Cloudron Forum

Could be useful, don't think we have already an app for this.
https://www.signserver.org/
https://hub.docker.com/r/primekey/signserver-ce

Hi all,

Just want to share a little tip on here. It looks like if you subscribe an external calendar to your NC instance (say you add your Gcalendar), then NC only refreshes it every week, which seems a little insane to me...or at least that was not enough more me.

So here is how to change the frequency on Cloudron NC instance. Simple open the NC terminal from Cloudron dashboard and enter:

sudo -u www-data php -f /app/code/occ config:app:set dav calendarSubscriptionRefreshRate --value "P1D"

Where P1D is the frequency period of 1 day. Period / time intervals are entered in the php format. P is for periods of day(D)/week(W)/month(M)/year(Y), if instead you want to enter a period in hour(H)/minute(M)/second(S) need to enter PT, e.g. PT5M will refresh every 5 minutes.

@timconsidine said in Why not make Cloudron fully open source again?:

Being fully open source is a red-herring IMHO.

I love Cloudron, I promote it and recommend it because as you say it is the most accomplished platform in that field, plus I love the community and have massive respect for the two main developers, for their skills and the great software they make but also because of their friendly attitude, their care for customer support and the way they engage with users. Plus while Cloudron is not Free Software the code source is out there for any to inspect so that's great in terms of users knowing what the software actually does and that's good enough for me.

However, the point of Free Software is not only about how things are now but also about future proofing. Things might change in the devs' lives, they might need to move on, they might need a lump of cash cause something terrible happen and sell the company, or whatever else. And if the new devs have a different ethics what do we do? Look for another software and all the time and energy spent on Cloudron is kinda wasted and then not as many people benefit from this amazing platform? And to be honest the current situation makes it hard to recommend it and promote in some context because not everyone is just interested in the best software or value for money but also care about software license but ethical and practical reasons.

I don't have a perfect solution as I understand and respect Girish and Nebulon's current position in that they don't want someone to just fork everything and release it for free.

Maybe something could be added in the license that says the code must be made publicly available, and that if the license changes to a more restrictive one (one that removes the public release of the code), then the current license reverts to a Free Software license e.g. AGLP 3.0 or its successor. This would basically guarantee Freedom 0 and 1 and would implement some kind of (twisted) copyleft. And that would be enough to make me happy

But I don't know if that is possible at all?? I'm a legal geek but not on software license...yet Anyone know?

I'm sure something similar has been asked already but I couldn't find it on the forum.

Would it be possible to add to following features of User & Groups in future version of Cloudron:

• subscribe users to a specific domain (say with another drop down option for each users: default being "all" but with the possibility to select domains individually - as it is down for selecting group membership). Those users would then only be allowed to login on apps which are installed under that/those particular domain(s). Effectively this is no different that manually creating a group for each domain and then manually setting the correct access permission when installing apps, except that it would automate that process by creating those groups in the background for each domain and setting the correct rights automatically. Also it would be helpful for implementing the "3. per domain user management" aspect of the "domain admin" feature below

• create a "domain admin" role to give some members admin rights but only on certain domains so that they can (and only can): 1. access all apps and email settings on a given domain(s); 2. an managed all of apps on that/those domain(s) 3. can see all users subscribed to that/those domain(s) and can invite new users to that/those domain(s). So as role we'd have: Owner, Admin (would automatically be administrates all domains), Domain Admin (which when selected would open the drop down menu to select domains without the "All" option), Users (which when selected would open the drop down menu to select domains, with default choice on the "All" option).

It feels these two features would greatly enhance cloudron management for cases where you don't necessarily want to have admins able to administrate all domains (either for security reasons and for reducing admin time) but still want someone able to configure email accounts / lists, manage apps and invite people.

Here is just some concepts and some ideas on how it could work on the UI side. Hope this proves useful.

Hello,

Is it possible to integrate mailman to cloudron to be able to manage email lists?

It would be a great feature to have.

I think the current roll out strategy (auto-update alphabetical with the possibility to manually update) is very flexible on both Cloudron end and user end and so makes perfect sense. However it seems like some people running prod servers may be worried about bugs introduced in new major or minor releases. And it is true that at least the first patch release iron out the biggest annoyance introduced in new major/minor releases.

Personally as a maintainer of several instances, I would like to still have auto-update enabled (so I don't have to remember to do it), but for the most sensitive instances be able to wait until some of the bugs have been found by early tester and iron out by Cloudron Super Hero Devs

So, as well as what @d19dotca proposed, would it be possible to add a platform update option to auto-update platform only after the first patch release (so basically auto-update except for version x.y.0)? (Like Cloudron does with Nextcloud where major release updates are pushed only after the first patch release)

Hell my brain fused reading Yeku's posts, @girish @nebulon sorry you had to deal with that, FWIW I'd like to say that it feels to me you have definitely built a strong community of happy users around your software and it felt we're all working here as part of a big team.

@jdaviescoates Yes I still use mainly Collabora with Nextcloud and I have noticed tremendous improvements, especially since NC and Collabora have worked together to improve the integration.
However, I wouldn't say it is still quite like Google doc, or quite as fast as OnlyOffice. I tired OnlyOffice when I installed CryptPad and something about it feels more responsive than Collabora due to client rendering. It is basically just like editing on a desktop and Collabora is not quite there...but pretty close. Also we can feel that both Gdocs and OnlyOffice were designed as a collaborative editing tool whereas Collabora somewhat inherits the LO single user approach and tries to adapt it for collaboration and the result still does not feel quite as sleek....but here again it is getting much better than it used to be.
I can say that Collabora does not suffer from issues from the past, does not feel laggy and is perfectly fast enough to use while not feeling it's slow or weird. Also I do think it provides the most complete online office suit in terms of functionalities, and the best if you using open document formats.

Right so we have a bunch of similar topics referencing the same problem.

• https://forum.cloudron.io/topic/13162/unable-to-send-emails-to-gmail
• https://forum.cloudron.io/topic/13145/problems-with-sending-mail
• https://forum.cloudron.io/topic/13122/email-sending-broken-after-updating-to-8-2-x-due-to-ipv6-issues
• https://forum.cloudron.io/topic/13072/gmail-ipv6-anyone-else-with-this-experience

Should they all be merged and/or marked as solved?

The solution is provided by @girish (here) and @jdaviescoates (here) which I'll compile and summarise here again:

1. Activate IPv6 on Cloudron via going to Network > IPv6 > Configure > Public IP
2. Check your IPv6 address either via reading the IPv6 address detected by Cloudron when doing 1. or via running curl https://ipv6.api.cloudron.io/api/v1/helper/public_ip on your server (via ssh).
3. Set an IPv6 PTR record on your VPS/server provider (not your domain provider) for the above IPv6 address. The next Cloudron release will implement a check on IPv6 PTR record like it currently does for IPv4.
4. If using Wildcard DNS then create a * AAAA record for the above IPv6 address.
5. If things still don't work, you can go to Cloudron -> Domains -> hit Sync DNS

If your VPS provider does not allow you to set IPv6 PTR, then disable IPv6 that way:

1. disable IPv6 in Cloudron (Network -> IPv6 -> Disable)
2. on your server via ssh run sysctl -w net.ipv6.conf.ens18.disable_ipv6=1 (replacing ens18 for your specific network interface, in my case eth0)
3. make it persistent by adding net.ipv6.conf.ens18.disable_ipv6=1 to /etc/sysctl.conf (replacing ens18 for your specific network interface, in my case eth0)

Update: I personally still faced issues with Gmail using IPv6 so I ended up disabling it persistently.

• Summary: a meeting schedule app with modern / mobile friendly ui, calendar integration and super easy to fill in polls (when2meet style).

• Main Page: https://schej.it/
• Git: https://github.com/schej-it/schej.it
• Licence: GPL-3.0
• Docker: Not yet but hopefully coming soon: https://github.com/schej-it/schej.it/issues/118
• Demo: https://schej.it/

• Notes: it's got a very very slick interface / modern UI and utilise the same way to fill in availabilities as wehn2meet which I think has the best and easiest workflow. I recently tried to do a poll with Rallly with many dates and slots and it was a real nightmare to fill in. Additionally it has a calendar integration for auto-fill of availabilities, which is cool, though I personally don't care much about that feature yet (but I will once it supports Nextcloud). I know we already have Rallly and Cal on Cloudron but this one is MUCH better than the former, and serve a different purpose than the latter....so I reckon it's got its space in our much loved Cloudron universe

• Alternative to: When2Meet, Rallly.co Doodle and the like

Thank you, works perfectly!! You guys are super heros. And thank to @vladimir-d for the fix on that particular issue! (though I couldn't see it in the release notes of the package)

One issue I had is that the instance was looking all broken after the package update, I had to delete website cookies and data for it to work (might have to do with all the CSS changes in the release).

@girish Yes you are right that the post started with different domains but this is because I had in mind the case of an organisation that uses separate domains for different activities, with different people being in charge of those different activities. While you are right that Cloudron does a fantastic job as isolating access to apps with the Group feature, as soon as if you give Admin right to someone, then they get full access to everything irrespectively of group / user access rules (which is of course kinda of the point of an admin!).
The issue is that in the case I mentioned, it would still be useful to give some people the ability to at least managed emails, users and apps for their particular domain / area of the organisation.
While this may not be a "common" case, I reckon it is not super rare either.

That said, the thread though as kinda of evolved into looking at ways to fine tune the rights of the Admin role rights rather than a split per domain as it started original. Lots of ideas in there. Maybe another intermediate Admin role could be step in that direction to delegate some rights (like email management) to people which would be useful in large organisations (see my second post) without granting full admin rights ?

@nebulon Apologies, I meant that on mouse hover an app, there is now a grey square button (with white gear) always visible, which then turns white (with blue gear) when actually hovering over it. Before it used to be that you see only the gear (without a square) when hovering over an app and you'd see the square when hovering over the gear.

Haha I've realised this is only a dark theme issue. I've just tried in another browser with a light theme and the issue is not here. So yes, probably a slight regression on the dark theme.
Cloudron 7
Cloudron 6

My 2 cents: Zulip has a unique approach to organising conversation thread which I find the best, is pretty well designed and easy to get used to for non-techy people. As such it would be a useful app to have and not just a duplicate of others.

Is there a plan for more backup backends like restic / borg for 7.3?

I recall it being listed for 7.2 at some point but looks like it got dropped off the list due to the need for a speedy release.

@girish Never listen to those grumpy souls who complain about your choice of app packaging...we all (most I'm sure) admire and are grateful for your work!

On the topic: this app looks very cool indeed

@nebulon Hello, just updated to 7.2.2 today and on dark theme the new contrast on app hoover looks a bit off I think. Actually it feel like something in between 7.1 and 7.2 would be good, i.e: lighter than in 7.1 so it stands out more but darker than in 7.2 so it blends more with the background.
Also I think the square around the gear icon should remain with the same background as the rest of the app if not hoovered over (as it was the case in 7.1) since the gear itself stands out enough with it's white colour.

@Benoit said in How to modify the 'config.js' file?:

Hi @girish et @nebulon thanks for the mirotalk app ! I tried theses features https://docs.mirotalk.com/mirotalk-p2p/host-protection/#when-host_protected-is-enabled but it seems it doesn't work : i can authenticate my adminb account and create a room but invited participants can't join without authentication, the HOST_USER_AUTH=false parameter doesn't change this. is it normal ? Thanks again !

I have the same problem. Both with the p2p and the SFU version.

I have host protected: true and user_auth: false. To create a room I login with a user as a host and then participants cannot access the room, they are also prompted to login.

I created a separate thread for this issue.

Hello, it looks like Noco supports authentication with OIDC (Auth0). Does that mean it's now possible to have a package that uses Cloudron users?

@MiroTalk said in participants have to authanticate even with user_auth: false:

@avatar1024 I will verify this as it is not the expected behavior.

Thank you for looking into it! Indeed according to the logic described in the doc (which I had read before trying) this is not what I expect should happen.

@MiroTalk said in participants have to authenticate even with user_auth: false:

I will verify this as it is not the expected behavior.

Have you been able to reproduce this? Or any clues what the problem might be?

Many thanks