Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Announcements
  3. What's coming in Cloudron 6.3

What's coming in Cloudron 6.3

Scheduled Pinned Locked Moved Announcements
91 Posts 19 Posters 35.2k Views 22 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • girishG girish

    Before Cloudron 7, we need some more work to make the single server install secure. For this reason, we will spend some time first with the following:

    • (Security) - Inform users about new browser/IP logins.
    • (Security) - Better email monitoring/visibility for admins. @d19dotca raised many important posts and there's also existing ones. We have to read the posts in more detail and discuss internally before we give more details on what we plan to do here. (moved to next release)
    • (Security) - Add a way to secure/limit access to specific apps and dashboard. For example, a set of apps are public and the rest are only accessible via wireguard/openvpn. This combined with mandatory 2FA for dashboard will make good security. (moved to next release)
    • Reduce/remove some notifications. It seems a bit noisy.
    • Fix email situation for Go apps like Statping, Commento that are having trouble sending mails via our email server.
    • Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.
    • Volumes - make mounting easier by automating fstab/exports entries
    • Move TURN server to port 443. (moved to next release)
    • As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.
    • Vultr DNS
    • Vultr Object Storage
    girishG Offline
    girishG Offline
    girish
    Staff
    wrote on last edited by
    #11

    @girish said in What's coming in Cloudron 6.3:

    Fix email situation for Go apps like Statping, Commento that are having trouble sending mails via our email server.

    our patch got merged upstream for this - https://github.com/haraka/Haraka/pull/2940

    1 Reply Last reply
    2
    • girishG girish

      @girish said in What's coming in Cloudron 6.3:

      Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.

      This one is implemented now in the Email view. The app package has to explicitly say whether it supports this feature or not using the optional flag to the sendmail addon.

      09cf5be9-4295-451b-9dff-2182b316464e-image.png

      mdreiraM Offline
      mdreiraM Offline
      mdreira
      translator
      wrote on last edited by
      #12

      @girish said in What's coming in Cloudron 6.3:

      @girish said in What's coming in Cloudron 6.3:

      Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.

      This one is implemented now in the Email view. The app package has to explicitly say whether it supports this feature or not using the optional flag to the sendmail addon.

      09cf5be9-4295-451b-9dff-2182b316464e-image.png

      @girish In 6.2.7 update this should already be implemented, right? I thought I read it in the changelog.

      However I have not yet seen this option in the applications.

      girishG 1 Reply Last reply
      0
      • mdreiraM mdreira

        @girish said in What's coming in Cloudron 6.3:

        @girish said in What's coming in Cloudron 6.3:

        Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.

        This one is implemented now in the Email view. The app package has to explicitly say whether it supports this feature or not using the optional flag to the sendmail addon.

        09cf5be9-4295-451b-9dff-2182b316464e-image.png

        @girish In 6.2.7 update this should already be implemented, right? I thought I read it in the changelog.

        However I have not yet seen this option in the applications.

        girishG Offline
        girishG Offline
        girish
        Staff
        wrote on last edited by
        #13

        @mdreira the feature is only in 6.3 (not released) and not 6.2.

        mdreiraM 1 Reply Last reply
        0
        • girishG girish

          @mdreira the feature is only in 6.3 (not released) and not 6.2.

          mdreiraM Offline
          mdreiraM Offline
          mdreira
          translator
          wrote on last edited by
          #14

          @girish Thank you. I am looking forward to that day! I need this feature very much.

          Do you have any planned date when update 6.3 will be released?

          girishG 1 Reply Last reply
          0
          • mdreiraM mdreira

            @girish Thank you. I am looking forward to that day! I need this feature very much.

            Do you have any planned date when update 6.3 will be released?

            girishG Offline
            girishG Offline
            girish
            Staff
            wrote on last edited by
            #15

            @mdreira It doesn't have a release date yet. But it should be out end of april for sure.

            1 Reply Last reply
            2
            • girishG Offline
              girishG Offline
              girish
              Staff
              wrote on last edited by
              #16

              There's an option now for admins to reset user's 2FA:

              69150937-3613-4c26-bcfc-e8fc76db4233-image.png

              robiR 1 Reply Last reply
              4
              • girishG Offline
                girishG Offline
                girish
                Staff
                wrote on last edited by
                #17

                Mailboxes and lists can be individually set as active/inactive. When inactive, you cannot login to the mailbox and mails will bounce:

                e8e6ef07-4a97-46d2-9bd6-5a37677f99bf-image.png

                ef79546c-68c3-4559-9215-2e77615ef233-image.png

                1 Reply Last reply
                3
                • girishG girish

                  There's an option now for admins to reset user's 2FA:

                  69150937-3613-4c26-bcfc-e8fc76db4233-image.png

                  robiR Offline
                  robiR Offline
                  robi
                  wrote on last edited by
                  #18

                  @girish said in What's coming in Cloudron 6.3:

                  There's an option now for admins to reset user's 2FA:

                  Perhaps change the button to say "Reset 2FA"

                  Conscious tech

                  1 Reply Last reply
                  0
                  • d19dotcaD Offline
                    d19dotcaD Offline
                    d19dotca
                    wrote on last edited by d19dotca
                    #19

                    Just wanted to check in and see how 6.3 is coming along. 🙂

                    Any ETA by chance? I'm super excited for these email improvements many of us have been requesting, particularly the DNSBL checks; greylisting; blocklist & whitelist auto-updating/DNSWL; email autoexpunge; and not forwarding spam to mailing lists. I know that's a lot, lol.

                    I know many of them came from me, haha, so if you want to discuss any of them or want clarification on the requests, I'd be happy to help offer guidance or clarification.

                    --
                    Dustin Dauncey
                    www.d19.ca

                    girishG 1 Reply Last reply
                    4
                    • d19dotcaD d19dotca

                      Just wanted to check in and see how 6.3 is coming along. 🙂

                      Any ETA by chance? I'm super excited for these email improvements many of us have been requesting, particularly the DNSBL checks; greylisting; blocklist & whitelist auto-updating/DNSWL; email autoexpunge; and not forwarding spam to mailing lists. I know that's a lot, lol.

                      I know many of them came from me, haha, so if you want to discuss any of them or want clarification on the requests, I'd be happy to help offer guidance or clarification.

                      girishG Offline
                      girishG Offline
                      girish
                      Staff
                      wrote on last edited by
                      #20

                      @d19dotca Thanks for checking 🙂 We haven't gotten to the email part yet. I am fixing up the notification issues. Once I do that, I want to look into the wireguard/VPN thing before I get into email. @nebulon is working on the login history and I think that is mostly done. He is also working on the volume mounting (i.e will automatically setup fstab entries).

                      I don't have an ETA, will have a better idea next week. It's been a bit slow this week. I had my pfeizer vaccine, yay and now the sideeffects are gone, so I can go back to being productive 🙂

                      1 Reply Last reply
                      10
                      • girishG girish

                        @girish said in What's coming in Cloudron 6.3:

                        Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.

                        This one is implemented now in the Email view. The app package has to explicitly say whether it supports this feature or not using the optional flag to the sendmail addon.

                        09cf5be9-4295-451b-9dff-2182b316464e-image.png

                        mdreiraM Offline
                        mdreiraM Offline
                        mdreira
                        translator
                        wrote on last edited by
                        #21

                        I'm waiting like gold for this update, especially because Cloudron Mail is changing Mautic email configuration all time.

                        The Amazon SES-API and queue configuration that I have within Mautic is misconfigured every time the application restarts, updates, recovers ... it's frustrating.

                        1 Reply Last reply
                        0
                        • girishG Offline
                          girishG Offline
                          girish
                          Staff
                          wrote on last edited by
                          #22

                          New browser login locations is implemented. This is only for dashboard logins and not for LDAP login (because many apps send mails by themselves).

                          6149021c-c18a-4c30-b76c-853d6eb2f9be-image.png

                          fbartelsF 1 Reply Last reply
                          8
                          • girishG girish

                            New browser login locations is implemented. This is only for dashboard logins and not for LDAP login (because many apps send mails by themselves).

                            6149021c-c18a-4c30-b76c-853d6eb2f9be-image.png

                            fbartelsF Offline
                            fbartelsF Offline
                            fbartels
                            App Dev
                            wrote on last edited by
                            #23

                            @girish said in What's coming in Cloudron 6.3:

                            This is only for dashboard logins

                            Since this already covers the dashboard, is it automatically available for apps using proxyauth as well?

                            nebulonN 1 Reply Last reply
                            3
                            • fbartelsF fbartels

                              @girish said in What's coming in Cloudron 6.3:

                              This is only for dashboard logins

                              Since this already covers the dashboard, is it automatically available for apps using proxyauth as well?

                              nebulonN Offline
                              nebulonN Offline
                              nebulon
                              Staff
                              wrote on last edited by
                              #24

                              @fbartels we could do that for the auth proxy as well, but right now it is not. For other apps using LDAP this will be a bit harder since the ldap server currently does not see the upstream user-agent or IP.

                              fbartelsF 1 Reply Last reply
                              0
                              • nebulonN nebulon

                                @fbartels we could do that for the auth proxy as well, but right now it is not. For other apps using LDAP this will be a bit harder since the ldap server currently does not see the upstream user-agent or IP.

                                fbartelsF Offline
                                fbartelsF Offline
                                fbartels
                                App Dev
                                wrote on last edited by
                                #25

                                @nebulon ah, I kind of thought that the proxyauth would use the very same mechanisms of the dashboard for authentication. But the dashboard being mainly driven by an api with token authentication that of course does not have to be true.

                                Totally understand that the same is not possible for apps that use ldap under the surface.

                                1 Reply Last reply
                                0
                                • girishG Offline
                                  girishG Offline
                                  girish
                                  Staff
                                  wrote on last edited by
                                  #26

                                  @girish said in What's coming in Cloudron 6.3:

                                  As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.

                                  A big chunk of this landed today. Certificates also need to be migrated to the database, that should be done tomorrow. Essentially, from the next release, /home/yellowtent/boxdata will only contain mail server data and nothing else since everything has moved to the database. I will probably take this opportunity to separate box backups and mail backups. The box backup is going to be just the mysql dump and nothing else.

                                  1 Reply Last reply
                                  10
                                  • girishG girish

                                    Before Cloudron 7, we need some more work to make the single server install secure. For this reason, we will spend some time first with the following:

                                    • (Security) - Inform users about new browser/IP logins.
                                    • (Security) - Better email monitoring/visibility for admins. @d19dotca raised many important posts and there's also existing ones. We have to read the posts in more detail and discuss internally before we give more details on what we plan to do here. (moved to next release)
                                    • (Security) - Add a way to secure/limit access to specific apps and dashboard. For example, a set of apps are public and the rest are only accessible via wireguard/openvpn. This combined with mandatory 2FA for dashboard will make good security. (moved to next release)
                                    • Reduce/remove some notifications. It seems a bit noisy.
                                    • Fix email situation for Go apps like Statping, Commento that are having trouble sending mails via our email server.
                                    • Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.
                                    • Volumes - make mounting easier by automating fstab/exports entries
                                    • Move TURN server to port 443. (moved to next release)
                                    • As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.
                                    • Vultr DNS
                                    • Vultr Object Storage
                                    girishG Offline
                                    girishG Offline
                                    girish
                                    Staff
                                    wrote on last edited by
                                    #27

                                    @girish said in What's coming in Cloudron 6.3:

                                    As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.

                                    This is now done! Now the boxdata only contains the mysqldump and email.

                                    root@my:/home/yellowtent/boxdata# ls -l
                                    total 900
                                    -rw-r--r-- 1 yellowtent yellowtent 913492 May  7 06:00 box.mysqldump
                                    drwxr-xr-x 9 yellowtent yellowtent   4096 May  4 07:34 mail
                                    

                                    I am looking into moving mail as a separate backup just like an app. That way in future releases we can restore mail data (mailboxes) independently of box code just like apps.

                                    1 Reply Last reply
                                    9
                                    • girishG Offline
                                      girishG Offline
                                      girish
                                      Staff
                                      wrote on last edited by
                                      #28

                                      Pushed a change that makes the filenames of backups more readable. It's just app_<domain>_vVersion.

                                      root@my:/var/backups/2021-05-09-000811-352# ls
                                      app_test.cloudron.work_v1.1.3.tar.gz
                                      
                                      scookeS 1 Reply Last reply
                                      12
                                      • girishG girish

                                        Before Cloudron 7, we need some more work to make the single server install secure. For this reason, we will spend some time first with the following:

                                        • (Security) - Inform users about new browser/IP logins.
                                        • (Security) - Better email monitoring/visibility for admins. @d19dotca raised many important posts and there's also existing ones. We have to read the posts in more detail and discuss internally before we give more details on what we plan to do here. (moved to next release)
                                        • (Security) - Add a way to secure/limit access to specific apps and dashboard. For example, a set of apps are public and the rest are only accessible via wireguard/openvpn. This combined with mandatory 2FA for dashboard will make good security. (moved to next release)
                                        • Reduce/remove some notifications. It seems a bit noisy.
                                        • Fix email situation for Go apps like Statping, Commento that are having trouble sending mails via our email server.
                                        • Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.
                                        • Volumes - make mounting easier by automating fstab/exports entries
                                        • Move TURN server to port 443. (moved to next release)
                                        • As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.
                                        • Vultr DNS
                                        • Vultr Object Storage
                                        girishG Offline
                                        girishG Offline
                                        girish
                                        Staff
                                        wrote on last edited by
                                        #29

                                        @girish said in What's coming in Cloudron 6.3:

                                        Volumes - make mounting easier by automating fstab/exports entries

                                        This is also mostly done. When adding a volume, you can choose the mount type

                                        5358ad94-7368-45b1-9c45-20e13caf6b18-image.png

                                        The current volumes are migrated as "no-op" mount type (as in, user managed the mount themselves). It shows the status of each volume as well:

                                        d2923df5-34b3-4b8c-819d-d8556f4aa7e7-image.png

                                        One thing we decided to go with systemd mounts instead of /etc/fstab. This allows us to create mounts that have correct dependency with the unbound DNS server for CIFS and NFS mounts.

                                        A similar mounting change will be done for the Backups view as well.

                                        jdaviescoatesJ 1 Reply Last reply
                                        6
                                        • girishG girish

                                          @girish said in What's coming in Cloudron 6.3:

                                          Volumes - make mounting easier by automating fstab/exports entries

                                          This is also mostly done. When adding a volume, you can choose the mount type

                                          5358ad94-7368-45b1-9c45-20e13caf6b18-image.png

                                          The current volumes are migrated as "no-op" mount type (as in, user managed the mount themselves). It shows the status of each volume as well:

                                          d2923df5-34b3-4b8c-819d-d8556f4aa7e7-image.png

                                          One thing we decided to go with systemd mounts instead of /etc/fstab. This allows us to create mounts that have correct dependency with the unbound DNS server for CIFS and NFS mounts.

                                          A similar mounting change will be done for the Backups view as well.

                                          jdaviescoatesJ Offline
                                          jdaviescoatesJ Offline
                                          jdaviescoates
                                          wrote on last edited by
                                          #30

                                          @girish said in What's coming in Cloudron 6.3:

                                          One thing we decided to go with systemd mounts instead of /etc/fstab.

                                          So what will happen to existing volumes that are already mounted using /etc/fstab?

                                          I use Cloudron with Gandi & Hetzner

                                          nebulonN 1 Reply Last reply
                                          2
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • Bookmarks
                                          • Search