Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Announcements
  3. What's coming in Cloudron 6.3

What's coming in Cloudron 6.3

Scheduled Pinned Locked Moved Announcements
91 Posts 19 Posters 33.6k Views 22 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • girishG girish

    @mdreira the feature is only in 6.3 (not released) and not 6.2.

    mdreiraM Offline
    mdreiraM Offline
    mdreira
    translator
    wrote on last edited by
    #14

    @girish Thank you. I am looking forward to that day! I need this feature very much.

    Do you have any planned date when update 6.3 will be released?

    girishG 1 Reply Last reply
    0
    • mdreiraM mdreira

      @girish Thank you. I am looking forward to that day! I need this feature very much.

      Do you have any planned date when update 6.3 will be released?

      girishG Offline
      girishG Offline
      girish
      Staff
      wrote on last edited by
      #15

      @mdreira It doesn't have a release date yet. But it should be out end of april for sure.

      1 Reply Last reply
      2
      • girishG Offline
        girishG Offline
        girish
        Staff
        wrote on last edited by
        #16

        There's an option now for admins to reset user's 2FA:

        69150937-3613-4c26-bcfc-e8fc76db4233-image.png

        robiR 1 Reply Last reply
        4
        • girishG Offline
          girishG Offline
          girish
          Staff
          wrote on last edited by
          #17

          Mailboxes and lists can be individually set as active/inactive. When inactive, you cannot login to the mailbox and mails will bounce:

          e8e6ef07-4a97-46d2-9bd6-5a37677f99bf-image.png

          ef79546c-68c3-4559-9215-2e77615ef233-image.png

          1 Reply Last reply
          3
          • girishG girish

            There's an option now for admins to reset user's 2FA:

            69150937-3613-4c26-bcfc-e8fc76db4233-image.png

            robiR Offline
            robiR Offline
            robi
            wrote on last edited by
            #18

            @girish said in What's coming in Cloudron 6.3:

            There's an option now for admins to reset user's 2FA:

            Perhaps change the button to say "Reset 2FA"

            Conscious tech

            1 Reply Last reply
            0
            • d19dotcaD Offline
              d19dotcaD Offline
              d19dotca
              wrote on last edited by d19dotca
              #19

              Just wanted to check in and see how 6.3 is coming along. 🙂

              Any ETA by chance? I'm super excited for these email improvements many of us have been requesting, particularly the DNSBL checks; greylisting; blocklist & whitelist auto-updating/DNSWL; email autoexpunge; and not forwarding spam to mailing lists. I know that's a lot, lol.

              I know many of them came from me, haha, so if you want to discuss any of them or want clarification on the requests, I'd be happy to help offer guidance or clarification.

              --
              Dustin Dauncey
              www.d19.ca

              girishG 1 Reply Last reply
              4
              • d19dotcaD d19dotca

                Just wanted to check in and see how 6.3 is coming along. 🙂

                Any ETA by chance? I'm super excited for these email improvements many of us have been requesting, particularly the DNSBL checks; greylisting; blocklist & whitelist auto-updating/DNSWL; email autoexpunge; and not forwarding spam to mailing lists. I know that's a lot, lol.

                I know many of them came from me, haha, so if you want to discuss any of them or want clarification on the requests, I'd be happy to help offer guidance or clarification.

                girishG Offline
                girishG Offline
                girish
                Staff
                wrote on last edited by
                #20

                @d19dotca Thanks for checking 🙂 We haven't gotten to the email part yet. I am fixing up the notification issues. Once I do that, I want to look into the wireguard/VPN thing before I get into email. @nebulon is working on the login history and I think that is mostly done. He is also working on the volume mounting (i.e will automatically setup fstab entries).

                I don't have an ETA, will have a better idea next week. It's been a bit slow this week. I had my pfeizer vaccine, yay and now the sideeffects are gone, so I can go back to being productive 🙂

                1 Reply Last reply
                10
                • girishG girish

                  @girish said in What's coming in Cloudron 6.3:

                  Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.

                  This one is implemented now in the Email view. The app package has to explicitly say whether it supports this feature or not using the optional flag to the sendmail addon.

                  09cf5be9-4295-451b-9dff-2182b316464e-image.png

                  mdreiraM Offline
                  mdreiraM Offline
                  mdreira
                  translator
                  wrote on last edited by
                  #21

                  I'm waiting like gold for this update, especially because Cloudron Mail is changing Mautic email configuration all time.

                  The Amazon SES-API and queue configuration that I have within Mautic is misconfigured every time the application restarts, updates, recovers ... it's frustrating.

                  1 Reply Last reply
                  0
                  • girishG Offline
                    girishG Offline
                    girish
                    Staff
                    wrote on last edited by
                    #22

                    New browser login locations is implemented. This is only for dashboard logins and not for LDAP login (because many apps send mails by themselves).

                    6149021c-c18a-4c30-b76c-853d6eb2f9be-image.png

                    fbartelsF 1 Reply Last reply
                    8
                    • girishG girish

                      New browser login locations is implemented. This is only for dashboard logins and not for LDAP login (because many apps send mails by themselves).

                      6149021c-c18a-4c30-b76c-853d6eb2f9be-image.png

                      fbartelsF Offline
                      fbartelsF Offline
                      fbartels
                      App Dev
                      wrote on last edited by
                      #23

                      @girish said in What's coming in Cloudron 6.3:

                      This is only for dashboard logins

                      Since this already covers the dashboard, is it automatically available for apps using proxyauth as well?

                      nebulonN 1 Reply Last reply
                      3
                      • fbartelsF fbartels

                        @girish said in What's coming in Cloudron 6.3:

                        This is only for dashboard logins

                        Since this already covers the dashboard, is it automatically available for apps using proxyauth as well?

                        nebulonN Offline
                        nebulonN Offline
                        nebulon
                        Staff
                        wrote on last edited by
                        #24

                        @fbartels we could do that for the auth proxy as well, but right now it is not. For other apps using LDAP this will be a bit harder since the ldap server currently does not see the upstream user-agent or IP.

                        fbartelsF 1 Reply Last reply
                        0
                        • nebulonN nebulon

                          @fbartels we could do that for the auth proxy as well, but right now it is not. For other apps using LDAP this will be a bit harder since the ldap server currently does not see the upstream user-agent or IP.

                          fbartelsF Offline
                          fbartelsF Offline
                          fbartels
                          App Dev
                          wrote on last edited by
                          #25

                          @nebulon ah, I kind of thought that the proxyauth would use the very same mechanisms of the dashboard for authentication. But the dashboard being mainly driven by an api with token authentication that of course does not have to be true.

                          Totally understand that the same is not possible for apps that use ldap under the surface.

                          1 Reply Last reply
                          0
                          • girishG Offline
                            girishG Offline
                            girish
                            Staff
                            wrote on last edited by
                            #26

                            @girish said in What's coming in Cloudron 6.3:

                            As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.

                            A big chunk of this landed today. Certificates also need to be migrated to the database, that should be done tomorrow. Essentially, from the next release, /home/yellowtent/boxdata will only contain mail server data and nothing else since everything has moved to the database. I will probably take this opportunity to separate box backups and mail backups. The box backup is going to be just the mysql dump and nothing else.

                            1 Reply Last reply
                            10
                            • girishG girish

                              Before Cloudron 7, we need some more work to make the single server install secure. For this reason, we will spend some time first with the following:

                              • (Security) - Inform users about new browser/IP logins.
                              • (Security) - Better email monitoring/visibility for admins. @d19dotca raised many important posts and there's also existing ones. We have to read the posts in more detail and discuss internally before we give more details on what we plan to do here. (moved to next release)
                              • (Security) - Add a way to secure/limit access to specific apps and dashboard. For example, a set of apps are public and the rest are only accessible via wireguard/openvpn. This combined with mandatory 2FA for dashboard will make good security. (moved to next release)
                              • Reduce/remove some notifications. It seems a bit noisy.
                              • Fix email situation for Go apps like Statping, Commento that are having trouble sending mails via our email server.
                              • Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.
                              • Volumes - make mounting easier by automating fstab/exports entries
                              • Move TURN server to port 443. (moved to next release)
                              • As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.
                              • Vultr DNS
                              • Vultr Object Storage
                              girishG Offline
                              girishG Offline
                              girish
                              Staff
                              wrote on last edited by
                              #27

                              @girish said in What's coming in Cloudron 6.3:

                              As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.

                              This is now done! Now the boxdata only contains the mysqldump and email.

                              root@my:/home/yellowtent/boxdata# ls -l
                              total 900
                              -rw-r--r-- 1 yellowtent yellowtent 913492 May  7 06:00 box.mysqldump
                              drwxr-xr-x 9 yellowtent yellowtent   4096 May  4 07:34 mail
                              

                              I am looking into moving mail as a separate backup just like an app. That way in future releases we can restore mail data (mailboxes) independently of box code just like apps.

                              1 Reply Last reply
                              9
                              • girishG Offline
                                girishG Offline
                                girish
                                Staff
                                wrote on last edited by
                                #28

                                Pushed a change that makes the filenames of backups more readable. It's just app_<domain>_vVersion.

                                root@my:/var/backups/2021-05-09-000811-352# ls
                                app_test.cloudron.work_v1.1.3.tar.gz
                                
                                scookeS 1 Reply Last reply
                                12
                                • girishG girish

                                  Before Cloudron 7, we need some more work to make the single server install secure. For this reason, we will spend some time first with the following:

                                  • (Security) - Inform users about new browser/IP logins.
                                  • (Security) - Better email monitoring/visibility for admins. @d19dotca raised many important posts and there's also existing ones. We have to read the posts in more detail and discuss internally before we give more details on what we plan to do here. (moved to next release)
                                  • (Security) - Add a way to secure/limit access to specific apps and dashboard. For example, a set of apps are public and the rest are only accessible via wireguard/openvpn. This combined with mandatory 2FA for dashboard will make good security. (moved to next release)
                                  • Reduce/remove some notifications. It seems a bit noisy.
                                  • Fix email situation for Go apps like Statping, Commento that are having trouble sending mails via our email server.
                                  • Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.
                                  • Volumes - make mounting easier by automating fstab/exports entries
                                  • Move TURN server to port 443. (moved to next release)
                                  • As a pre-requisite for Cloudron 7 multi-host feature, we have to move file system data into the database. Much grunt work to be done here.
                                  • Vultr DNS
                                  • Vultr Object Storage
                                  girishG Offline
                                  girishG Offline
                                  girish
                                  Staff
                                  wrote on last edited by
                                  #29

                                  @girish said in What's coming in Cloudron 6.3:

                                  Volumes - make mounting easier by automating fstab/exports entries

                                  This is also mostly done. When adding a volume, you can choose the mount type

                                  5358ad94-7368-45b1-9c45-20e13caf6b18-image.png

                                  The current volumes are migrated as "no-op" mount type (as in, user managed the mount themselves). It shows the status of each volume as well:

                                  d2923df5-34b3-4b8c-819d-d8556f4aa7e7-image.png

                                  One thing we decided to go with systemd mounts instead of /etc/fstab. This allows us to create mounts that have correct dependency with the unbound DNS server for CIFS and NFS mounts.

                                  A similar mounting change will be done for the Backups view as well.

                                  jdaviescoatesJ 1 Reply Last reply
                                  6
                                  • girishG girish

                                    @girish said in What's coming in Cloudron 6.3:

                                    Volumes - make mounting easier by automating fstab/exports entries

                                    This is also mostly done. When adding a volume, you can choose the mount type

                                    5358ad94-7368-45b1-9c45-20e13caf6b18-image.png

                                    The current volumes are migrated as "no-op" mount type (as in, user managed the mount themselves). It shows the status of each volume as well:

                                    d2923df5-34b3-4b8c-819d-d8556f4aa7e7-image.png

                                    One thing we decided to go with systemd mounts instead of /etc/fstab. This allows us to create mounts that have correct dependency with the unbound DNS server for CIFS and NFS mounts.

                                    A similar mounting change will be done for the Backups view as well.

                                    jdaviescoatesJ Online
                                    jdaviescoatesJ Online
                                    jdaviescoates
                                    wrote on last edited by
                                    #30

                                    @girish said in What's coming in Cloudron 6.3:

                                    One thing we decided to go with systemd mounts instead of /etc/fstab.

                                    So what will happen to existing volumes that are already mounted using /etc/fstab?

                                    I use Cloudron with Gandi & Hetzner

                                    nebulonN 1 Reply Last reply
                                    2
                                    • jdaviescoatesJ jdaviescoates

                                      @girish said in What's coming in Cloudron 6.3:

                                      One thing we decided to go with systemd mounts instead of /etc/fstab.

                                      So what will happen to existing volumes that are already mounted using /etc/fstab?

                                      nebulonN Offline
                                      nebulonN Offline
                                      nebulon
                                      Staff
                                      wrote on last edited by
                                      #31

                                      @jdaviescoates I think instead of coming up with migration code, which will be a bit messy given the fstab format to correctly parse in all circumstances, I think we will ignore those and ask the admin to reconfigure the volume via the UI once. That way the admin can test and validate timely.

                                      jdaviescoatesJ 1 Reply Last reply
                                      1
                                      • nebulonN nebulon

                                        @jdaviescoates I think instead of coming up with migration code, which will be a bit messy given the fstab format to correctly parse in all circumstances, I think we will ignore those and ask the admin to reconfigure the volume via the UI once. That way the admin can test and validate timely.

                                        jdaviescoatesJ Online
                                        jdaviescoatesJ Online
                                        jdaviescoates
                                        wrote on last edited by
                                        #32

                                        @nebulon said in What's coming in Cloudron 6.3:

                                        I think we will ignore those and ask the admin to reconfigure the volume via the UI once. That way the admin can test and validate timely.

                                        Just to be clear, if the admin takes no action will existing volumes keep working?

                                        I use Cloudron with Gandi & Hetzner

                                        nebulonN 1 Reply Last reply
                                        0
                                        • jdaviescoatesJ jdaviescoates

                                          @nebulon said in What's coming in Cloudron 6.3:

                                          I think we will ignore those and ask the admin to reconfigure the volume via the UI once. That way the admin can test and validate timely.

                                          Just to be clear, if the admin takes no action will existing volumes keep working?

                                          nebulonN Offline
                                          nebulonN Offline
                                          nebulon
                                          Staff
                                          wrote on last edited by
                                          #33

                                          @jdaviescoates yes, the code does not touch existing mountpoints as such.

                                          1 Reply Last reply
                                          3
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • Bookmarks
                                          • Search