared layer keep the old one, even when the app itself is rebuilt later. For most of these apps it doesn't matter much, because they never feed a PDF to ImageMagick. WordPress is the exception: the policy.xml in the image allows PDF (the restrictive lines are in commented-out examples), and WordPress renders a preview for every PDF uploaded to the media library. I checked it in the container: a PDF read through Imagick goes straight to Ghostscript. So anyone with upload rights on a site (author and up) can reach it. Not anonymous, but on a platform with many editors that's still a real path. This fits nicely with what you said about sharing layers: refreshing that one shared PHP layer when Ubuntu ships a fix for something in it would fix all of these apps at once, without each app needing its own upgrade step. Is there a cadence or trigger for rebuilding those shared layers, or is it tied to app releases for now? For anyone who wants to close the WordPress path in the meantime: returning an empty array from the fallback_intermediate_image_sizes filter stops WordPress from rendering PDF previews, so uploads never reach Ghostscript (you only lose the PDF thumbnail in the media library).

If I understand correctly, a backup process blocks dns propagation, e.g. adding an alias to a Surfer installation. If this can be avoided, it would be a cool improvement to efficiency of a deployed instance. Not urgent, something for the list, if it is viable.

[2.2.10] Update grav to 2.2.11 Full Changelog A licence key saved with a stray space in the product slug or the key itself ( lightbox-gallery, for example) now works for installs and updates. Spaces are trimmed when a key is saved, and keys already saved that way are read correctly An image pasted into the editor as inline data (a data: image) now shows on the frontend. Grav was turning the + characters in the image data into spaces, which also affected image paths with a + in them such as a+b.png getgrav/grav-premium-issues#628

@luckow andddd claude says: Found it: 0.1.0–0.1.2 shipped an upstream bug (fixed in https://github.com/useopendesk/opendesk/pull/52) where a finished mailbox sync stopped the next one from being queued for about 24 hours, so a mailbox synced once and then went quiet. 0.1.3 is now in the catalog with the fix. Update from the dashboard and syncing resumes within a minute, with no need to re-add the mailbox. opendesk checks every minute on its own, which is why there's no frequency setting or manual sync button. Thanks for the report!

Worked, thanks!

Thanks, I have removed it.

I moved most of my apps to on-premise servers and kept a handful on a Hetzner VPS to keep costs down. I'm using SFF computers like the HP Elitedesk 800 G3 Mini (under $100 on eBay nowadays) and it's a solid machine for hosting. Older ram like DDR3/DDR4 are easier to find/buy too.