Cloudron Forum

@girish and @nebulon There's another resource like passwordless.dev that is maintained by members of the W3C and FIDO Alliance team that developed passkeys: https://passkeys.dev/ Even if it's tricky to implement passkey support for applications we host in Cloudron, being able to log in to the admin panel with a passkey would be massive as this provides the security of PKI encryption without the overhead nightmare of running a certificate authority.

It includes libraries and guides for thinking through the implementation. Mastodon handles are on the landing page, too, if you have questions. They maintain the site on their own to help orgs looking to adopt passkeys and one of the maintainers is the author of the SimpleWebAuthn (https://github.com/MasterKale/SimpleWebAuthn)

Bitwarden supports passkeys with their iOS mobile app now and in their beta Android app, and 1Password supports them in both mobile apps, so the ecosystem is at a point where there's full cross-platform support (except Linux dammit, but browser-based passkeys will work on Linux) and it's not just iOS or Chrome Password Manager.

@adisonverlice2 It's not in the official app store, but it was packaged for Cloudron by a user here: https://github.com/njsubedi/cloudron-keycloak

It sounds like you could also use a private repository for that image if you want to have a more managed pipeline for updates.

This was the thread where it was discussed in depth: https://forum.cloudron.io/topic/6310/keycloak-cloudron/92

@adisonverlice2 Have you checked out Keycloak? I've seen someone here say that they've successfully packaged it for Cloudron. It's open source and can serve as an IDP. It also supports SAML (as well as OAuth 2.0 and OIDC). It may have a bit of a learning curve to set up, but it's well-regarded, has an active community, and is actively supported. Also looks like it supports Duo.

Hopefully it also enables mobile app support for passkeys.

@LoudLemur You don't have to associate your phone number. I use a Yubikey with my Github account, and for TOTP it's just an AuthN app.

You should look up "decentralized identity", "self-sovereign identity", and "verifiable claims" - both are tied in with digital ID and their proponents are explicitly working on them to improve privacy and reduce dependency to have an online identity requiring staying in the good graces of companies like Google or Facebook. Most of the interactions you mention are already ones that require a physical credential, including 'health' certification - I have my vaccine records since birth in a booklet which we would present when applying for visas to certain countries - so I'm not sure why a digital version would inherently be more problematic. A digital identity means that you can allow sharing only the information necessary for a transaction and nothing more (i.e, your digital ID shows your picture and a box that says "legal drinking age" to the bouncer or bartender - not your address, birthday, name, etc.)

@robi Thanks! I tried the community tip link you sent and got the 200.1 response that was "OK". But the problem had apparently disappeared in the meantime, as when I changed to my other browser to check the connection again the login page for my domain had loaded. I'm gonna change the domain/cert information in the my.*.net console for Cloudflare, make sure the domain remains reachable, and try turning the Cloudflare proxies back on.

Hi -

I transfered my .net domain yesterday from my old registrar to Cloudflare. I now get an error that the site is unreachable with "ERR_TOO_MANY_REDIRECTS". I have set the site in Cloudflare's "Development Mode" and have also set the service to DNS only thinking that maybe the Cloudflare proxies were the issue.

I saw the settings in this post, but I don't see a way to get to that from the cloudron.io account management screen, and if it's part of my.*.net I can't reach it to make changes: https://forum.cloudron.io/post/43053

I'm guessing others have had this issue and am hoping someone can direct me to the correct button in Cloudflare to toggle and fix it.

@nebulon Okay, thanks. Importing the backup wasn't completing successfully since I'd had to use the Clean Backups function to free up space.

I ended up just restoring the last backup image of the whole Droplet from DigitalOcean. That put things back as they were the night before the disk filled up so I only lost items from a single day.

I was relieved to find that once I'd gotten things back to a green status I was able to complete the setup process for an external backup in an S3 object storage account. I tried setting up Backblaze B2, DigitalOcean Spaces, and Wasabi on Sunday and Monday, but they always errored out with a complaint about the bucket not being available to the region the DO Droplet is located in. Monday I was able to get my DigitalOcean volume mount set as external backup, but obviously don't want to use block storage for backups. Once I'd restored the droplet and resolved the space issue, though, I was able to add B2 as external backup storage with no issues.

Thanks for the help!

@nebulon The files I deleted were only from Jirafeau, but Shaarli only shows the backup from last night (after the errors began) since I had to move the backup location to prevent the disk from filling up again. I believe previous backups were still in the vda1 partition - if I was able to copy them over to the current backup location would they show back up in the options for restoring the app? Are there any particular steps I'd need to take to do that?

Alternatively, if I were to reinstall the Shaarli application and copy the previous data folder into the installation, would that fix it or is the database error triggered by something in the data files?

My VPS backed up on 9/24, before the disk was full - If I just hit the "restore Droplet" option in the Digital Ocean console would that cause any issues for Cloudron?

@nebulon Thanks, the steps in the troubleshooting link you provided have gotten the unbound service running as green and active again, but Shaarli still launches to the error message I pasted above.

I'm also still seeing the "postgresqldump: status 500" error message when I go to the backup settings.

I had a full disk last night - I was able to access the dashboard but the apps were all nonresponsive or causing an error. I managed to get into the app that had the most data and delete some larger files, and ran the Cleanup Backups. (Until then I was unable to launch the server console from DigitalOcean, though.) Three apps have resumed operating normally, but I'm still getting errors or failures to run for the app I had to manually delete files (Jirafeau) as well as from one other app (Shaarli). All services except 'unbound' are running green.

(Backups were running on the system disk, but retention period was set to 2 days so they shouldn't have filled up the disk. I've moved the backup location to an attached volume in the meantime.)

When I go to the backups screen from Cloudron settings, I see an error:

Unexpected response code or HTTP error when piping http://x.x.x.x:3000/databases .... postgresqldump: status 500

QUESTION: I'm running Shaarli but while Cloudrun indicates the app is running the page, it shows the error below when it's launched which sounds from googling as if the database is possibly corrupted. I have downloaded the Shaarli data directory to my local machine (the datastore.php file is over a MB so it seems like it's intact), but there's not much guidance about how to fix this - if I just uninstall Shaarli entirely and reinstall the app, can I copy the data directory over the newly installed data directory to get the app back to where it was yesterday morning?

The Shaarli page loads as:

An unexpected error happened, and the error template could not be displayed.

unserialize() expects parameter 1 to be string, bool given
/app/code/application/bookmark/BookmarkIO.php90
#0 /app/code/application/bookmark/BookmarkIO.php(90): unserialize()
#1 /app/code/application/bookmark/BookmarkFileService.php(71): Shaarli\Bookmark\BookmarkIO->read()
#2 /app/code/application/container/ContainerBuilder.php(97): Shaarli\Bookmark\BookmarkFileService->__construct()
#3 /app/code/vendor/pimple/pimple/src/Pimple/Container.php(118): Shaarli\Container\ContainerBuilder->Shaarli\Container\{closure}()
#4 /app/code/vendor/slim/slim/Slim/Container.php(109): Pimple\Container->offsetGet()
#5 /app/code/vendor/slim/slim/Slim/Container.php(164): Slim\Container->get()
#6 /app/code/application/container/ContainerBuilder.php(110): Slim\Container->__get()
#7 /app/code/vendor/pimple/pimple/src/Pimple/Container.php(118): Shaarli\Container\ContainerBuilder->Shaarli\Container\{closure}()
#8 /app/code/vendor/slim/slim/Slim/Container.php(109): Pimple\Container->offsetGet()
#9 /app/code/vendor/slim/slim/Slim/Container.php(164): Slim\Container->get()
#10 /app/code/application/front/controller/visitor/ErrorController.php(20): Slim\Container->__get()
#11 [internal function]: Shaarli\Front\Controller\Visitor\ErrorController->__invoke()
#12 /app/code/vendor/slim/slim/Slim/App.php(728): call_user_func_array()
#13 /app/code/vendor/slim/slim/Slim/App.php(396): Slim\App->handlePhpError()
#14 /app/code/vendor/slim/slim/Slim/App.php(297): Slim\App->process()
#15 /app/code/index.php(176): Slim\App->run()
#16 {main}

Jirafeau is the other app not running, and it has a persistent error even after executing the retry-configure task. If I have to uninstall and reinstall the app that's not a lot of re-work but I'm concerned that it became unrecoverable:

Docker Error: Error stopping container:(HTTP code 500) server error - cannot stop container: XXXXX: tried to kill container, but did not receive an exit event 

I tested Documize Community (at the time I think that was all Documize did) several years ago for a project to replace Confluence at our company. I was really impressed. The labels, spaces, and categories model for managing data is a powerful way to make knowledge management more straightforward, but it was almost alone in the market in having the power to use that model to manage access to data for users across an organization. We had migrated cloud solutions at least three times because the access controls were always so limited and Documize access controls did exactly what we'd been trying to do.