Cloudron Forum

Viva la LLM: The container is healthy now — 1 running, 0 unresponsive. The Cloudron update worked: - New image: cloudron/com.nextcloud.cloudronapp:202607231345050000 - Nextcloud: 34.0.2 (up from 34.0.1) - user_oidc: 8.10.1 — working! How extensions should be updated in Nextcloud under Cloudron The proper way is: 1. occ app:update — updates from Nextcloud app store to /app/data/apps/ (persistent across restarts) 2. Nextcloud web UI → Apps — same effect 3. Cloudron app package update — what you just did; the vendor bundles newer versions in the image The root issue was that the old image (202606251555380000) bundled user_oidc 8.3.0 which had max-version="33" — incompatible with Nextcloud 34. The startup script's $occ user_oidc:provider command couldn't register. The data volume still had our manually-installed 8.10.1 from earlier. The new image (202607231345050000) likely bundles a compatible version, or my 8.10.1 on the data volume is now taking effect.

This is done by now.

The following configuration needs to be added to the identifier registration of Kopano Konnect to enable SSO with Rocketchat: - id: rocketchat.9wd.eu name: Rocketchat trusted: true application_type: web redirect_uris: - https://rocketchat.9wd.eu/_oauth/konnect Remember to restart Konnect after modifying the registry. If you want to verify that the configuration was properly loaded you have to modify log_level in /app/data/konnectd.cfg to read /app/data/konnectd.cfg. With another restart Konnect will then print a message like the following at startup: Apr 20 20:21:30 time="2020-04-20T18:21:30Z" level=debug msg="registered client" application_type=web client_id=rocketchat.9wd.eu insecure=false origins="[https://rocketchat.9wd.eu]" redirect_uris="[https://rocketchat.9wd.eu/_oauth/konnect]" trusted=true with_client_secret=false In Rocket.chat the following configuration needs to be added. For this go into the admin backend, select "OAuth" and there "Add custom oauth". I am using the following settings: URL: https://meet.9wd.eu Token Path: /konnect/v1/token Token Sent Via: Header Identity Token Sent Via: Same as "Token Sent Via" Identity Path: /konnect/v1/userinfo Authorize Path: /signin/v1/identifier/_/authorize Scope: openid profile email Id: rocketchat.9wd.eu Secret: rocketchat Login Style: Default Button Text: Kopano Konnect (needs to be something the user can relate to) Button Text Color: #FFFFFF Button Color: #13679A Username field: preferred_username Merge users: false After storing these log out of Rocket.chat and you will see a new button on your login page titled "Kopano Konnect", which will then use the new login method.

For discourse, we found that it doesn't have proper LDAP support yet. Please see https://forum.cloudron.io/topic/2/discourse/20 . If a plugin comes up, we are happy to integrate it into the package.

Since we have added an OpenID connect and thus some OAuth2 compatibility, I will mark this as solved finally.