@edapm Personally, I'm all-in with Hetzner, not free but the best value for features I've found, particularly having network DDoS protection as standard. Others recommended include Contabo and Scaleway. If you're getting free (inclusive) stuff from Microsoft then I suppose that's decent. Personally, I'm all GitLab, so anything GitHub is second-choice. I guess there's nothing truly free, including your time, but those are the options I recommend, otherwise it's support tickets to Azure and hope for their ability to allow for port needs.

@girish said in Networking - Whitelist ports does not work as expected: @robi @BrutalBirdie done! https://git.cloudron.io/cloudron/box/-/commit/4287642308081d27dcc160f845fd5dedb27eb481 That was fast.

I was contacted very shortly after asking. both on this forum and by email. but i was later on in weekend. it seems solutions were handled this morning to solve my question. support seems to be fast and fair in a word efficient thank you

@edapm https://docs.cloudron.io/email/#relay-outbound-mails .

@Buyanbat Just repeating some of the stuff here that I mentioned on chat, so it's useful for others. We used to have a Hosting provider edition back in 2019 but we don't have this anymore since we folded most of the features into the main edition itself. As a general rule, the easiest and recommended way if you are hoping multiple apps for clients is to just have separate cloudron installations for each customer. So install Cloudron into customer1.myservice.com, customer2.myservice.com etc. In general, if your service is "hands free" / "self service", meaning where the customer installs their own apps and uses the Cloudron dashboard themselves, this is the best option. If you are managing the Cloudron installation (and not the customer), there are other approaches: If you want to share one server across customers, then you can either add all the domains and then install apps into those domains. When installing apps, you can select "Let the app manage users" at installation time. Then you can add your customers inside the apps. Another option is to add customers in a group of their own and restrict each app to have access to a specific group. One catch with this approach is that Cloudron admin role have access to all apps. So just make sure your customers are not admins on Cloudron. For next Cloudron release (6.1), we will have a way by which you can make specific users as admins of specific apps.

@marcusquinn @d19dotca @girish @nebulon Dear All, many thank's for answer. As I saw in the folders, Iphone has two kind of sent message folders: Sent Message Sent So as @d19dotca and @marcusquinn stated, on Thunderbird emails was saved in "Sent", but on iphone in "Sent Messages". When I configured emails who was on Cpanel iphone saved emails in "Sent". But when I configured email from Cloudron, iphone saved email in Sent Messages. Thant's why it was like I had missing email from Thunderbird and vice versa. Workaround is to configure the same folder and when adding Cloudron email on iphone, be sure to follow @d19dotca instruction. Thank's a lot! [image: 1606643259222-img_2488-resized.png]

Will mark this as solved since this is a DO issue.

@girish Thanks, after looking through a long list, turns out it was Snipe-IT, that we don't use and I just had installed as a test. So stopping it for now but maybe worth knowing in-case the pp itself is a but hungrier than it should be for some reason.

@vladimir I can also recommend sending a test mail to https://mail-tester.com to check if you have setup the DNS records required for the external email server correctly.

@d19dotca said in Outbound email error: "Client network socket disconnected before secure TLS connection was established": Are you aware of any method for me to determine what the receiving mail server supports for TLS protocols and cipher suites? You can try something like openssl s_client -starttls smtp -connect server:25. Note that usually you have to do this from a real server and not from your laptop, since most residential networks will block outbound port 25. There is also a better tool for SMTP connection testing, it's at the tip of my tongue... Edit: gnutls-cli is the tool. It has some feature which openssl s_client does not support. I can't seem to remember what exactly.

@mehdi you're right, my poor choice of words.. apt is a binary that can call libapt-pkg libraries and provides a subset of interactive options and commands for apt-get/cache by default. apt-get is not limited to those options.

@nicolas There's a feature request to monitor network traffic at the app level. If we had that, we could have narrowed this down more quickly.

This is fixed in Cloudron 6

@yusf Are backups failing by any chance. I wonder why there are multiple backups in a day. How often do you create backups? If it's one week backups from 17th Npv are expected. the ones which are slightly older are probably preserved for various reasons. One thing you can do is Backups -> Cleanup backup. Then in the same view, click on logs and it will tell you why each and every backup is preserved. If you paste the log, I can explain in a bit more detail.

@dreamcatch22 with AWS, I have usually found that it's either a) the cpu credits are kicking in. are you aware of https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-credits-baseline-concepts.html ? AFAIK, even lightsail has the same limitation (but not 100% sure). b) some machine have a lot of memory but perform very poorly . For example, see the notes in EC2 R5 xlarge (which has 32GB RAM!) but works very poorly with docker - https://forum.cloudron.io/post/17488 Not sure, if either of those apply to you. What instance are you using ?

@nebulon Hi, I have Cloudron running in a VM under Proxmox, and since I (rather poor decision on my part) didn't take a backup of the VM before installing Cloudron, I don't easily have a "restore point". Whenever I install a new VM image, I have to manually configure the networking to use the right bridge, so just a hassle. Was hoping to avoid it, but clearly it's unavoidable. But understood, I ended up just deleting the VM's disk image and remaking it, just took awhile. tldr - my Cloudron install is on a VM on a dedicated server, not a VPS, and no restore point, so can't easily just "rollback".

This is actually intentional as the system waits for the healthcheck.

Support for Ubuntu 20.04 will come with next release.

@d19dotca Yes, the limits are there to protect against the noisy neighbor problem which exists when many processes are competing for the same resources and ONE uses up more than their fair share. Technically we could have all 30 Apps be set to 1+GB on a 16GB RAM system and it would work fine until one App behaved badly. Then the system would be in trouble as the OOM killer would select a potentially critical service to kill. With limits, the system is happy, and the killing happens in containers instead.

So I'm pretty convinced the issue was the way I wrote the CAA records. I think my DNS provider didn't need the double-quotes in there and it caused issues. Reason I say that is because after introducing the CAA records, I suddenly had the certificate renewal errors. Then when using a DNS check tool and I looked up CAA records for Google and Mozilla and more, none of them had the double-quote in there, but mine did. So I am sure that was the issue, as everything worked fine again after I removed the double-quotes. I suspect the double-quotes was being taken literally as a string and so letsencrypt.org is not the same as "letsencrypt.org" in the DNS CAA record. I was able to later find the logs I had seen in the early morning which shows the following which confirms my conclusion: CAA record for <domain> prevents issuance. So for anyone who comes across this later, make sure you're not using double-quotes I guess. haha.