@nichu42 This could be a reason... I think source causes should be outside of Cloudron.

Let us know 🙂

@jdaviescoates Says me, since www. tells people to expect the main brand website. naked doesn't tell them anything, eg: SaaS apps often use naked for their login, and www. for the marketing site.

Check out pretty much any big brand you can think of that ought to know, www.google.com etc.

I'm sure I read a deeper article on the whys somewhere, but I was in your shorter is better camp for a long time until I realised there were good reasons for the www. being the destination.

Cookies containment from subdomains and use of CDNs are a couple of reasons I remember off the top of my head. I'm sure there's others.

@thoresson yes. If you have a Cloud firewall, you can also whitelist just your IP for port 222.

Will be fixed with next release: https://git.cloudron.io/cloudron/box/-/commit/ec7dabc1c72c2f34c3f3474bc4b3c903bb2d693d

This was a regression in Cloudron 7.7. Thanks for reporting @AartJansen

Fixed in https://git.cloudron.io/cloudron/box/-/commit/1afa2e87ec93881ebcd1f79d83d4477467b40770

@shifty thanks for the update! Glad it got solved.

I'm impressed @fbartels! Sincerely! Your profile should be more like this:

fbartels.png

@visuex are you the same as @cpa ? What is the context of this comment? The original thread was about certs not renewing but in your comment you said it's renewing just fine. Can you open a new thread please if you have some problem?

@lukas you can attach an external disk which has encryption and move the Cloudron App Data (https://docs.cloudron.io/apps/#data-directory) to that volume.

It's not possible to enable encryption at the per app level when the underlying disk is not encrypted. I think this requires creating loopback mounts (which should not be used for production) and setting up encryption. All this goes against best practices.

@dsp76 that line is outdated, I will fix it. Cloudron apps do see the remote IP. In the past, they were hidden. But we got enough complaints that event logs inside apps were not useful anymore with internal private IPs. So, we have fixed up apps to have access to the Client/remote IP.

@ethanxrosen if you have backups, this will be in the box_<version> filename portion. Otherwise, if you have access to the server, it is at /home/yellowtent/box/VERSION

@girish I don't think it requires seal encryption.

I believe using seal encryption causes a different code path to be taken that avoids the underlying bug but it is not the presence or absence of seal encryption in and of itself that I believe fixes the issue.

After a kernel upgrade this works fine without seal encryption though I have now enabled it as it seems like a good idea to have anyway so making it the default is probably a good idea but as long as Ubuntu 22.04's default kernel version is 5.15.0-102 this issue will likely still occur.

@AartJansen '+' is the default qualifier. So, it is redundant in +a:my.friendwholesale.co.nz . You can remove it.

When I log in, the Empty Space has enlarged and back to the 16 Nov level. Weird though. Will keep an eye on it and report it if it rises again.

1 updates could not be installed automatically. For more details,
see /var/log/unattended-upgrades/unattended-upgrades.log

Most likely the above is not the problem. The above is from ubuntu updates. If you check /var/log/unattended-upgrades/unattended-upgrades.log, it will tell you why the update was not automatically applied.

I tried to restore from an older backup but for some reason is not fixing the problem. Thank you for your help

We need more information to help. Do you mean DO backup or Cloudron backup ? What is not working ?

If you have your old droplet, start it up again and run cloudron-support --troubleshoot . That will give an idea of what is going on.

@dreamingofadmin I think first step is to get access to your dashboard.

In Cloudflare, do you have an entry for my.domain.com to your server IP (DNS A record) ? If not, add this manually. Wait a bit. Access https://my.domain.com . If it's asking to accept self signed certs, accept them. Once in dashboard, Domains -> Sync DNS . This will add all the DNS entries. Then, Domains -> Renew all certs.

Please let us know what is failing and where.

@girish Thank you!

I restarted ubound and it's all good now. Thank you!

@girish I saw that thread, its a different problem. One I was also having on another customers site.
That site the backup goes to a windows workstation share.
After the last prompt "server requires a reboot" triggered it. However because of the other threads existence I fixed it by clicking the SEAL encryption box.
FYI That site is on 7.7.2

I want my users to OIDC via Cloudron to Cloudflares App Launcher where I can put all avialiable softwares some are from cloudron others are just SAAS (cloudflare can do SAML for SAAS) Screenshot 2024-04-11 at 19.57.11.png Cloudron => Cloudflare Launcher => AWS