Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
Brand Logo

Cloudron Forum
  • J

    N8N Security

    Discuss
    8
    2 Votes
    8 Posts
    398 Views
    J
    That’s a great point about the automated scrapes. Even if it's 'security by obscurity,' sometimes just not being an obvious target is half the battle! I’m really looking forward to the per-app IP whitelisting mentioned here - that seems like the most solid way to handle this without breaking the external webhooks. In the meantime, the OIDC workaround looks like a solid stopgap to at least add an extra layer.
  • girishG

    InvoiceNinja - Package Updates

    Pinned Invoice Ninja
    566
    0 Votes
    566 Posts
    859k Views
    Package UpdatesP
    [1.22.3] Update invoiceninja to 5.13.3 Full Changelog Inject small delay into client webhooks to allow contacts to be returned. Fixes for e-invoice notifications Updates for PEPPOL SE sending Ensure GoCardless displays correct payment method type Updated Translations
  • E

    Tymeslot - Better Meeting Scheduling than cal.com

    App Wishlist
    13
    9 Votes
    13 Posts
    251 Views
    E
    The app can be installed now via CloudronVersions: https://github.com/Tymeslot/tymeslot/blob/main/CloudronVersions.json
  • girishG

    Immich - Package Updates

    Pinned Immich
    225
    1 Votes
    225 Posts
    148k Views
    Package UpdatesP
    [1.98.0] Update immich to 2.6.1 Full Changelog Fixed a failed migration issue on the mobile app when the URL Switching feature is used fix(server): fallback to email when name is empty by @​jrasm91 in #​27016 fix: ignore errors deleting untitled album by @​jrasm91 in #​27020 fix(web): wrap long album title by @​jrasm91 in #​27012 fix(web): stop in-progress uploads on logout by @​jrasm91 in #​27021 fix: writing empty exif tags by @​danieldietzler in #​27025 fix(web): disable send button by @​jrasm91 in #​27051 fix(mobile): server url migration by @​mertalev in #​27050
  • E

    Community App - required environment variables?

    App Packaging & Development
    9
    0 Votes
    9 Posts
    124 Views
    E
    Thank you, I just wanted to say that this worked!
  • girishG

    Stirling-PDF - Package Updates

    Pinned Stirling-PDF
    158
    0 Votes
    158 Posts
    72k Views
    Package UpdatesP
    [3.8.1] Update Stirling-PDF to 2.7.3 Full Changelog New PDF read aloud feature in viewer mode to "speak" the PDF to you, will be improved more going forwards! Improved annotation handling in annotation UI Mac printing is finally working on desktop app! Several general bug fixes such as Fix non-ASCII characters in headers being rejected Fix bug for HTTP2 support
  • nebulonN

    Baserow - Package Updates

    Pinned Baserow
    98
    2 Votes
    98 Posts
    35k Views
    Package UpdatesP
    [1.35.10] Update uv to 0.10.12 Full Changelog Add pypy 3.11.15 (#​18468) Add support for using Python 3.6 interpreters (#​18454) Include uv's target triple in version report (#​18520) Allow comma separated values in --no-emit-package (#​18565) Show uv audit in the CLI help (#​18540) Improve reporting of managed interpreter symlinks in uv python list (#​18459) Preserve end-of-line comments on previous entries when removing dependencies (#​18557) Treat abi3 wheel Python version as a lower bound (#​18536) Detect hard-float support on aarch64 kernels running armv7 userspace (#​18530)
  • girishG

    NodeBB - Package Updates

    Pinned NodeBB
    172
    0 Votes
    172 Posts
    120k Views
    Package UpdatesP
    [2.26.0] Update NodeBB to 4.10.0 Full Changelog add /world as a potential home page route (58d3aa7) add category selector to /world quick composer (2f5021e) ability to show only local posts in /world (44e65b8) #​14094, notification drawer UX improvements (6c01a5d) allow 3 profile pics (#​14092) (533ae69) category group actor outbox, #​14083 (b317cdd) improve idempotency of ap test (8ca34e7) call syncfollowcounts on unfollow as well (ebe709d) sync follow counts on local and remote follows, #​14105 (44e78e4) cold load redirect should only affect guests (cc60667)
  • nebulonN

    Formbricks - Package Updates

    Pinned Formbricks
    63
    0 Votes
    63 Posts
    8k Views
    Package UpdatesP
    [2.8.2] Update formbricks to 4.8.2 Full Changelog fix: [Backport] backports sentry improvement and loading page fix by @​pandeymangg in #​7534 fix: [Backport] backports the sdk initialization issues by @​pandeymangg in #​7536
  • nebulonN

    Audiobookshelf - Package Updates

    Pinned Audiobookshelf
    81
    0 Votes
    81 Posts
    32k Views
    Package UpdatesP
    [1.97.1] Update audiobookshelf to 2.33.1 Full Changelog API Keys not respecting user enabled/disabled flag Podcast episode update endpoint sanitizes HTML for subtitle Playlist & collection create/update endpoints strip HTML tags from name More strings translated Belarusian by @​pavel-miniutka German by @​fabianjuelich Spanish by @​cyphra
  • girishG

    Wallos - Package Updates

    Pinned Wallos
    45
    0 Votes
    45 Posts
    10k Views
    Package UpdatesP
    [1.20.1] Update Wallos to 4.7.2 Full Changelog password reset tokens now expire after 60 minutes (90bb618) vulnerability would allow to bypass 2fa (#​1021) (90bb618)
  • Package UpdatesP

    Keycloak - Package Updates

    Pinned Keycloak
    37
    0 Votes
    37 Posts
    7k Views
    Package UpdatesP
    [1.5.6] Update keycloak to 26.5.6 Full Changelog CVE-2026-1180 - Blind Server-Side Request Forgery (SSRF) in Keycloak OIDC Dynamic Client Registration via jwks_uri oidc CVE-2026-1035 - Keycloak Refresh Token Reuse Bypass via TOCTOU Race Condition oidc CVE-2025-14777 - Keycloak IDOR in realm client creating/deleting CVE-2025-14082 keycloak-server: Keycloak Admin REST API: Improper Access Control leads to sensitive role metadata information disclosure CVE-2026-3121 - Keycloak: Privilege escalation via manage-clients permission CVE-2026-3190 - Information Disclosure via improper role enforcement in UMA 2.0 Protection API core CVE-2026-3911 Keycloak: Information disclosure of disabled user attributes via administrative endpoint user-profile CVE-2026-2366 Authorization Bypass: Unprivileged tokens can enumerate user organization memberships organizations Federated user disabled when external DB unavailable, never re-enabled storage AUTH_SESSION_ID cookie reuse causes cross-user session contamination on re-authentication authentication
  • murgeroM

    Looking for an App?

    Community Apps
    33
    4 Votes
    33 Posts
    1k Views
    archosA
    @murgero Hi, would it be possible to package GoToSocial? It would be great to have it available on Cloudron.
  • C

    Scaleway backup

    Solved Support backup scaleway
    26
    1 Votes
    26 Posts
    431 Views
    C
    In the end I used S3 compatible option to set this up successfully. IDK why I could not get the Scaleway option to work. Thanks all for your help & input
  • P

    BTCpayserver

    App Wishlist
    78
    14 Votes
    78 Posts
    24k Views
    nostrdevN
    @timconsidine - didn't realise this was ready, thanks for the docs pointer, it looks straightforward enough. Will get onto it asap! Which realistically will be this weekend or early next week.
  • LanhildL

    Unusable application

    Docker Registry
    1
    1 Votes
    1 Posts
    20 Views
    No one has replied
  • C

    Cloudron and Swap File Use

    Moved Discuss
    9
    0 Votes
    9 Posts
    418 Views
    robiR
    @Jamie_Casper can you give us an example that's more specific?
  • C

    Forgejo built-in SSH server not authenticating public keys

    Forgejo
    4
    2 Votes
    4 Posts
    35 Views
    robiR
    Is cloudron@ the admin or default user?
  • timconsidineT

    Excalidraw

    Community Apps
    1
    3 Votes
    1 Posts
    26 Views
    No one has replied
  • L

    How to Package and Deploy Strapi v5 as a Custom App on Cloudron

    App Packaging & Development strapi custom-app headless-cms nodejs postgresql
    13
    1 Votes
    13 Posts
    328 Views
    F
    @LoudLemur i'm working a lot with strapi, developed plugins and more So yeah, it def. has its limitations or "weird edges", but in general i'm happy with it as backend for my apps. And like you said, strapi is more for serious business depending logic (with more effort in CI/CD) while directus is more for non-technical and quick-deploy setups.