Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Offical apps | Community apps | Demo | Docs | Install
  1. Cloudron Forum
  2. App Wishlist
  3. NetBird - WireGuard based VPN

NetBird - WireGuard based VPN

Scheduled Pinned Locked Moved App Wishlist
53 Posts 14 Posters 13.3k Views 19 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • andreasduerenA andreasdueren

    @marcusquinn Looking into this, I found NetBird’s automated setup documentation, which looks like it could offer an alternative for fresh installs.

    With NB_SETUP_PAT_ENABLED=true, the initial POST /api/setup request can create the local owner and return a short-lived PAT. A setup script could then use that token to call POST /api/identity-providers, passing Cloudron’s CLOUDRON_OIDC_ISSUER, CLOUDRON_OIDC_CLIENT_ID and CLOUDRON_OIDC_CLIENT_SECRET as a generic OIDC provider.

    The provider configuration would remain in NetBird’s database, so the bootstrap token could be revoked afterward rather than kept inside the app. The local owner login could remain available for recovery.

    Would that be worth considering for automatic SSO configuration when the Cloudron SSO checkbox is selected?

    marcusquinnM
    marcusquinnM
    marcusquinn
    CA Maintainer Super Fan
    wrote last edited by
    #31

    @andreasdueren Claude Opus 5.5 says:

    Thanks Andreas, great suggestion. It's in NetBird package 2.6.0.

    When the app is installed with Cloudron SSO ticked, the owner's first /setup goes through a small loopback helper. It adds create_pat: true, pat_expire_in: 1 (the dashboard doesn't send these) and uses the token once:

    • turns on new-user approval;
    • adds a Cloudron OIDC provider from the addon credentials, unless one already exists;
    • deletes the token, checks it no longer works, and removes it from the response to the browser.

    Nothing runs at startup, and the token and secret are never logged. The local owner login stays as the recovery login. If registration fails, setup still succeeds and the log points to the manual steps. Cloudron users wait for approval before they get access.

    I've tested the fallback path (unreachable issuer, token cleanup). I haven't yet tested a successful registration on a real fresh SSO install, so reports are welcome.

    The dashboard's Add Peer command now also includes --enable-rosenpass --rosenpass-permissive by default.

    Web Design & Development: https://www.evergreen.je
    Technology & Apps: https://www.marcusquinn.com

    marcusquinnM necrevistonnezrN 2 Replies Last reply
    1
    • marcusquinnM marcusquinn referenced this topic
    • marcusquinnM marcusquinn

      @andreasdueren Claude Opus 5.5 says:

      Thanks Andreas, great suggestion. It's in NetBird package 2.6.0.

      When the app is installed with Cloudron SSO ticked, the owner's first /setup goes through a small loopback helper. It adds create_pat: true, pat_expire_in: 1 (the dashboard doesn't send these) and uses the token once:

      • turns on new-user approval;
      • adds a Cloudron OIDC provider from the addon credentials, unless one already exists;
      • deletes the token, checks it no longer works, and removes it from the response to the browser.

      Nothing runs at startup, and the token and secret are never logged. The local owner login stays as the recovery login. If registration fails, setup still succeeds and the log points to the manual steps. Cloudron users wait for approval before they get access.

      I've tested the fallback path (unreachable issuer, token cleanup). I haven't yet tested a successful registration on a real fresh SSO install, so reports are welcome.

      The dashboard's Add Peer command now also includes --enable-rosenpass --rosenpass-permissive by default.

      marcusquinnM
      marcusquinnM
      marcusquinn
      CA Maintainer Super Fan
      wrote last edited by
      #32

      @james do i get an APP DEV badge of honour yet? 😁

      Web Design & Development: https://www.evergreen.je
      Technology & Apps: https://www.marcusquinn.com

      jamesJ 1 Reply Last reply
      2
      • robiR robi

        @DanTheMan Cool, perhaps you can contribute a guide for the community?

        One notable thing is that Netbird uses Rosenpass.eu, allegedly post quantum secure set of algorithms that works with Wireguard.

        marcusquinnM
        marcusquinnM
        marcusquinn
        CA Maintainer Super Fan
        wrote last edited by
        #33

        @robi rosenpass is on by default now

        Web Design & Development: https://www.evergreen.je
        Technology & Apps: https://www.marcusquinn.com

        1 Reply Last reply
        1
        • S stevespaw

          I have been running Netbird for some time now in a non-Cloudron. It is now very easy and awesome. Cloudron would bring a unified user management experience, which would be nice. If we had Rustdesk and ManageEngine, (Which I also have to run in a separate Docker system) I could run the whole IT operation with Cloudron... πŸ™‚

          marcusquinnM
          marcusquinnM
          marcusquinn
          CA Maintainer Super Fan
          wrote last edited by marcusquinn
          #34

          @stevespaw my aidevops.sh harness has all the skills needed for Cloudron app packaging, now. I used that and Opus 5.5 to package this, and other community apps.

          Worth a try if you want to package RustDesk & ManageEngine. It's prob a few hours work, and with ssh to a cloudron instance can do all the testing for you, too.

          Web Design & Development: https://www.evergreen.je
          Technology & Apps: https://www.marcusquinn.com

          1 Reply Last reply
          0
          • marcusquinnM marcusquinn

            @james do i get an APP DEV badge of honour yet? 😁

            jamesJ
            jamesJ
            james
            Staff
            wrote last edited by
            #35

            Hello @marcusquinn

            @marcusquinn said:

            do i get an APP DEV badge of honour yet?

            You have 3x community apps, if you'd like the badge I'll add you.

            marcusquinnM jdaviescoatesJ 3 Replies Last reply
            1
            • jamesJ james

              Hello @marcusquinn

              @marcusquinn said:

              do i get an APP DEV badge of honour yet?

              You have 3x community apps, if you'd like the badge I'll add you.

              marcusquinnM
              marcusquinnM
              marcusquinn
              CA Maintainer Super Fan
              wrote last edited by
              #36

              @james how many apps do you want? 🀠

              Jeez, just seen my post count, here. You got a badge for SUPER FAN too?

              image.jpeg

              Web Design & Development: https://www.evergreen.je
              Technology & Apps: https://www.marcusquinn.com

              jamesJ 1 Reply Last reply
              0
              • marcusquinnM marcusquinn

                @james how many apps do you want? 🀠

                Jeez, just seen my post count, here. You got a badge for SUPER FAN too?

                image.jpeg

                jamesJ
                jamesJ
                james
                Staff
                wrote last edited by
                #37

                Hello @marcusquinn

                @marcusquinn said:

                You got a badge for SUPER FAN too?

                Not yet, but maybe we could add such a thing.
                I know that Discourse has some gamification for topics read, created hearts given and received and more.
                There even is a gamification in Discourse if you finish the tutorial of how to write topics you get a certificate and a badge.

                marcusquinnM 1 Reply Last reply
                1
                • jamesJ james

                  Hello @marcusquinn

                  @marcusquinn said:

                  You got a badge for SUPER FAN too?

                  Not yet, but maybe we could add such a thing.
                  I know that Discourse has some gamification for topics read, created hearts given and received and more.
                  There even is a gamification in Discourse if you finish the tutorial of how to write topics you get a certificate and a badge.

                  marcusquinnM
                  marcusquinnM
                  marcusquinn
                  CA Maintainer Super Fan
                  wrote last edited by
                  #38

                  @james ahah, gold ⭐ for you my friend

                  Web Design & Development: https://www.evergreen.je
                  Technology & Apps: https://www.marcusquinn.com

                  1 Reply Last reply
                  1
                  • marcusquinnM marcusquinn

                    @andreasdueren Claude Opus 5.5 says:

                    Thanks Andreas, great suggestion. It's in NetBird package 2.6.0.

                    When the app is installed with Cloudron SSO ticked, the owner's first /setup goes through a small loopback helper. It adds create_pat: true, pat_expire_in: 1 (the dashboard doesn't send these) and uses the token once:

                    • turns on new-user approval;
                    • adds a Cloudron OIDC provider from the addon credentials, unless one already exists;
                    • deletes the token, checks it no longer works, and removes it from the response to the browser.

                    Nothing runs at startup, and the token and secret are never logged. The local owner login stays as the recovery login. If registration fails, setup still succeeds and the log points to the manual steps. Cloudron users wait for approval before they get access.

                    I've tested the fallback path (unreachable issuer, token cleanup). I haven't yet tested a successful registration on a real fresh SSO install, so reports are welcome.

                    The dashboard's Add Peer command now also includes --enable-rosenpass --rosenpass-permissive by default.

                    necrevistonnezrN
                    necrevistonnezrN
                    necrevistonnezr
                    Super Fan
                    wrote last edited by
                    #39

                    @marcusquinn said:

                    @andreasdueren Claude Opus 5.5 says:

                    Did @andreasdueren just outsmart Opus? 😳

                    1 Reply Last reply
                    0
                    • jamesJ james

                      Hello @marcusquinn

                      @marcusquinn said:

                      do i get an APP DEV badge of honour yet?

                      You have 3x community apps, if you'd like the badge I'll add you.

                      jdaviescoatesJ
                      jdaviescoatesJ
                      jdaviescoates
                      Super Fan
                      wrote last edited by
                      #40

                      @james said:

                      You have 3x community apps, if you'd like the badge I'll add you.

                      Wait, don't get me wrong, I think @marcusquinn is great, but the AppDev badge existed before Community Apps did, and until this moment I think had been reserved for people who initially packaged apps that are now in the official app store.

                      Given @staff's understandable desire to distinguish between official and community apps (the latter of which are of varying quality) IMHO it should probably be reserved for that.

                      I use Cloudron with Gandi & Hetzner

                      1 Reply Last reply
                      0
                      • jamesJ
                        jamesJ
                        james
                        Staff
                        wrote last edited by james
                        #41

                        Hello @jdaviescoates
                        The @appdev badge/group has been used like you have mentioned, but also for people who contributed to existing apps.
                        There also is the badge for @validated-app-maintainer which we currently use for upstream maintainers.

                        @jdaviescoates said:

                        I think had been reserved for people who initially packaged apps that are now in the official app store
                        ...
                        IMHO it should probably be reserved for that

                        Hmm.
                        I understand your sentiment. I will create a group/badge for Community App Maintainers.
                        This also helps to identify people in the forum that maintain community apps.

                        @marcusquinn
                        Now that I have given you the badge, would you be okay with a Community App Maintainer badge instead?

                        Edit:
                        Now there is @community-app-maintainer and I have added everyone I could find from the community app store.

                        1 Reply Last reply
                        2
                        • marcusquinnM
                          marcusquinnM
                          marcusquinn
                          CA Maintainer Super Fan
                          wrote last edited by
                          #42

                          Whatever you guys want is fine by me.

                          I generally keep up with notifications from here regardless, so if anyone has any issues with the apps packaged, just reply on the threads discussing them or log an issue in github.

                          If Cloudron does or doesn't also want to adopt any apps, also fine.

                          Needs and preferences are what they are. I'm just happy to be unconstrained to create what we need, and share the joy for the wisdom of the crowd to be more important than any one of us.

                          Web Design & Development: https://www.evergreen.je
                          Technology & Apps: https://www.marcusquinn.com

                          timconsidineT 1 Reply Last reply
                          4
                          • marcusquinnM marcusquinn

                            Whatever you guys want is fine by me.

                            I generally keep up with notifications from here regardless, so if anyone has any issues with the apps packaged, just reply on the threads discussing them or log an issue in github.

                            If Cloudron does or doesn't also want to adopt any apps, also fine.

                            Needs and preferences are what they are. I'm just happy to be unconstrained to create what we need, and share the joy for the wisdom of the crowd to be more important than any one of us.

                            timconsidineT
                            timconsidineT
                            timconsidine
                            App Dev CA Maintainer Super Fan
                            wrote last edited by
                            #43

                            @marcusquinn said:

                            I'm just happy to be unconstrained to create what we need, and share the joy for the wisdom of the crowd to be more important than any one of us.

                            πŸ‘ well said

                            Indie app dev, scratching my itches : communityapps.appx.uk, portfolio at myca.appx.uk

                            1 Reply Last reply
                            4
                            • jamesJ james

                              Hello @marcusquinn

                              @marcusquinn said:

                              do i get an APP DEV badge of honour yet?

                              You have 3x community apps, if you'd like the badge I'll add you.

                              marcusquinnM
                              marcusquinnM
                              marcusquinn
                              CA Maintainer Super Fan
                              wrote last edited by
                              #44

                              @james ahaha, brilliant, we have SUPER FAN badges πŸ™Œ

                              Web Design & Development: https://www.evergreen.je
                              Technology & Apps: https://www.marcusquinn.com

                              jamesJ 1 Reply Last reply
                              1
                              • marcusquinnM marcusquinn

                                @james ahaha, brilliant, we have SUPER FAN badges πŸ™Œ

                                jamesJ
                                jamesJ
                                james
                                Staff
                                wrote last edited by
                                #45

                                Hello @marcusquinn

                                The @super-fan badge and group will automatically be assigned to users that posted more than 500 times in our forum.
                                If you have more then 500 posts and you don't see the badge, edit your profile and you can enable the badge visibility or also hide it.

                                andreasduerenA avatar1024A 2 Replies Last reply
                                1
                                • jamesJ james

                                  Hello @marcusquinn

                                  The @super-fan badge and group will automatically be assigned to users that posted more than 500 times in our forum.
                                  If you have more then 500 posts and you don't see the badge, edit your profile and you can enable the badge visibility or also hide it.

                                  andreasduerenA
                                  andreasduerenA
                                  andreasdueren
                                  wrote last edited by
                                  #46

                                  @james lmao

                                  1 Reply Last reply
                                  1
                                  • jamesJ james

                                    Hello @marcusquinn

                                    The @super-fan badge and group will automatically be assigned to users that posted more than 500 times in our forum.
                                    If you have more then 500 posts and you don't see the badge, edit your profile and you can enable the badge visibility or also hide it.

                                    avatar1024A
                                    avatar1024A
                                    avatar1024
                                    Super Fan
                                    wrote last edited by
                                    #47

                                    @james said:

                                    The @super-fan badge and group will automatically be assigned to users that posted more than 500 times in our forum.
                                    If you have more then 500 posts and you don't see the badge, edit your profile and you can enable the badge visibility or also hide it.

                                    Where is my super fan badge...😒 it doesn't appear on my profile even though I am a super duper fan πŸ˜†

                                    jdaviescoatesJ 1 Reply Last reply
                                    1
                                    • avatar1024A avatar1024

                                      @james said:

                                      The @super-fan badge and group will automatically be assigned to users that posted more than 500 times in our forum.
                                      If you have more then 500 posts and you don't see the badge, edit your profile and you can enable the badge visibility or also hide it.

                                      Where is my super fan badge...😒 it doesn't appear on my profile even though I am a super duper fan πŸ˜†

                                      jdaviescoatesJ
                                      jdaviescoatesJ
                                      jdaviescoates
                                      Super Fan
                                      wrote last edited by
                                      #48

                                      @avatar1024 said:

                                      edit your profile and you can enable the badge visibility or also hide it.

                                      @avatar1024 have you tried "edit your profile and you can enable the badge visibility or also hide it."? πŸ™‚

                                      I use Cloudron with Gandi & Hetzner

                                      jamesJ avatar1024A 2 Replies Last reply
                                      2
                                      • jdaviescoatesJ jdaviescoates

                                        @avatar1024 said:

                                        edit your profile and you can enable the badge visibility or also hide it.

                                        @avatar1024 have you tried "edit your profile and you can enable the badge visibility or also hide it."? πŸ™‚

                                        jamesJ
                                        jamesJ
                                        james
                                        Staff
                                        wrote last edited by
                                        #49

                                        Yes @jdaviescoates that is correct.
                                        I have added that if someone gets the badge they also get a notification with the information that you can enable this badge in the profile.

                                        1 Reply Last reply
                                        2
                                        • jdaviescoatesJ jdaviescoates

                                          @avatar1024 said:

                                          edit your profile and you can enable the badge visibility or also hide it.

                                          @avatar1024 have you tried "edit your profile and you can enable the badge visibility or also hide it."? πŸ™‚

                                          avatar1024A
                                          avatar1024A
                                          avatar1024
                                          Super Fan
                                          wrote last edited by
                                          #50

                                          @jdaviescoates It now works, but it didn't before when I tried 🀷

                                          robiR 1 Reply Last reply
                                          3

                                          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                                          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                                          With your input, this post could be even better πŸ’—

                                          Register Login
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • Bookmarks
                                          • Search