Cloudron Forum

@avatar1024 Look into who funded it, who governed it and steered it in the first couple of years of its development (that is - if you can even find that information these days - seems like someone did a good job of scrubbing). After that entity got involved, all of a sudden, Signal was pushed by everything out there, including your microwave, as a "privacy messaging app".

I'm very privacy focused (some may say paranoid) because I, unlike many, don't take the rights for granted and I've looked into Signal a long while ago (short after it started appearing everywhere) - found multiple very privacy oriented and trustworthy sources disclosing a lot of early details on Signal and its connection to specific entities. Never looked into it after that - might as well use WhatsApp and Telegram (which is a killer app) knowing well that they aren't privacy oriented.

@nebulon That's a fair statement. With that said I do prefer desktop apps for Whatspp, Telegram, Element.

@necrevistonnezr Thank you for re-phrasing and re-stating. Yes, you've covered pretty much everything I've proposed.

@micmc Thank you. I wonder if I could use something like Cryptomatic with WebDAV in order to E2EE some specific files and access them on mobile and desktop. Will need to look into that.

@humpty Thank you, will take a look. I see Joplin supports E2EE, which is huge. I hope it isn't too bloated and complex - not looking for that complexity at all.

@timconsidine Thank you, will take a look. My problem is that I have few family members who are very non-technical and spread around the globe, so getting their devices configured accordingly is a very, very challenging task.

@girish Not sure I follow, tbh. My idea is that in addition to the VPN, which has some uses, being able to instead white list IPs / domains on a per-app basis would be very advantageous as well. It makes more sense (to me) to VPN into a location that has been whitelisted to access selected apps, than to VPN into the Cloudron server. Especially if we're talking about multiple users and multiple devices.

Yes, Matrix seems to be a decent system, but who knows how great its security really is. After all lots of people seem to think Signal is a privacy focused chat app.

Understand your position regarding the audience and functionality. Makes sense, I guess. Will this be only chat or video calls as well?

As for the desktop app. Well, if you can consider cross DE app - it'd be a much better time investment (in my mind, obviously) as you wouldn't need to re-write for other platforms.

E2EE for chats is a critical feature. Times are changing fast and being in control of your communication is a must. VPS of any sort is never a trusted entity. However as soon as you introduce E2EE it becomes a much, much bigger effort.

Without mobile apps this solution will be way more niche. Desktop apps (maybe via Electron) are very useful too. Why the choice of Gnome only with gnome specific libraries? I run KDE, so that app won't be great for me. Why not Qt or other variants?

@jdaviescoates That's exactly what prompted me to look what happened and AI Overview then told me Cloudron team is behind cubby.com and cubby.org was migrated to that.

I would really want a trash feature - just now had to restore a file in Nextcloud that a family member deleted without realizing.

Opt-in file versioning (on a per file or per folder basis) would be very good as well.

Should we be worried / taking steps?

https://www.sysdig.com/blog/node2shell-cve-2026-111497-detecting-the-node-js-brotli-rce

@nebulon Huh, good to know - there was some resource that said you guys are behind the cubby.com. Probably a mistake.

So, with cubby - am I able to change a file on my desktop and get it pushed into the cloud where my Android can access the updated file?

@humpty With "notes" I was referring to a note taking app - I don't care for complex apps, I just want a way to take simple notes and have them easily available on mobile + desktop. I've been using Notes app + Nextcloud. But thanks, I'll look at those other apps you've mentioned.

How exactly would I sync files via DavX5? I didn't think it supports that? It supports getting files, but not sync? And for me I really need to update a file on my desktop and see it on my phone. Also sharing with the family (other Cloudron users) is critical.

@nebulon I've looked at cubby, but it seems you guys have taken it in a completely different direction - eg. it's now some form of an AI assistant? cubby.org is no more, cubby.com was mentioned by Google as a new home.

How would I sync files with my Android devices and Linux/windows desktops from cubby that is available in the app store?

Hi everyone,

I really need few things:

• Contacts
• Calendar
• Notes
• Files
• Access to all of the above from Android mobile devices, Linux and Windows desktops.
• Ability to share files and calendars between Cloudron users.

I've been using Nextcloud for a long while now. Big reason for me was support for the features plus very active development, which promises quick issue resolution (obviously a double edged sword).

I've been thinking about a replacement every now and then, but never could find apps (well, Cloudron apps) that would satisfy these requirements - contacts and calendar is easy - seems like these are a dime a dozen; security focused file sharing with mobile/desktop access is not so much.

Security is a very high priority, especially for the files part of it. Nextcloud doesn't support end-to-end encryption of files, which was a bit of a concern. With recent PHP issues this becomes a worry.

Would appreciate any advice.

@Lanhild Right, I guess I can see that. Thanks!

@Lanhild said:

Anyhow, updating stopped apps isn't technically feasible.

Why exactly is that? I didn't look into Cloudron code (is it even available?) but isn't the update essentially a docker pull in the end?

@girish If someone wants very complex setup - sure, they can opt for the VPN solution (even though I don't see that as a simple setup either). But whitelisting home / office IPs is very easy. Dynamic IPs are covered by dynamic dns.

VPN protection for bunch of users means every device needs a VPN (unless you go through the pain I've gone through), the server has to deal with many VPN tunnels, which isn't free either.

@nebulon TBH I never even used the list view and looked at it only couple of days ago - it's not very visually appealing, frankly, but functional.

What I referred to is tile layout - tiles are large and having a small overlay VPN icon would be very useful (similar to how you show the gear icon on hover to open the settings on each tile).