Cloudron Forum

girish

@saikarthik sorry, i haven't found the time yet. I will take a look next week!

girish

The messages are fixed now

luckow

iPad Pro with the latest iOS, tested with Firefox & Safari

Config download only worked with Safari
Importing the config never worked

Has anyone managed to get this working?

girish

@timconsidine thanks for the bump, I forgot this one . Investigating now.

girish

@loudlemur thanks for the report. Fixed in https://git.cloudron.io/platform/box/-/commit/33f3ca39996ad5b3af2b5dd2320d1552dd8952c0

girish

Interesting aspect. The current VPN app is more like an overlay network. I think your request is about making it have some stealth mode and help work around deep packet introspection . As @robi said might be worth trying to package those other VPNs and see if they help .

I also don't completely understand why running on port 443 somehow beats deep packet introspection . Maybe it beats some firewall which doesn't allow anything other than port 443 (are these still common?).

girish

@jdaviescoates said:

I'm intrigued as to
why the change, and
how this is being handled.

What has changed is a mix of many things. Some VPS providers have automated calling apt update/upgrade on server start up. They have also started flagging outdated packages as security warnings, and it shows up in the VPS dashboard or MOTD with some fearmongering message. Server admins are also running updates randomly despite what we say anyway. I think a big increase here is because of suggestions by LLMs. People are running some automated AI security checks on the server and without fail it spots "20 packages to be updated" and flags it as if it is the end of the world

I think we are just accepting that we cannot fight this, just have to live with all this. One good thing is over the years Cloudron depends very little on system ubuntu packages. So, there is not much harm in running apt update anymore.

girish

Since we are getting swarmed by bots and crawlers (including our gitlab/forum/crm), we decided to include some features that will help in protecting apps. The first one is VPN protection. With this feature, people can access apps only via the VPN.

In the network UI, there is a setting called "VPN protection". First enable the feature and select how to route the client traffic.

There is a per-app checkbox to VPN protect the app:

If you try to access mautic now without a VPN connection, you will see (placeholder):

With OpenVPN/Wireguard connection, you will see mautic .

Of course, this feature is mostly useful for internal apps. For public facing apps (like ghost, gitlab, nodebb), we are working on a different solution.

girish

@teiluj can you check the latest package? I think I have fixed it .

girish

Wanted to formally announce the Contacts and Calendar app. Our motivation to build these are because of a lack of polished self-hostable apps in the PIM space.

Contacts app:

Supports multiple address books
Can sync with DAVx5, Thunderbird, macOS Contacts, or other CardDAV clients
Can import from VCF or LDIF files
Can export to VCF
Can find duplicate contacts

Calendar app:

Supports multiple calendars
Can sync with DAVx5, Thunderbird, macOS Calendar, or other CalDAV clients.
Booking pages (gives a link where other people can book a meeting with you based on your available time)
Share calendar with other users
Subscribe and publish iCal calendars

Both of them integration with Cloudron OpenID.

Would be great to get some feedback and make these apps more powerful and sophisticated. Our end goal is to make them fully supported apps.

Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.

Cloudron Forum

Partner

Posts

Member List