Aha, I'd glossed over the bit in the instructions that said to put the IP in the address bar -- I'd punched in the actual domain name and gotten a 404; that combined with the fact that the installer process saying it was waiting for cloudron to start had me thinking something had gone wrong. It's working now. Derp. Thanks for your help.
I forgot to post a follow up on this thread. I'd like to thank @girish for solving my problem. He responded quickly and arranged to ssh into my server to diagnose. He's been very patient and professional and I really appreciate it.
Basically the problem is due to MySQL addons not properly starting/building, so all apps using MySQL error out and cannot start or install. Hope the problem has been resolved in the final 2.4 releases 🙂
After disabling apparmor, I saw that mysqld would just quit without showing any error message or log output 😞 As a final thing, I just ended up moving platformdata/mysql to mysql-old and recreated containers again. That made mysql come up and then we restored all the apps.
Still a bit crazy/worrying that we hit this bug atleast twice now and there is no clear resolution.
Upon some investigating, did find a polls utility like doodle in nextcloud. It allows you to share it with users but also share a public link. Pols can be text based or created using a calendar. Persons responding can answer a yes,no and maybe on whatever options are offered. https://github.com/nextcloud/polls
@TheNils For new domains, the NS record sometimes takes to propagate. That error message means that it's not propagated to the Cloudron server yet. You can try this:
SSH into the Cloudron
host -t NS mydomaine.net (This should not display NXDOMAIN)
If the above works, it should work on Cloudron as well. If not, can try sudo systemctl restart unbound and then try adding the domain again?
Normal users can create tokens but they don't have access to any call other than the /api/v1/profile/* routes. Internally, each token has a list of "scopes" (oauth scopes) which indicate what API can be allowed. For normal users, this scope is only the profile scope. For admin users, it includes all the other API calls.