Cloudron Forum

I tested Documize Community (at the time I think that was all Documize did) several years ago for a project to replace Confluence at our company. I was really impressed. The labels, spaces, and categories model for managing data is a powerful way to make knowledge management more straightforward, but it was almost alone in the market in having the power to use that model to manage access to data for users across an organization. We had migrated cloud solutions at least three times because the access controls were always so limited and Documize access controls did exactly what we'd been trying to do.

@girish and @nebulon There's another resource like passwordless.dev that is maintained by members of the W3C and FIDO Alliance team that developed passkeys: https://passkeys.dev/ Even if it's tricky to implement passkey support for applications we host in Cloudron, being able to log in to the admin panel with a passkey would be massive as this provides the security of PKI encryption without the overhead nightmare of running a certificate authority.

It includes libraries and guides for thinking through the implementation. Mastodon handles are on the landing page, too, if you have questions. They maintain the site on their own to help orgs looking to adopt passkeys and one of the maintainers is the author of the SimpleWebAuthn (https://github.com/MasterKale/SimpleWebAuthn)

Bitwarden supports passkeys with their iOS mobile app now and in their beta Android app, and 1Password supports them in both mobile apps, so the ecosystem is at a point where there's full cross-platform support (except Linux dammit, but browser-based passkeys will work on Linux) and it's not just iOS or Chrome Password Manager.

@LoudLemur You don't have to associate your phone number. I use a Yubikey with my Github account, and for TOTP it's just an AuthN app.

You should look up "decentralized identity", "self-sovereign identity", and "verifiable claims" - both are tied in with digital ID and their proponents are explicitly working on them to improve privacy and reduce dependency to have an online identity requiring staying in the good graces of companies like Google or Facebook. Most of the interactions you mention are already ones that require a physical credential, including 'health' certification - I have my vaccine records since birth in a booklet which we would present when applying for visas to certain countries - so I'm not sure why a digital version would inherently be more problematic. A digital identity means that you can allow sharing only the information necessary for a transaction and nothing more (i.e, your digital ID shows your picture and a box that says "legal drinking age" to the bouncer or bartender - not your address, birthday, name, etc.)

@nebulon Okay, thanks. Importing the backup wasn't completing successfully since I'd had to use the Clean Backups function to free up space.

I ended up just restoring the last backup image of the whole Droplet from DigitalOcean. That put things back as they were the night before the disk filled up so I only lost items from a single day.

I was relieved to find that once I'd gotten things back to a green status I was able to complete the setup process for an external backup in an S3 object storage account. I tried setting up Backblaze B2, DigitalOcean Spaces, and Wasabi on Sunday and Monday, but they always errored out with a complaint about the bucket not being available to the region the DO Droplet is located in. Monday I was able to get my DigitalOcean volume mount set as external backup, but obviously don't want to use block storage for backups. Once I'd restored the droplet and resolved the space issue, though, I was able to add B2 as external backup storage with no issues.

Thanks for the help!

Hopefully it also enables mobile app support for passkeys.

@adisonverlice2 Have you checked out Keycloak? I've seen someone here say that they've successfully packaged it for Cloudron. It's open source and can serve as an IDP. It also supports SAML (as well as OAuth 2.0 and OIDC). It may have a bit of a learning curve to set up, but it's well-regarded, has an active community, and is actively supported. Also looks like it supports Duo.

@robi Thanks! I tried the community tip link you sent and got the 200.1 response that was "OK". But the problem had apparently disappeared in the meantime, as when I changed to my other browser to check the connection again the login page for my domain had loaded. I'm gonna change the domain/cert information in the my.*.net console for Cloudflare, make sure the domain remains reachable, and try turning the Cloudflare proxies back on.

Hi -

I transfered my .net domain yesterday from my old registrar to Cloudflare. I now get an error that the site is unreachable with "ERR_TOO_MANY_REDIRECTS". I have set the site in Cloudflare's "Development Mode" and have also set the service to DNS only thinking that maybe the Cloudflare proxies were the issue.

I saw the settings in this post, but I don't see a way to get to that from the cloudron.io account management screen, and if it's part of my.*.net I can't reach it to make changes: https://forum.cloudron.io/post/43053

I'm guessing others have had this issue and am hoping someone can direct me to the correct button in Cloudflare to toggle and fix it.