1.4.0 - Web Panel Overhaul New panel design: icon buttons with optional labels, settings in sheets, a bottom navigation bar on phones Snapshot, restore and import progress updates live, without reloading the page Failure mails are opt-in: each user turns them on in the account settings. Owners no longer get them automatically Admins can change selected PostgreSQL settings (max_connections, memory and timeouts) in Admin > Server Admin overview links to lists of all client connections and all snapshots [image: admin.jpeg] [image: database.jpeg] [image: databases.jpeg]

Thank you @andreasdueren

@marcusquinn nice work

Heads up for OpenCode users (opencode-web and opencode-worker) : authors (anomalyco) are working on v2 which has some significant differences to v1 v1 is still shown as the main release channel but it's likely to switch at some point, possibly soon. I will package for v2 when I feel the time is right. To avoid breaking changes, I am leaning towards making v2 as separate apps, allowing continued use of v1 apps without breaking them, and eventually retire them when upstream indicates no further updates coming.

Updated to Peergos 1.38.0 (package 1.1.0). It should show up as an update in your dashboard. App tiles in the newsfeed, a built-in address book, and the web UI is now on Vue 3 Login attempts are now rate limited If you added the app subdomains one by one instead of using a wildcard, make sure address-book.<app hostname> (e.g. address-book.peergos.example.com) is one of them On servers without IPv6, P2P now listens on QUIC as well as TCP Upstream release notes: https://github.com/Peergos/web-ui/releases/tag/v1.38.0

Also, I am told bugsink has a Sentry compatibility and we use a sentry module to interact with bugsink

@james yes i did https://ca.cloudron.io/app/odoo

Thanks a lot - I'll test and revert back!

cloudron changed how the cli builds app, so it moved to my registry by default. I had forgotten to make the localai image public, so thanks for pointing it out. Should be fixed now.

Hi @joseph, MeshCentral provides an interface that lets you access a fleet of devices via remote desktop or a terminal, along with sending some basic commands like reboot. However, it's not a full-featured RMM that handles automatic patching and updates; we get around that with powershell scripts on the Windows side and unattended-upgrades on Linux. Our team is relatively small, and has about 6 desktops and laptops. MeshCentral primarily gives our IT team an easy way to remote in, install an app, or help walk a user through a process.

@LoudLemur thank you, helpful summary and selling points for Cognee. Maybe that's why I didn't go with Cognee, as I have RAG coming out my ears on different systems. It's wrong mental process but I tend to skip over more RAG solutions - I should be more curious. I'm sure Cognee will suit those who need (more) RAG.

AppsMonitor updated to 0.0.20 in order to make it work on Cluodron 10.0.5. But this means the public page is not working (maybe it’s not even a feature which many want). Public page functionality will be restored when Cloudron 10.1.0 is released.

Thank you both @andreasdueren and @james for your great work and dedication!

@james We have created a feature request for this: https://forum.cloudron.io/topic/16011/full-backup-carry-on-past-a-failing-app-then-keep-the-backup-marked-as-partial

@robi and others : enhanced disk usage, free space reporting and velocity check with alerts are now in AppsMonitor : https://forum.cloudron.io/post/129932

Security update: 1.0.3 (OpenBao 2.6.3). Please update. OpenBao published nine advisories on 23 September, fixed in 2.6.3 and 2.7.0. This package ships the 2.6.3 patch release, so there are no new features, only the fixes. The most serious is a CRITICAL remote code execution in which a raft snapshot restore replaces the plugin catalog (GHSA-j6wc-jpvg-xfxq). This package uses raft storage, so it applies here, although it needs a highly privileged token to exploit. Also fixed are three HIGH issues: an ACL bypass via non-canonical URLs, a cross-namespace policy cache flaw, and unvalidated SANs through PKI ACME. There are also an open redirect in the OIDC provider UI and four low-severity issues. The update also moves the package to Cloudron base 5.1.0. Before publishing, it was tested as an update over real secrets, including a restore into an empty store and an OIDC sign-in, and it's already running in production. Some scanners will still list a few old OpenBao CVEs against the bao binary. Those are false positives: the release binary reports its Go module version as v0.0.0-…. Upstream is fixing that in 2.7 (openbao/openbao#3184). We love Bao and will do our best to keep this package well maintained.