@girish said in Update to version 7.3.6 failed:

systemctl kill cloudron-updater

This solved it ! Thank you !

For backup integrity, we are working on this - https://forum.cloudron.io/topic/8269/what-s-coming-in-7-4 . What we mean by integrity is: currently, Cloudron lacks a way to figure if the backup is incomplete or if the files have been tampered (not just for security, but accidentally or bit rotting). Idea is to keep track of what has been backed up - essentially a signed digest file.

@zion please always provide context.
As a reader I have to much space to interpret.

Do you mean:

private Cloudron Cloudron.io account A Cloudron App

?

See this - https://docs.cloudron.io/email/#ptr-record

@macone see https://docs.cloudron.io/email/#firewall

@girish Thanks. All working perfectly.

@girish said in Cloudron not removing expired backups from deleted apps:

@d19dotca said in Cloudron not removing expired backups from deleted apps:

But even if I had changed backup providers, isn’t the cleanup supposed to remove any backups from Cloudron that it doesn’t see in the current setup?

What I meant is:

You had backups in service A You changed backups to service B You changed backups back to service A

In the above situation, Cloudron loses track of backups in service A after step 2. When the backup cleaner runs, it will see that backup entries in it's database don't exist in the remote (now B) anymore and it will remove them from it's database. When you then do step 3, it won't delete those old backups because it has lost track of them.

This may not apply to you, but just something to keep in mind.

Oh I see what you mean now. Okay yeah anytime I've changed providers I've also done that "reset" thing you taught me by changing Backups to no-op, running the Clean Backups part, and then back again to the new provider settings to avoid all those linking issues.

I would not do this with backups for all the reasons @girish has mentioned (ie you'd have to restore the objects to standard before you'd be able to use them and this could take a while, not what you want when you need to quickly restore a backup), but what you could do if you really wanted to is to move older backups to Glacier automatically after a certain amount of time using automated lifecycle rules

IMG_20230210_214239.jpg

@machevalia yeah, this is not currently possible easily i.e have a vpn connection at a container level. Maybe you can set this up on the server level though ? But this will be complicated since the full server is sending traffic via OpenVPN (without careful routing rules)

@Nostudentsomg Can you give us more information and what you have tried with step/screenshots and such?

@sufian-mughal Currently, this is not possible. This is because LDAP has no standard way of passing through LDAP information.

That said, usually apps are able to enable 2FA independently of LDAP. This means that users manage 2FA inside the app instead of Cloudron - it works this way for GitLab/Gitea etc for example.

For matrix, upstream is still working on it - https://github.com/matrix-org/matrix-spec-proposals/pull/1998

Found it with help of tech support... HSTS locally was masking an issue where my port 80 forwarding was broken. fixed that and the certs renewed just fine.. 🙂

@girish I think I will. I've looked over the logs but I don't think I'm recognizing something important. You all have that eye, that gift!

@klawitterb @tradenet If you could give us access to your setup, can you please write to support@cloudron.io . Happy to debug further.

We use minio as well for some of our backups and haven't faced any issue as such.

@Thedurancode OK. We need more information to help. Can you try the things in https://docs.cloudron.io/troubleshooting/# and let us know the status of things?

@eddieciou thanks. I can't really make out without logs what's going on. Do you think you can drop us a mail at support@cloudron.io ?

@jayonrails this is not implemented yet. Feature request is at https://forum.cloudron.io/topic/3818/backups-ability-to-add-multiple-storage-provider-location

@nebulon
as said, there's no real problem right now, still I don't understand the behaviour and am curious.

you're talking about accessing the Cloudron through entering the IP (192.168.x.y) in the browser?

It's clear that this wouldn't work and this is not what I'm doing, it's a little more complicated:

the PC I'm accessing from, is in the same network segment than the cloudron (192.168.x.z). OpenVPN is active, the OpenVPN service is on a second cloudron outside in the internet still, when entering the URL (https://my.domain.*), the fritzbox page shows as soon as I connect the PC to a different network segment (192.168.y.z) everything works!

I don't understand why. Shouldn't the use of external VPN service make the internal source IP invisible?

@girish
The reboot fixed the issue. Seemed the containers were updated even though the status bar was still progressing. Thanks!

@jayonrails SSH and SAMBA access haven’t been enabled yet, therefore it didn’t worked. After enabling it, everything works perfectly.

@1Psychedelic instead of adding it manually, use https://docs.cloudron.io/apps/#app-proxy . This will prevent it getting overwritten during updates .

@girish said in IPv6 in automated DNS propagation:

After enabling, click the sync DNS button to make it add the AAAA records for existing apps.

This is what I missed. Thank you so much! Everything works fine now 🙂

@d19dotca said in [imapsync] Can I install imapsync on the same server where Cloudron is installed?:

@p44 said in [imapsync] Can I install imapsync on the same server where Cloudron is installed?:

https://omm.ovh.net

Oh that's pretty cool! I haven't come across a hosted (and apparently free?) mail migration tool. Wouldn't trust any old service for that, but OVH is a reputable company. Very neat. I'll keep that in mind for possible future migrations.

Another tool you might like that is hosted by German hosting provider Netcup GmbH is the https://mailsync.netcup.net/ website. It is both available in German and English language.

@matix131997 said in Let's Encrypt Didn't seem to auto-renew:

GoDaddy,

Sounds like yet another reason to avoid GoDaddy like the plague 🤢

@Stardenver Well I had a customers server that he wanted the mail limit upped from 40Mb to 60Mb... and I thought I had done that, but couldn't send a big enough email to test.
I have no idea why they 'need' it, its usually some self-employed boss who doesn't know better, or can't be told.
I make the changes they ask for, and charge for my time.

@rossmaclean Currently, there is a limitation that "auth" stuff (including LDAP integration) cannot be turned on and off dynamically. It is chosen at install time. Since the app didn't have proxyAuth initially, it cannot be turned on later with an update.

Will put a note in the docs.

@matthijs that's not possible because HTML/Javascript is opaque "data" and one cannot replace things without understanding what the data is.

For example, the HTML could say "Your IP is NOT xxxxx" or "Your friend is at IP yyyy" or just about anything else. There is no way to reliably replace HTML (other than the app itself).

@ei8fdb said in Delete volume name, mount point (in UI) when no longer in use?:

reference to volume name and mount point in Volumes section still present

Can you post a screenshot of this? Are you referring to the Volumes view i.e the view where you add/remove volumes ? FWIW, what you said in Expected behaviour section is what is supposed to happen. I checked quickly and it does happen that way but not clear what you mean by Volumes section still present.