After quite some time - almost two years - I would like to know if this improvement can be considered for some future release in 9.X ?

Ok for a start the wrong messaging in the invite email is gone for next release. The password reset expiration is unchanged. We will add some expiration for invite also just to avoid edge-cases here.

I have added a disk cache now in local storage . Will show cached data if < 60 minutes old . There is anyways a refresh button to get the latest state.

@robi easier to just upload a folder

Does anyone know if Bitwarden Lite includes the secrets manager? That would be an argument.

Yes - you're right it's "storage". I have been meaning to try the rsync instead of zip, but it does warn that it's not a good idea for lots of files. I'll give it a try. Thanks!

@james I like your thinking. This might allow for better hardware utilization on smaller servers. @svtx I get that some TURN queries are legitimate. But I would think that a service utilizing TURN would broadcast this to others so that they can "connect". Since I am not broadcasting, I am not sure why people are probing for TURN connections. I guess I am jaded by the thousands of unauthorized SSH attempts I see on all my servers each day. So my bias has shifted from "trust, but verify" to "distrust and verify when someone complains".

Thanks for the catch! This is fixed with https://git.cloudron.io/platform/box/-/commit/fc417022c97e21cb6abd1a632755557133c4c37e

This is how I use it currently, but I maintain the wireguard VPN myself, outside of cloudron, which is not the recommended way. I would LOVE for something like this to be available.

@charlesnw said in CIS Benchmark Compliance: Do you use hardened Docker base images? See the discussion here: https://forum.cloudron.io/topic/14762/docker-hardened-images In short: No, for good reasons (maintenance and standards)

@joseph yes, I'm still on 8.3.2. OK great.

Hello @charlesnw @charlesnw said in Logging - targets, retention etc: I believe that anything done in the GUI is also available via API? I think the GUI uses the API behind the scenes? That is correct.

Any possibility of getting NTP configuration (via API/GUI) into Cloudron 10 roadmap?

@joseph said in Add Bulk Start/Stop Controls for Multiple Apps: The last time I brought this up, the idea was to bring to the list view (but not Grid view). Especially updating multiple apps is a pain if you are updating manually. If I am not mistaken, the Grid view and the List view on NextCloud (when viewing files) can be selected simultaneously. Maybe the same technology can be implemented?

@joseph said in Show Server Time Information in the Cloudron Server Menu: The server timezone is always UTC no? Or do you want System -> Settings to also be shown in Server page? Maybe the current time can be shown on Server > System Information [image: ed5ba88c-8fa0-496b-bbca-a045a4791271-image.png] It displays like: Current server time: 2025-12-19 14:32 Timezone: Europe/Berlin (UTC+1)

Well, there are 44 services, so I don't really want to select and de-select them in varying configurations. I would add an app list somewhere, that's the suggestion I have made above.

So currently the login flow pages are served up with content security policy headers to not allow being embedded in another domain/origin. The reason for this is to prevent clickjacking attacks and was explicitly done that way. I guess for this we would need a csp setting for the OpenID provider where one can allow specific domains/origins.