What's coming in Cloudron 10

[d19dotca]

I love the idea of handling bots. Currently I use a script from some sites but it’s more spam-based and unfortunately the API in Cloudron will only handle so many network addresses (or specifically a max size of PUT I believe) so I can’t keep expanding the list of IP firewall lists I want to use for blocking traffic.

Lately this has become an issue for me for a few reasons but notably I’m finding too much bot traffic showing up in website analytics when using Matomo or Umami, and even third-party app Rybbit, and I have been trying to find a way to fight this so that the analytics is more accurate. If there’s a way to better fight this at the network layer in Cloudron I think that would be fantastic. At the very least though I think increasing the size allowed for network lists would be very helpful so that we can include more IP addresses.

Also, I love that mail is finally getting the attention it much deserves. Looking forward to that.

I think apart from what one person mentioned which is domain-based SpamAssassin rules or changing scores for example depending on the type of spam they receive, it’d be really nice if we could easily configure SpamAssaasin in the UI for resetting training data and forcing a rescan of spam and ham folders, as well as the ability to note which folders should or should not be treated as ham or spam so that we can add in our own for example.

Just something else to consider.

Thank you for all the hard work! Looking forward to v10.

[IniBudi]

@girish I'd like to ask regarding this feature.

• Could we enable the VPN to protect my.cloudron.app?
• Is it possible to make custom rules? I mean if I want to protect WP-login.php and WP-admin, but I need to exclude this file /wp-admin/admin-ajax.php.

Thank you for making awesome feature!

[girish]

@IniBudi I think we will have to implement that in a future release. It's quite a bit more complex to protect specific paths. We have to build some sort of WAF for that. The VPN protection works more at a network level and not much in the http level.

[hcj-online]

@girish said:

I don't know the ETA for Cloudron 10 yet, I think we will need 2-3 weeks more at least.

Is there an updated ETA?
I want to set up a new Cloudron instance and take advantage of the Ubuntu 26.04 support.

[umnz]

Since networking/vpn/security is currently being worked on is there any opportunity here to provide native Tailscale support as an option? Specifically we offload heavy compute to external boxes (think AI compute hosted elsewhere) and I'd like to add Cloudron to my Tailnet so that Open WebUI running on Cloudron for example, can have access to some private compute and resources without having to worry about persisting through updates/backups/breaking Cloudron DNS etc.

[girish]

@umnz it's in the roadmap to be able to join a network i.e where the server becomes a client/node - openvpn/wireguard/tailscale. Right now, it's mostly a "server". In the interest of getting Cloudron 10 out, it won't be in this release atleast.

[dsp76]

@girish you selected mautic for this example in the screenshot. Is it possible to differentiate already between different paths? As link redirects, assets etc. would still need to be served publicly - but the admin interface not.

Thanks for clarification!

[girish]

@dsp76 Good point about the matuc example. But I think URL based protection is more complicated because we will need help from the apps. For example, it will require all of mautic admin and it's assets to be designed to be served from under a specific subpath. I haven't really investigated how friendly apps are in this regard but most likely we will have to handle this package by package (in a future release).

[girish]

Getting there slowly. Some of the mail features are also implemented, I will post them.

Backup codes for TOTP is implemented now.

[girish]

Mailbox indexing status for FTS is exposed in dashboard now

[girish]

girish said:

mail: fix mail forwarding. there's been lots of bug reports on this feature. have to investigate the root cause

The mailing list feature has got a revamp. For a start, it's completely removed and all the lists will be migrated to a mailbox with the Cloudron superadmin as the owner.

Each mailbox now has a capability to set up forwarding (same options as mailing list):

For the delivery aspect:

• SRS is still the way to go to overcome SPF.
• We follow best practices from gmail - https://support.google.com/mail/answer/175365?hl=en . Body/message headers are not changed. We also add Forwarding headers. Spam filtering is done before forwarding.
• We now attach ARC headers when forwarding. However, ARC is a system of trust and mostly the big mail providers won't trust ARC headers originating from Cloudron. So, this is mostly a theoretical exercise.

Unfortunately, there is nothing much we can do here about the delivery aspect. If it works, it works.

[fbartels]

@girish said:
Each mailbox now has a capability to set up forwarding (same options as mailing list):

Looking forward to try out this new feature. Now that each mailbox has some settings, would it be possible to configure a different delivery for a given mailbox? Like some apps want mail delivered via pipe to a command, lmtp, or simply another internal smtp port in an app.

[girish]

@fbartels not yet, but we can possibly add routing options as we go. Do we have concrete use cases? Maybe we should collect them and decide what is the best approach. I know "always bcc" is something people have wanted but the real use case here is to have an archive of email for regulatory purposes.

[fbartels]

@girish said:

Do we have concrete use cases? Maybe we should collect them and decide what is the best approach

It certainly always depends on the application one wants to use. I do remember some people requesting mailman as an app, but that was not possible because mailman wants mails directly delivered to it instead of to a mailbox.

One application that i currently use and could benefit from this would be ntfy, where you can also submit messages via smtp.

Another application that could benefit from this would be alternative mailservers like stalwart or the product from my employer if you need exchange like sync.

[avatar1024]

avatar1024 said:

Also given you're looking at emails, I wonder if you might have time to look at a couple more email related ideas (but I understand new features aren't and shouldn't be the priority over what you've listed):

2. Creating mailing lists based on a Cloudron group, so that mailing list recipients / email addresses get automatically updated when users enter / leave the group

3. Currently when I send an email to a mailing list I'm part of I also receive that email. Would it be possible to have an option (per mailing list) so that it is not the case, i.e. that senders don't receive their own email if they are part of the list?

@girish have any of the two features been looked at as part of the revamp (got kind of a workaround for 1. in my original post which in fact should work even work better with your new approach)?

No worries if not of course, it's just to know what to expect. 2. especially would be super useful as I can't find a clean workaround for doing that with current features.