Ente

[timconsidine]

@necrevistonnezr yes, a risk that must be guarded against

[timconsidine]

@scooke yep. I never look at YH these days.

[andreasdueren]

The current state of the package:

• building from source not using the official docker image
• photos works (finally)
• other apps (cast/auth/accounts) do not yet
• working on a script that will send the OTP via E-Mail instead of having to retrieve from the logs
• my s3 configuration is still hardcoded because making it work was a pain

[nebulon]

Oh very nice progress! So ente also has a requirement for an S3 storage without a fallback to the filesystem?

[andreasdueren]

@nebulon correct, ente does not support any other storage options besides s3

[jdaviescoates]

@nebulon said in Ente:

Oh very nice progress! So ente also has a requirement for an S3 storage without a fallback to the filesystem?

Given this seems (annoyingly) increasingly common, perhaps there needs to be a way for Cloudron users to add details of/ configure their preferred S3 storage option to Cloudron which could then be automagically used like an addon for all such apps?

If that is even possible? I guess something like (or even an extension of) Volumes for for S3?

[robi]

Sounds like bundling headless rustS3 would help.

Not sure how Cloudron 9 can handle installing an app w/o another app present, having to check prerequisites.

Easy option is to just include an S3 service like PG integrated into the Cloudron base install. It's common enough now it makes sense.

[andreasdueren]

I got photos and auth working. What still needs to be done:

• Make CLI work to increase storage quota
• Set up OTT to be sent via E-Mail
• Implement option to use multiple s3 backends for redundancy
• Check Accounts app

[sponch]

@andreasdueren hope this will make it to cloudron.

[andreasdueren]

I'm hitting a road block with this package. @girish any advice?

Go's smtp.PlainAuth (used by Museum) refuses to send credentials (the TOTP) over unencrypted connections for security. Cloudron's sendmail on port 2525 requires authentication but is unencrypted, causing the error: "unencrypted connection".

What I Tried:

1: Port 2525 without auth → 550 "cannot deliver mail" (requires auth)
2: Port 2525 with auth → "unencrypted connection" (PlainAuth rejects)
3: Port 2587 with STARTTLS → Certificate validation fails (x509: certificate is valid for *.tld.com, not mail)
4: Port 2465 with TLS → Same certificate issue

[girish]

@andreasdueren oh this is a general problem with Go apps which don't want to send email to servers without valid TLS certificates . You can set requiresValidCertificate as an option for sendmail addon in the manifest . See the fider and pocketbase packages which use this. Currently, this flag needs Cloudron 9.

[andreasdueren]

@girish thanks I'll try that out