Flatpack and Appimage formats do not provide the kind of process and filesystem isolation that Docker does. I would not be comfortable running run a service like Cloudron if it allowed running things other than well-defined/managed containers.

Yes, there are ways to break isolation and escalate out of a Docker container, but flatpack apps can, essentially, write anywhere on my system. Updating the ecosystem is also much more difficult; by comparison, it is possible to auto-build Docker containers from source and track recent updates/manage timely security vulns in a way that flatpack/appimage packages do not/rarely do.

perfect, thanks, will try it out and get back if it's not working 🙂

@girish Thanks!

@d19dotca thanks, will look into all of that

@robi I checked my IP. It's not the one I posted. The IP probably changes as @girish mentioned.

Yup, we are also in DigitalOcean, AWS Markplace, Vultr as well. Time4VPS also has an image but it's outdated, unfortunately we don't control that image. If anyone knows other hosting providers where we should integrate let us know 😄 Even better if you have a contact in those providers...

I'm installing a new Cloudron and got bit by this again.. can't get mosh to work without manually tweaking iptables.

iptables -I INPUT 1 -p udp --dport 60000:60010 -j ACCEPT

@sam_uk : it's a very interesting and good discussion.

Like @scooke, I'm not sure it's my place to comment much, as it is entirely up to @girish & @nebulon how they want to take things forward.

I can certainly see that some arrangement like this would get massive thumbs-up from the OS community, and consequently could lead to a significant (huge?) uptake of Cloudron by OS enthusiasts. Meaning there could be a self-interested benefit to Cloudron doing it. But I'm not sure there is something broken which needs fixing, so maybe leave well alone.

And having said all that, as valuable and excellent a platform as Cloudron is, it's a gateway for deploying and managing OS apps. Does Cloudron itself have to be OS? It's still fantastic and I'm no less of a fan, even if it isn't. If some evil empire body does acquire it, well, life becomes less easy, rather than being directly threatened.

While the apps that I deploy on Cloudron should be OS wherever possible, it doesn't matter that much to me that the tool I am using to deploy is not OS. I just want it to continue its stability and grow its functionality even further. I use a Mac as primary desktop, and I don't stop doing so because Apple operating system is not open. Cloudron has amply demonstrated their reliability. I don't need it to be OS in order to trust it and use it.

Just my 2p, others may have different considerations.

Ah okay, totally fair then. I’ve not personally noticed things represented in MBps but if my experience doesn’t match the usual that others see then I can appreciate that view. 🙂 thanks guys.

@nebulon said in Add Modsecurity NGINX WAF:

@mastadamus I don't know much about this plugin/addon for nginx, but it kinda seems to be only part of Nginx Plus, which we are not using in Cloudron. Also if that matters here, the main nginx is only used as a reverse proxy.

I understand. Thank you for your answer.

@necrevistonnezr
A nice symbology system, sure, but you’re capped at drive bay space.

So unless you’re able to find a 6-bay symbology system that can support 14tb drives (or larger) in each bay, that wouldn’t be worth it to me.

But at least now we are comparing apples to apples

@d19dotca yes, UTC

I added a bunch of implications under https://docs.cloudron.io/domains/#dashboard-domain .

On a side note, when writing this I found that there are some inconsistencies in the code (looks like the notification it raises might not be correct). Checking...

@loudlemur said in Monkey See, Monkey Do: Cloudron Video Explainers:

RTFM

Let’s make RTFM stand for Read the Friendly Manual or better make a new acronym such as WTFV or WTT for Watch the Tuto.

@privsec said in Monkey See, Monkey Do: Cloudron Video Explainers:

How to properly setup/secure your server to a high level of protection

For me, the highest level of protection is a server without access to the internet; then more realistically it is a server with access to the internet but where all the services are behind a VPN; such as OpenVPN, WireGuard, ...).

With a server open to the world, you are at the mercy of the developers (the one who develop the application such as Nextcloud, WordPress, ...)

@necrevistonnezr said in Godaddy.com API is down:

unfortunately none of the Cloudron supported domain providers allow moving a DE domain…

By DE domain do you mean .de?

You can definitely register those on https://gandi.net but perhaps that's different to moving them?

@girish Well, it was incredibly satisfying to see these important apps, which I use the most, get restored first. Would it be difficult to "rank" apps by usage, which could then be used for Install by Restores, or Migrations?

Anyway, it worked out super well for me. Thank you!

@micmc Can you share one of the domains so I can have a look?

@jdaviescoates said in Cloudron + Selfhosted.Libhunt = Awesome:

I don't know how people live without it

Indeed, but we can still see the ads spots on a page and so still figure out there's way too much ads 😉