Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
Brand Logo

Cloudron Forum
  1. Cloudron Forum
  2. HedgeDoc

HedgeDoc

18 Topics 141 Posts
  • girishG

    HedgeDoc - Package Updates

    Pinned
    37
    0 Votes
    37 Posts
    10k Views
    Package UpdatesP
    [1.21.2] Update hedgedoc to 1.10.5 Full Changelog Fix the bundled healthcheck in the docker container GHSA-gmgw-rcmh-7x47 reports potential cross-site side-effects due to not applying sandboxing to iframes. GHSA-6wm6-3vpq-6qvv reports a possible CSRF vulnerability when using certain social login providers because the state parameter is not used and checked. Add enableUploads (CMD_ENABLE_UPLOADS) config option to restrict uploads to registered users, all users or Allow links to protocols such as xmpp, webcal or geo Switch from deprecated shortid to nanoid module, with 10 character long aliases in "public" links Ensure compatibility with Node 24 Protect user history from accidental or malicious deletion by adding a CSRF-like token Many enhancements in the documentation at docs.hedgedoc.org Ignore the healthcheck endpoint in the "too busy" limiter Send the referrer origin for YouTube embeddings due to their requirement
  • luckowL

    Q: Migrating a HedgDoc app instance from a Cloudron with LDAP to a different Cloudron with OIDC

    Solved
    3
    1 Votes
    3 Posts
    365 Views
    luckowL
    Thanks for the obvious. The source HedgeDoc was never updated to the current Cloudron app version. I have no idea why. Now I'm restoring the backup configuration to the same old version of HedgeDoc and letting the update magic happen. Let's see.
  • G

    Has anyone recently configured an OIDC auth provider for HedgeDoc?

    1
    0 Votes
    1 Posts
    264 Views
    No one has replied
  • hexbinH

    Fix broken docs link

    Solved
    4
    0 Votes
    4 Posts
    1k Views
    nebulonN
    I think I am blind here, but which one of the links at https://docs.cloudron.io/apps/hedgedoc/ is not working? Then I will fix it.
  • chetbakerC

    User management - remove /changing password user

    Solved
    3
    0 Votes
    3 Posts
    757 Views
    chetbakerC
    yeah you are right. That's a clean alternative. Thanks!
  • chetbakerC

    Customizing the thumbnail preview globally

    1
    0 Votes
    1 Posts
    309 Views
    No one has replied
  • N

    oauth2 login in config.json overwritten by oidc of cloudron?

    Solved
    8
    1 Votes
    8 Posts
    1k Views
    girishG
    @nebel said in oauth2 login in config.json overwritten by oidc of cloudron?: I wonder, if there is anyone, who had oidc and cloudron users before. I think he would lose users in this case. Is it a special case with hedgedoc or is it a problem for all apps? Right, this depends on the app. Some apps can only have one authentication provider active at a time. Others can have multiple authentication providers. I think HedgeDoc supports multiple auth providers be active at a time but only one OIDC provider at a time, looks like. But generally, most of our users do not mix "private" authentication and "public" instance with external users.
  • robiR

    Security issue: Notes do not require auth to be viewed

    Solved
    6
    0 Votes
    6 Posts
    1k Views
    robiR
    @girish said in Security issue: Notes do not require auth to be viewed: "defaultPermission": "limited", Thanks guys, this did it. The per doc setting is also good, however it only shows from the read-only view, non-editor mode. (Hint for those who can't find it while editing a doc and looking at the menus.)
  • luckowL

    config.js - editing/changing values is not reliable

    8
    0 Votes
    8 Posts
    2k Views
    girishG
    @rstockm this is the upstream default, so might be worthwhile opening an issue upstream.
  • robiR

    HedgeDoc is incorrectly named as hackmd

    5
    0 Votes
    5 Posts
    2k Views
    robiR
    @girish wow, that's, ... ahem, .. questionably lovely. One response there does mention how to transition in a few steps via unpublishing, etc, however users must deal with the old app as well as the new app manually. Less of an issue with Cloudron Admins. If you were to now package HackMD, what would you do to name it? Since the two apps are still data compatible, it would be a good time to migrate. Harder later.
  • girishG

    /status, /metrics is public

    4
    1 Votes
    4 Posts
    1k Views
    luckowL
    @nebulon upstream has "heard us" https://github.com/hedgedoc/hedgedoc/issues/2082
  • luckowL

    New Default limited (instead of private)

    Solved
    6
    2 Votes
    6 Posts
    2k Views
    girishG
    I have updated the package to match upstream default of editable.
  • GrienauerG

    HedgeDoc not responding

    Solved postgresql
    5
    0 Votes
    5 Posts
    2k Views
    luckowL
    @grienauer You can set this thread to "solved" yourself.
  • girishG

    CodiMD is now HedgeDoc

    6
    0 Votes
    6 Posts
    2k Views
    robiR
    Ha, I was right, without looking. The logo is designed well! Here's the process.. https://github.com/hedgedoc/hedgedoc-logo I actually like the middle alteration best, looks like a pencil head for writing.
  • rmdesR

    Enabling PDF to true does not enable PDF export

    Solved
    2
    2
    0 Votes
    2 Posts
    988 Views
    nebulonN
    As mentioned in the other thread, current CodiMD upstream versions do not allow enabling this anymore due to security risks. https://github.com/codimd/server/blob/master/public/docs/release-notes.md#announcements-1 Maybe you can raise awareness for the need with the upstream project or see if you can contribute.
  • rmdesR

    hackmd - Read-Only file system when exporting to PDF

    Solved
    18
    0 Votes
    18 Posts
    6k Views
    rmdesR
    I think we can close this since it's irrelevant to the actual codiMD app in the store
  • E

    hackmdio/codimd

    Moved codimd
    3
    0 Votes
    3 Posts
    992 Views
    E
    @girish Cool! Until then I will try to get it working myself. I'm about to submit a support request regarding a custom app deployment of hackmdio/codimd. But when do you think it will be available on the App Store?
  • yusfY

    CodiMD error (since 1.4.0?)

    Moved Solved codimd
    21
    0 Votes
    21 Posts
    7k Views
    girishG
    CodiMD was updated to 1.5.0. So this issue is most likely fixed there.