Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps - Status | Demo | Docs | Install

AppDev

Cloudron App Packagers

Private

Posts


  • Urgent Security update for OIDC plugin Wordpress
    girishG girish

    There's quite a bit of changes needed: the plugin has also moved to composer, we need a new platform release to adjust for the JWKS key handling, some changes to the package to whitelist the cloudron OIDC server since it appears WP is blocking it etc.

    I think if someone is waiting for this, this will take a while. Best to not update the plugin (or if you already updated, you should roll back somehow).

    WordPress (Developer) wordpress oidc security

  • CCAI : Cloudron Custom App Installer
    timconsidineT timconsidine

    @IniBudi I didn’t make a video as the process is simple, and Cloudron 9.1 will take over soon. 🥂

    As @humptydumpty (thank you for stepping in) said, the process is guided.

    Some important points :

    • CCAI original version is dead : site now directs you to CustomAppGateway which is the new start point
    • CustomAppGateway gives you choice of installing individual apps from there, or installing CCAI-P which is maybe more useful if installing multiple custom apps
    • for individual installations, CustomAppGateway shows a catalogue, pick an item, popup shows a description and a curl one line installation command. Copy that and paste into your desktop/laptop terminal. It will :
      • prompt for your Cloudron, e.g. my.domain.tld
      • prompt for a token (create this in your Cloudron dashboard | Profile | Tokens
      • prompt for app location, eg myapp.mydomain.tld
      • invoke the installation : note that it will likely complete quickly but your Cloudron needs another couple minutes to install the app
    • for multiple custom apps, use CustomAppGateway your install CCAI-P : same process as above.
      • you will then have an app in your Cloudron which can install further apps (displays the same catalog as CustomAppGateway but no more curl download links)
      • store your creds in /app/data
      • pick an app and watch installation proceed
      • wait for completion notice.

    Note : your auth creds are now always input in your control (your desktop or your own Cloudron environment), never in a 3rd party site.

    Let me know if any other questions

    App Wishlist

  • Urgent Security update for OIDC plugin Wordpress
    girishG girish

    I am testing it right now, let's see what other issues are there.

    WordPress (Developer) wordpress oidc security

  • Urgent Security update for OIDC plugin Wordpress
    girishG girish

    The plugin has also started requiring the 'alg' param in JWKS keys. The field is optional (https://datatracker.ietf.org/doc/html/rfc7517#section-4.4) , but I have added it to our oidcserver now.

    WordPress (Developer) wordpress oidc security

  • Urgent Security update for OIDC plugin Wordpress
    girishG girish

    The current plugin version has some issues, I have left a note here - https://github.com/oidc-wp/openid-connect-generic/issues/633

    WordPress (Developer) wordpress oidc security

  • Backup Region (DigitalOcean Spaces) not available
    girishG girish

    Thanks, fixed - https://git.cloudron.io/platform/box/-/commit/51e02da277d972d1d8b514dc15256f88e2fbe201

    Support digitalocean backups

  • Add expiry for app passwords
    girishG girish

    Good idea. I wanted exactly this a few days back but was lazy to implement. Got the impetus to implement this now. Will be part of 9.1

    Feature Requests app passwords

  • App Custom Required Environment Vars
    girishG girish

    Custom packages can already have custom env vars.

    Feature Requests

  • Send email to admin when a Reboot is required
    girishG girish

    Part of 9.0

    image.png

    Feature Requests

  • Granular per-app backup schedules
    girishG girish

    Implemented (indirectly) via Backup sites feature . Just include a single app with whatever schedule in a site.

    Feature Requests

Member List

girishG girish
vitetjV vitetj
andreasduerenA andreasdueren
canadaduaneC canadaduane
njN nj
T TheNils
eyecreateE eyecreate
LanhildL Lanhild
W walski
KubernetesK Kubernetes
timconsidineT timconsidine
R random_eric
B bram
jeauJ jeau
marioM mario
eriktadE eriktad
BrutalBirdieB BrutalBirdie
mehdiM mehdi
jimcavoliJ jimcavoli
T thetomester13
  • Login

  • Don't have an account? Register

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search