@robi said: I learned that the -af flag is important at least for images. This should probably make it's way into the docs somewhere.

Good point, I hadn't thought about the layer sharing. I measured it: an apt-get upgrade on top of cloudron/base:5.1.0 today is 136 packages and a 677 MB extra layer per image, so with 30 apps that really adds up. On top of 6.0.0 (5 days old) it's only 16 packages and 28 MB. So for my 7 own apps the per-app upgrade is fine, but for the whole catalog it clearly belongs in the base rather than in every app. If the dated bases (like node-base:24-20260920) get refreshed regularly and apps pick up the latest one when they're rebuilt, the sharing stays intact and the backlog never grows big. The numbers above also show that the older the base gets, the bigger both the security backlog and the upgrade layer become.

VPS (shared resource) is always a risk, but I only ever had one problem where claimed specs were not really available runtime (SSDNODES). Netcup is decent so you should get what you pay for. But if your Cloudron is "production" (meaning you rely on it for services), I would go for something more dedicated resource. My first destination is Hetzner Auctions. Interestingly their auctions are cheaper than their shared-resource VPS currently. They're pinched on RAM etc costs, but auction is still cheaper than VPS. My current Hetzner production cloudron is cheaper (60 euro) with much better specs than their cheapest dedicated auction (75 euro). But I think it's an industry thing, rather than a Hetzner thing.

@joseph said: As a heads up, deSEC has some lots of rate limits (reported elsewhere in the forum). So, if you have lots of subdomains with dynamic DNS you hit these limits. @sponch see here for the details of rate limiting with DeSEC for example (there are a few other threads on the forum too) However, I also need to point out that this is avoidable (at least to an extend). I have made exactly what I suggested in the mentioned thread: A dedicated script pooling and updating deSEC DNS records in batch instead of a one call for each. This, so far, as worked just fine.

@james said: Not sure if helpful, Brilliant Brutal Birdie and thanks, that helps a lot!

I think you are referring to https://docs.cloudron.io/installation/home-server correct? What is the issue you are facing? Cloudron will get certificates via DNS automation, it doesn't require port 443 to get certs in that case. See https://docs.cloudron.io/installation/home-server#dns-provider

A YT guy always ends his prompts with ".., answer in short."

For some reason, this topic really interests me. So for transparency : I have started work on a project 'AgentDefender'. later I will work on a 'harness' strategy I will publish the work so it can be critiqued and improved.

Thank you, that gave me something to work through!

I don't have a good solution but we should probably bump up our minimum requirements to 30GB probably... Linux/Ubuntu/Docker images all add up I guess.

@girish I just wanted to relay that this workaround works.

@joseph said: This might be an excellent feature for the new webmail app, no? Just read about it, I will post it as a feature request there, thanks!

@joseph wouldn't it just need to make an http call at the moment the settings load?

@necrevistonnezr my own approach at present is to mostly not use Community Apps yet. If/ when I do so, I like to check e.g. When the user reg'd on this forum (as a proxy of how long they've been using Cloudron) The users "reputation" score on the forum If the user has an "App Dev" or other (e.g. Partner, Translator) badge on the forum How often the Community App gets updated (which I'd then compare to how often the upstream up gets updated) Ideally, I'd like http://ca.cloudron.io/ to help surface this info in one place to inform my decision-making.

Yeah, my last email got delivered as they replied back. I'll check the status for each email to see if I can spot any difference. If not, I'm positive it's on their end and that's all that I care about. I tried troubleshooting things with the client and I get vague responses back like they're a freaking politician and I'm an investigative reporter trying to expose them "delivery-status": { "attempt-no": 1, "certificate-verified": true, "code": 250, "first-delivery-attempt-seconds": 3.223, "message": "ok dirdel", "mx-host": "mta7.am0.yahoodns.net", "mx-host-ip": "67.195.228.110", "session-seconds": 1.087, "tls": true "event": "delivered",

you can also run the management /dashboard component: https://ca.cloudron.io/app/wazuh