Cloudron Forum

OK, I finally worked on this AGAIN and remembered how messed up this is conceptually.

username: groupname@domain
password: (any one of the passwords of the people that have access)

This is also makes Freescout work for me https://forum.cloudron.io/topic/12976/connection-could-not-be-established-with-host-mail-domain-com-connection-timed-out-110/43

A single "username" having multiple passwords is what messes me up every time.

@jdaviescoates it does not. Is +apple a setup thing in Cloudron? I've never heard of it.

So, I'm getting back to this, and logging into third party clients (notably Mail.app on MacOS), currently does not work.

email: groupname@otherdomain
user: boris@domain
password:

Mail app says "account already exists", presumably because I'm using the same user / pass.

I can put whatever I like under email address. Changing username to organizers@dwebyvr.org doesn't work.

(works fine in Snappy mail)

@girish

CONNECTED(00000003)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = E6
verify return:1
depth=0 CN = *.commonscomputer.com
verify return:1
---
Certificate chain
 0 s:CN = *.commonscomputer.com
   i:C = US, O = Let's Encrypt, CN = E6
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: ecdsa-with-SHA384
   v:NotBefore: Dec  9 07:12:07 2024 GMT; NotAfter: Mar  9 07:12:06 2025 GMT
 1 s:C = US, O = Let's Encrypt, CN = E6
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   a:PKEY: id-ecPublicKey, 384 (bit); sigalg: RSA-SHA256
   v:NotBefore: Mar 13 00:00:00 2024 GMT; NotAfter: Mar 12 23:59:59 2027 GMT
---
Server certificate

(several more screenfuls of certs and things)

read R BLOCK
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot (Ubuntu) ready.

@girish said in Connection could not be established with host mail.domain.com [Connection timed out #110]:

openssl s_client -connect <mailsever>:993 -crlf

Since I'm using the localhost settings that HD said, I used this (note host name and alt port):

openssl s_client -connect mail:9393 -crlf

Got this response:

CONNECTED(00000003)
40A74365227F0000:error:0A00010B:SSL routines:ssl3_get_record:wrong version number:../ssl/record/ssl3_record.c:354:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 293 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---

So what's the process here? I guess I can toggle the "enable signups" feature, get people to sign up, and then toggle it off again?

I am on 8.2.3 on a Hostinger VPS and also having trouble fetching.

This is an old FS that I had stopped and just now turned on again. Previous settings worked (group shared mailbox) -- in that it fetched the IMAP folders and said the connection was working, and the email arrives in snappymail. Tried humptydumpty settings, also "worked", still not fetching.

Sending works fine from FS, from Snappy, etc.

@shanelord01 thanks for bringing this up Shane. I would like to see it packaged, it will probably need to start as a custom app.

I installed one myself taking over a full KVM-1 VPS at Hostinger ($4/month).

I'm an AT Protocol expert and maintain a tech talks Ghost blog at https://atprotocol.dev (hosted on my Cloudron server!).

There are some misunderstandings in this thread about architecture and frankly I'm not going to argue about decentralization. Running a PDS means user ownership of your data, which seems very on mission for Cloudron.

It also handles auth, acting as your OAuth server wherever you log into with your account. There are multiple non-Bluesky apps with different data types (called Lexicons). A few of my favourites:

• Smoke Signal - events & RSVP https://smokesignal.events
• White Wind - markdown blogs https://whtwnd.com
• Frontpage - link ranking & discussion https://frontpage.fyi
• Recipe Exchange - recipe storage https://recipe.exchange

When you log into other AT Prototocol powered apps, the data is written to your own PDS. Here's my (Bluesky hosted) account with all the data types: https://atproto-browser.vercel.app/at/bmann.ca

It is also extremely low resource usage. Runs on NodeJS and SQL lite and some web socket connections.

I haven't gotten far in learning Cloudron packaging myself yet, but I'll update this thread if I get something guying.

CPU is back down to 5% for the last day with just a couple of Ghost websites running. Restarting mail, mongodb and slowly turning on each of the apps. Crossing my fingers that this works.

Node 15-30%, dockerd 40-80%, mysql 6 - 8% (Two ghost apps which use mysql are the only ones I've succesfully restarted). Docker shows up periodically at 20% and then drops off again.

My reference to 8.1 was a hope for a 8.1.x that magically fixes things :

This is what my CPU usage shows from the Hetzner control panel:

My logs tell me that Cloudron updated to 8.1 on 11/15, so at this point I assume that's the culprit.

Any other ideas?

I used docker stop to turn off all the apps to get load down. Now load average: 1.59, 5.06, 3.37

That corrupt addon doesn't have any information in it on what to do, unless you mean "Now, restore each app that uses the addon in the Cloudron dashboard."

I used docker stop to stop the PG container, then went ahead and did that for mongo and mysql and mail which were all yellow.

All redis instances also yellow. OK, let's stop them, too.

All containers are off other than core services and three surfer instances. Those all work, although slow to load. Load dipped down to 0.65, yay!

Ok, now I turn back on Postgres, it launches succesfully. I forget that MySQL is what I need for my Ghost website, so I launch that. Both of them turn back on (pressed restart from red in the Services screen in web dashboard).

I then go to Repair > Restart App for the site I'm trying to get up. It launches!

So here's where box logs are at: box:apphealthmonitor app health: 4 running / 16 stopped / 11 unresponsive

We're still at oad average: 1.20, 1.30, 1.93. That's with just one app running, where before 8.1 everything was running fine. I haven't turned back on mail or mongodb or redis yet.

Any ideas here on what is causing this load? What is the recommended path? Is there an 8.1 update soon that might improve things?

@nebulon I haven’t had it successfully start. Just repeated FATAL lines as above.

I’ve restarted the VPS and it’s all under heavy load.

What’s next here? I’m stuck.

I increased memory to Postgres and MySQL and restarted the VPS. Graphite, mail, mongodb, mysql, and Postgres are all yellow / listed as starting.

Just looking at the "top" command, I've got massive load, 47.07 / 51.62 / 36.56 (this is down from twice that).

I don't have massive traffic coming into the box.

AFAICT this is from self-updating to v8.1 Cloudron updated to v8.1.0 11/15/2024 -- it's the only thing.

Is there a way to roll back Cloudron?

Looking at postgres logs, it has repeated FATAL: the database system is starting up, as I assume that apps that depend on it try to connect to it.

Hmmm... and now this?

CREATE EXTENSION
Nov 17 23:20:39 2024-11-18 07:20:39.460 UTC [1066] root@cloudronpgvectorupdate WARNING: pgvecto.rs is upgraded. Restart PostgreSQL to take effects.
Nov 17 23:20:56 DROP DATABASE
Nov 17 23:20:56 ==> Stopping postgresql
Nov 17 23:20:58 waiting for server to shut down

box.log has healthcheck and a couple of these for different containers:

box:scheduler BoxError: (HTTP code 409) unexpected - Conflict. The container name "/e16f7c6f-861f-427b-96a0-99dc7744e481-wpcron" is already in use by container "e710bd8be1653ba1231ea6c8cc5ea7406ce39cb7799c1e2b07a7cd766942a5c9". You have to remove (or rename) that container to be able to reuse that name.

Hmm. Feels like it would be useful to just have the cloudron CLI stuff run locally on the command line, too.

I've gotten into the dashboard and mail, postgres, mongo, and mysql are all listed as "starting". Well, this isn't good.

I'm looking for docs on the command to stop apps via the command line. I've got over 100% CPU load average and the server is unresponsive.

I have 2FA on my account so can't use the cloudron CLI (if there's a pointer on how to get this setup, would also be helpful after I fix this problem).

I'm ssh'd into the VPS on Hostinger. I'd like to stop a bunch of apps to see if the load goes down. I suspect it's a Valheim server I left running, so ideally how to figure out how to stop that one app, so that the web dashboard is responsive again and I can stop / clean up / delete other apps.

Any other tips on troubleshooting helpful.

@fbartels awesome, thank you! Will try this out.

Update: very close!

Using server https://localhost.dwebyvr.org
node:fs:1659
  const stats = binding.stat(
                        ^
Error: ENOENT: no such file or directory, stat '/website/*'
    at Object.statSync (node:fs:1659:25)
    at collectFiles (/usr/local/lib/node_modules/cloudron-surfer/cli/actions.js:60:19)
    at /usr/local/lib/node_modules/cloudron-surfer/cli/actions.js:225:40
    at Array.forEach (<anonymous>)
    at Command.put (/usr/local/lib/node_modules/cloudron-surfer/cli/actions.js:221:15)
    at Command.listener [as _actionHandler] (/usr/local/lib/node_modules/cloudron-surfer/node_modules/commander/lib/command.js:494:17)
    at /usr/local/lib/node_modules/cloudron-surfer/node_modules/commander/lib/command.js:1296:65
    at Command._chainOrCall (/usr/local/lib/node_modules/cloudron-surfer/node_modules/commander/lib/command.js:1193:12)
    at Command._parseCommand (/usr/local/lib/node_modules/cloudron-surfer/node_modules/commander/lib/command.js:1296:27)
    at /usr/local/lib/node_modules/cloudron-surfer/node_modules/commander/lib/command.js:1082:27 {
  errno: -2,
  code: 'ENOENT',
  syscall: 'stat',
  path: '/website/*'
}

So somehow have to give it context of the checked out repo I guess?

Here's the file in the repo I'm working with: https://github.com/DWebYVR/localhost_vancouver_webring/blob/main/.github/workflows/surfer.yml

I'd like to auto deploy some code from a Github repo, using Github actions after a commit happens, to copy files to Surfer.

Has anyone documented this?

Yeah this isn’t an integration. It’s using Minionto store files as the backend for an IPFS node.

There is an S3 plugin for IPFS (developers need to compile it in) that could be used with Minio, but as girish said, you’d still need to install IPFS separately.

@rosano woo hoo! Thanks for this not having to learn much of Docker tutorial!