<![CDATA[2FA on Roundcube]]>Hi everyone,

In this day and age I feel uneasy not having 2FA on my apps. I realize this could be more of a "feel good" rather than real security measure (the app being protected should be secure in general, not just the login experience).

I've just switched from Rainloop after being ignorant and learning that it's no longer being maintained.

2FA is implemented as a plug-in for Rounbcube. The plugin I see mentioned the most is https://github.com/alexandregz/twofactor_gauthenticator . The instructions on https://docs.cloudron.io/apps/roundcube/ (Plugin section) says I need a tar archive which needs to be extracted into "/app/data/plugins" directory. I cannot find tar for that 2FA plugin anywhere.

I've never done PHP, so not sure if copying the whole repo content advisable, secure, etc.

Would appreciate if anyone shares their experience or advice on this subject.

Thanks!

]]>https://forum.cloudron.io/topic/13489/2fa-on-roundcubeRSS for NodeSun, 19 Jul 2026 00:29:15 GMTThu, 20 Mar 2025 18:59:22 GMT60<![CDATA[Reply to 2FA on Roundcube on Sun, 23 Mar 2025 04:16:29 GMT]]>@necrevistonnezr Completely agree with you. Boggles my mind. I too think features like 2FA and Captcha should be built-in.

]]>https://forum.cloudron.io/post/104101https://forum.cloudron.io/post/104101Sun, 23 Mar 2025 04:16:29 GMT<![CDATA[Reply to 2FA on Roundcube on Sat, 22 Mar 2025 18:36:10 GMT]]>Notwithstanding that it’s super annoying that 2FA is not built in. I hate outsourcing core features to „add-ons“ with a passion (see also Nextcloud)

]]>https://forum.cloudron.io/post/104089https://forum.cloudron.io/post/104089Sat, 22 Mar 2025 18:36:10 GMT<![CDATA[Reply to 2FA on Roundcube on Sat, 22 Mar 2025 07:13:40 GMT]]>@jdaviescoates Yep, essentially I do the following (I've added 5-6 plugins, not sure why they are not added by default by Cloudron devs):

  1. Open terminal for RoundCube
  2. git clone ....
  3. chown -R www-data:www-data PLUGIN_DIR_NAME
  4. Open File Manager for RoundCube
  5. Edit "customconfig.php" and add the plugin in there similar to:
    array_push($config['plugins'], 'twofactor_gauthenticator');
]]>https://forum.cloudron.io/post/104051https://forum.cloudron.io/post/104051Sat, 22 Mar 2025 07:13:40 GMT<![CDATA[Reply to 2FA on Roundcube on Sat, 22 Mar 2025 07:14:04 GMT]]>@necrevistonnezr Thank you for your advice! Wouldn't think about ownership change, but will keep in mind from now on.

One "good" thing about RoundCube plugins is that they are not updated, it seems, ever 😉 So, may not need to update those plugins ever, haha.

]]>https://forum.cloudron.io/post/104050https://forum.cloudron.io/post/104050Sat, 22 Mar 2025 07:14:04 GMT<![CDATA[Reply to 2FA on Roundcube on Sat, 22 Mar 2025 05:52:03 GMT]]>That’s what I do as well.

Note that for the next git pull, you’ll probably receive an error re dubious ownership (see https://stackoverflow.com/questions/72978485/git-submodule-update-failed-with-fatal-detected-dubious-ownership-in-reposit).
Since you cannot modify .gitconfig globally to get rid of these warnings (it’s in the read only part of the filesystem), you probably have to change folder permissions temporarily to root:root before git pull and switch back to www-data:www-data afterwards. This can be scripted of course.

]]>https://forum.cloudron.io/post/104043https://forum.cloudron.io/post/104043Sat, 22 Mar 2025 05:52:03 GMT<![CDATA[Reply to 2FA on Roundcube on Fri, 21 Mar 2025 23:22:02 GMT]]>@bazinga said in 2FA on Roundcube:

Once I cloned the repo directly into RoundCube filesystem

Sounds to me like that is perhaps a much better method than what is currently described over at https://docs.cloudron.io/apps/roundcube/#plugins !

]]>https://forum.cloudron.io/post/104031https://forum.cloudron.io/post/104031Fri, 21 Mar 2025 23:22:02 GMT<![CDATA[Reply to 2FA on Roundcube on Fri, 21 Mar 2025 03:36:33 GMT]]>Wasn't aware git was available in the terminal for each application. Once I cloned the repo directly into RoundCube filesystem and then followed the instructions, everything was easy and simple.

]]>https://forum.cloudron.io/post/103909https://forum.cloudron.io/post/103909Fri, 21 Mar 2025 03:36:33 GMT