@jdaviescoates As far as I can tell - my repo for this is working. The only thing that needs heavy testing is ActivityPub support.

@mastadamus IF you want it to grab cloudron specific logs, you gotta edit the ossec.conf file to give it a location of the logs as well.

This is both for retry when, for example the backup done prior to the update, fails temporarily, as well as if apps and platform gets updates, they lock each other so retries in not so busy times are an effective workaround.

Right.. It seems there are many candidates zabbix, netdata, some SNMP thing I forget etc. I prefer simply making sure Cloudron "works" with these existing software. It's why we added a way to open up the firewall as well. Happy to make any more fixes required to make these things work more easily.

@girish Ah okay, that makes sense on the tgz part. Unfortunately I haven't had much success at all in any quicker times (in fact it's often closer to double the time than tgz, taking between 1-2 hours) when using rsync in my tests for OVH Object Storage. But maybe I just haven't found that 'sweet spot' yet. I'll keep testing. Thanks Girish.

@marcusquinn Kids! we need a good writeup everywhere on how to run your own minecraft server the easy way.. the Cloudron way!

@d19dotca said in Recommended Server Specs: So I'd recommend something like "Tested on such-and-such plan with X provider", I like this

@girish Thank you! It will be nice to have civil, chill conversations about other interests beyond cloudron with fellow cloudron lovers

@marcusquinn Thank's Marcus, I'll follow your advice to check the reputation BEFORE, and if reputation is poor, just delete and purchase new one. Should be interesting that ISP's do themself this control and tell BEFORE the IP reputation.

This is covered to some extent in this video presentation by @girish https://videos.cloudron.io/videos/watch/206fc4b7-9641-4453-8be0-67450f2574b1 Here are the relevant parts of my notes on that: @jdaviescoates said in How does Cloudron work? What does it do? etc : == App Lifecycle == Install -- Configure DNS -- Downloads docker image and manifest file from the Cloudron app store -- Sets up addons -- Logrotate, Collect (stats about the app, how much CPU, memory it using etc), Firewall -- Runs the docker container --- Dynamic configuration (giving the app db credentials, SMTP credentials to send email, e.g. for WordPress it creates the wp-config.php file with all the relevant credentials) -- Gets SSL certificates from LetsEncrypt (and set-up reverse proxy, i.e. when blog.domain.com is visited forward to this container) Updates -- Read only and stateless app containers (all apps are read only - apps cannot write to their file system, if they could then users could add all sorts of random files and it wouldn't be possible to update smoothly, the code cannot be modified. This means when there is an update we can just throw away the old container and get in the new container. So where does the app write stuff it needs to? We let the app write in 3 locations 1) /tmp for temporary files 2) /run which contains runtime files which an app needs to communication across various processes, 3) app/data/ where the app will put images, files uploaded etc - everything in app data is part of the backup, /tmp and /run is not backed up) -- Rolling updates -- Signed releases -- Selenium based tests (test that everything actually still works)

@wexlerj I was mistaken. The WP package still doesn't have the multi-domain flag, I will push it out later today and leave a note here.

[image: giphy.gif]

@girish in my case it's even easier because I my router (fritzbox) has a setting that bypasses NAT completely and my machine (only one) is exposed in the internet. tldr; I don't have any problem with the way it is; everything is working fine for me. This is just a feature request for the future. Not a necessity, but a nice to have.

@ryan thanks! Glad you like it!

@marcusquinn Totally agree! The only missing big feature is ability to save password for web logins...

@fbartels anything on K8s is a microservice, hence it works without it too.

@marcusquinn said in Consider renaming Cloudron Tiers: I don't know that I'd remove Cloudron features for that +1

@humptydumpty Mostly agreed. The changes suggested are just renaming what's already there. "Help Offered or Wanted" I think should be a top-level section. I think it was, so not sure why that changed. I also think "Worked Offered or Wanted" would be more appropriate, as that was the hoped intention of that section. I know Girish said he doesn't want it to become a jobs board - but I kinda see that as inevitable as there's so many skills needed online nowadays that we can't all know or do everything but often can network those skills and needs on our travels. I think it you're looking at self-hosting apps, whether for home or business, you're already very technically competent, so I can't see it ever being SaaS level easy, but maybe as time goes by it will, and certainly a good community of contributors is essential to that. It's hard to know usage and user-needs without the passage of time and watching what happens, so I'm sure that's being studied and learned from as we go. I can only suggest as it's not my product, but then the best products are usually ones that customers feel an affinity close to ownership. Growth is always a blessing and a challenge, so just hoping my suggestions can make it more scaleable without getting unhealthy for time-needs, and please most of the people most of the time.

Thanks for the heads up. We don't really use any of these tools but something to keep in mind. We do use ipset for the firewall block list, but it seems to work fine with Ubuntu 20 though.