NetBird - WireGuard based VPN
-
@andreasdueren Claude Opus 5.5 says:
Thanks Andreas, great suggestion. It's in NetBird package 2.6.0.
When the app is installed with Cloudron SSO ticked, the owner's first /setup goes through a small loopback helper. It adds create_pat: true, pat_expire_in: 1 (the dashboard doesn't send these) and uses the token once:
- turns on new-user approval;
- adds a Cloudron OIDC provider from the addon credentials, unless one already exists;
- deletes the token, checks it no longer works, and removes it from the response to the browser.
Nothing runs at startup, and the token and secret are never logged. The local owner login stays as the recovery login. If registration fails, setup still succeeds and the log points to the manual steps. Cloudron users wait for approval before they get access.
I've tested the fallback path (unreachable issuer, token cleanup). I haven't yet tested a successful registration on a real fresh SSO install, so reports are welcome.
The dashboard's Add Peer command now also includes --enable-rosenpass --rosenpass-permissive by default.
@james do i get an
APP DEVbadge of honour yet?
Web Design & Development: https://www.evergreen.je
Technology & Apps: https://www.marcusquinn.com -
@DanTheMan Cool, perhaps you can contribute a guide for the community?
One notable thing is that Netbird uses Rosenpass.eu, allegedly post quantum secure set of algorithms that works with Wireguard.
@robi rosenpass is on by default now
-
I have been running Netbird for some time now in a non-Cloudron. It is now very easy and awesome. Cloudron would bring a unified user management experience, which would be nice. If we had Rustdesk and ManageEngine, (Which I also have to run in a separate Docker system) I could run the whole IT operation with Cloudron...
@stevespaw my aidevops.sh harness has all the skills needed for Cloudron app packaging, now. I used that and Opus 5.5 to package this, and other community apps.
Worth a try if you want to package RustDesk & ManageEngine. It's prob a few hours work, and with ssh to a cloudron instance can do all the testing for you, too.
-
@james do i get an
APP DEVbadge of honour yet?Hello @marcusquinn
do i get an APP DEV badge of honour yet?
You have 3x community apps, if you'd like the badge I'll add you.
-
Hello @marcusquinn
do i get an APP DEV badge of honour yet?
You have 3x community apps, if you'd like the badge I'll add you.
@james how many apps do you want?
Jeez, just seen my post count, here. You got a badge for
SUPER FANtoo?
Web Design & Development: https://www.evergreen.je
Technology & Apps: https://www.marcusquinn.com -
@james how many apps do you want?
Jeez, just seen my post count, here. You got a badge for
SUPER FANtoo?Hello @marcusquinn
You got a badge for SUPER FAN too?
Not yet, but maybe we could add such a thing.
I know that Discourse has some gamification for topics read, created hearts given and received and more.
There even is a gamification in Discourse if you finish the tutorial of how to write topics you get a certificate and a badge. -
Hello @marcusquinn
You got a badge for SUPER FAN too?
Not yet, but maybe we could add such a thing.
I know that Discourse has some gamification for topics read, created hearts given and received and more.
There even is a gamification in Discourse if you finish the tutorial of how to write topics you get a certificate and a badge.@james ahah, gold
for you my friend -
@andreasdueren Claude Opus 5.5 says:
Thanks Andreas, great suggestion. It's in NetBird package 2.6.0.
When the app is installed with Cloudron SSO ticked, the owner's first /setup goes through a small loopback helper. It adds create_pat: true, pat_expire_in: 1 (the dashboard doesn't send these) and uses the token once:
- turns on new-user approval;
- adds a Cloudron OIDC provider from the addon credentials, unless one already exists;
- deletes the token, checks it no longer works, and removes it from the response to the browser.
Nothing runs at startup, and the token and secret are never logged. The local owner login stays as the recovery login. If registration fails, setup still succeeds and the log points to the manual steps. Cloudron users wait for approval before they get access.
I've tested the fallback path (unreachable issuer, token cleanup). I haven't yet tested a successful registration on a real fresh SSO install, so reports are welcome.
The dashboard's Add Peer command now also includes --enable-rosenpass --rosenpass-permissive by default.
@andreasdueren Claude Opus 5.5 says:
Did @andreasdueren just outsmart Opus?
-
Hello @marcusquinn
do i get an APP DEV badge of honour yet?
You have 3x community apps, if you'd like the badge I'll add you.
You have 3x community apps, if you'd like the badge I'll add you.
Wait, don't get me wrong, I think @marcusquinn is great, but the AppDev badge existed before Community Apps did, and until this moment I think had been reserved for people who initially packaged apps that are now in the official app store.
Given @staff's understandable desire to distinguish between official and community apps (the latter of which are of varying quality) IMHO it should probably be reserved for that.
-
Hello @jdaviescoates
The @appdev badge/group has been used like you have mentioned, but also for people who contributed to existing apps.
There also is the badge for @validated-app-maintainer which we currently use for upstream maintainers.I think had been reserved for people who initially packaged apps that are now in the official app store
...
IMHO it should probably be reserved for thatHmm.
I understand your sentiment. I will create a group/badge for Community App Maintainers.
This also helps to identify people in the forum that maintain community apps.@marcusquinn
Now that I have given you the badge, would you be okay with a Community App Maintainer badge instead?Edit:
Now there is @community-app-maintainer and I have added everyone I could find from the community app store. -
Whatever you guys want is fine by me.
I generally keep up with notifications from here regardless, so if anyone has any issues with the apps packaged, just reply on the threads discussing them or log an issue in github.
If Cloudron does or doesn't also want to adopt any apps, also fine.
Needs and preferences are what they are. I'm just happy to be unconstrained to create what we need, and share the joy for the wisdom of the crowd to be more important than any one of us.
Web Design & Development: https://www.evergreen.je
Technology & Apps: https://www.marcusquinn.com -
Whatever you guys want is fine by me.
I generally keep up with notifications from here regardless, so if anyone has any issues with the apps packaged, just reply on the threads discussing them or log an issue in github.
If Cloudron does or doesn't also want to adopt any apps, also fine.
Needs and preferences are what they are. I'm just happy to be unconstrained to create what we need, and share the joy for the wisdom of the crowd to be more important than any one of us.
I'm just happy to be unconstrained to create what we need, and share the joy for the wisdom of the crowd to be more important than any one of us.
well said -
Hello @marcusquinn
do i get an APP DEV badge of honour yet?
You have 3x community apps, if you'd like the badge I'll add you.
@james ahaha, brilliant, we have
SUPER FANbadges
Web Design & Development: https://www.evergreen.je
Technology & Apps: https://www.marcusquinn.com -
@james ahaha, brilliant, we have
SUPER FANbadgesHello @marcusquinn
The @super-fan badge and group will automatically be assigned to users that posted more than 500 times in our forum.
If you have more then 500 posts and you don't see the badge, edit your profile and you can enable the badge visibility or also hide it.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login