<![CDATA[Encrypt data traffic]]>Hello community,

Is there a way / option to encrypt my traffic going to and from Cloudron? I am planning to host some "family" stuff like videos, pictures ... and don't want anyone to be able to "intercept" my traffic and see what data is going to and from the Cloudron server.

Regards
Lukas

]]>https://forum.cloudron.io/topic/11564/encrypt-data-trafficRSS for NodeMon, 08 Jun 2026 20:20:55 GMTWed, 17 Apr 2024 08:04:14 GMT60<![CDATA[Reply to Encrypt data traffic on Wed, 17 Apr 2024 09:25:24 GMT]]>@lukas you can attach an external disk which has encryption and move the Cloudron App Data (https://docs.cloudron.io/apps/#data-directory) to that volume.

It's not possible to enable encryption at the per app level when the underlying disk is not encrypted. I think this requires creating loopback mounts (which should not be used for production) and setting up encryption. All this goes against best practices.

]]>https://forum.cloudron.io/post/87089https://forum.cloudron.io/post/87089Wed, 17 Apr 2024 09:25:24 GMT<![CDATA[Reply to Encrypt data traffic on Wed, 17 Apr 2024 09:15:05 GMT]]>thank you, so per App "data encryption" is not on the roadmap?

]]>https://forum.cloudron.io/post/87088https://forum.cloudron.io/post/87088Wed, 17 Apr 2024 09:15:05 GMT<![CDATA[Reply to Encrypt data traffic on Wed, 17 Apr 2024 09:12:40 GMT]]>@lukas that is more a server/OS level feature called FDE. See https://forum.cloudron.io/topic/2939/optional-full-disc-encryption . You can always setup FDE on your server and install Cloudron on top of that.

]]>https://forum.cloudron.io/post/87086https://forum.cloudron.io/post/87086Wed, 17 Apr 2024 09:12:40 GMT<![CDATA[Reply to Encrypt data traffic on Wed, 17 Apr 2024 08:47:01 GMT]]>@girish great! which would be very cool if the application data could be encrypted

]]>https://forum.cloudron.io/post/87084https://forum.cloudron.io/post/87084Wed, 17 Apr 2024 08:47:01 GMT<![CDATA[Reply to Encrypt data traffic on Wed, 17 Apr 2024 08:45:47 GMT]]>@lukas yes

]]>https://forum.cloudron.io/post/87083https://forum.cloudron.io/post/87083Wed, 17 Apr 2024 08:45:47 GMT<![CDATA[Reply to Encrypt data traffic on Wed, 17 Apr 2024 08:43:55 GMT]]>So does this mean that if I have SSL active for my applications, the data traffic cannot be intercepted and decrypted, i.e. nobody can read it?

]]>https://forum.cloudron.io/post/87082https://forum.cloudron.io/post/87082Wed, 17 Apr 2024 08:43:55 GMT<![CDATA[Reply to Encrypt data traffic on Wed, 17 Apr 2024 08:34:42 GMT]]>You can actually test your domain/site here - https://www.ssllabs.com/ssltest/analyze.html . You will see a line like below in the report:

image.png

]]>https://forum.cloudron.io/post/87079https://forum.cloudron.io/post/87079Wed, 17 Apr 2024 08:34:42 GMT<![CDATA[Reply to Encrypt data traffic on Wed, 17 Apr 2024 08:32:50 GMT]]>@lukas as long as you have certificates for apps, everything is already encrypted via TLS. Nobody can intercept Cloudron traffic. Even if they did, we use perfect forward secrecy ciphers (ECDHE) which prevents replay attacks (if someone 'recorded' your traffic).

]]>https://forum.cloudron.io/post/87078https://forum.cloudron.io/post/87078Wed, 17 Apr 2024 08:32:50 GMT