Cloudron Forum

Hello all.

I am in the process of packaging up many apps for Cloudron (several of which are from this forum category).

Working on them in the open here: https://git.knownelement.com/KNEL/KNELProductionContainers/src/branch/master/Cloudron

It's a long list across many different areas of focus and levels of complexity.

Who wants to help me?

• I am bringing:
• git hosting (self hosted gitea)
• container hosting (self hosted gitea again) (or perhaps the Cloudron docker registry)?
• project management resources (self hosted Redmine)
• I have a Claude Pro subscription (and Claude/Deepseek API budget).
• I also have some beefy build boxes I can host gitea runners for CI.

Full disclosure:

• I am a founder/CTO of a for profit business.
• This work is being done in support of that business.
• All the work I'm doing is AGPLv3 and meant for the benefit of all.

Hello all.

I’ve used Claude to do first cut of packing apps I want in cloudron.

Here’s the repo:

https://git.knownelement.com/KNEL/KNELProductionContainers/src/branch/master/Techops

Here’s the prompt I use :

https://git.knownelement.com/KNEL/KNELProductionContainers/src/branch/master/Techops/CloudronPackagePrompt.md

I’ll do a bit of restructuring into a Cloudron and non cloudron directory. Check the history for the stuff I’ve been doing :

https://git.knownelement.com/KNEL/KNELProductionContainers/commits/branch/master

My Cloudron details:

Hosting Provider: Netcup
Hosting Product: VPS 8000 G11 iv 12M MNZ (16 core, 64gb ram, 2048 SSD)
Total Apps: 158
Backup provider: Backblaze B2

I and my company are all in on Cloudron.

I use it for my business and for my family office. In the process of packaging up a number of applications for Cloudron that a fully self-hosted business would need.

@girish said in What's coming in Cloudron 9:

Show backup/restore progress

Can you expand on this a bit? The current backup UI shows the progress.

Granular Backup schedule / Multiple Backup Desinations

As in per application? That would be awesome. For example, I would want say Nextcloud/Gitea/ Redmine backed up multiple places and daily, but MiroTalk/Searxng monthly and to one place. If it could be done off of tags, that would be wonderful. I would tag apps as stateful, stateless myself (and perhaps some kind of priority tag). If one could have some kind of Recovery Time Objective/Recovery Point Objective , that would be very "enterprise". Honestly just per app / tag granular backup schedule/destination would let one achieve that.

Hello.

I was doing some research and I see Dolibarr supports OIDC.

https://wiki.dolibarr.org/index.php?title=Authentication,_SSO_and_SSL

Any possibility of switching to that from LDAP?

Dolibarr is my only Cloudron app using LDAP and not 2fa protected.

Oh yes. I’m sure I’ll need to make some tweaks. So far it’s been pretty good results across languages. It searches as it works and pulls the results into how it builds the output.

I’ve yet to do any testing. I hack in the open from the very get go

(I realize this is an old post, but I can't let such things go un-addressed).

@LoudLemur said in Configuring Apache Superset to install and show demo data on Cloudron:

Will do! I love Cloudron and it is a pleasure to recommend it, though this is tinged by the licence.

Really?

You won't pay $1.00 a day for Cloudron? Why not?

How can you not see the cost/value/return on investment of $1.00 a day for all the amazing work/time savings etc that Cloudron provides?

Why would you attack such a successful business model? They could easily charge $50.00 a month as a base level and it would be worth it.

To circle back on this...

I deployed Keycloak from the app store. I created a new (local) admin user and deleted the temp one (as per the instructions out of the box).

I then used the "Login with Cloudron" button and was able to login to Keycloak (as the non admin user from Cloudron directory) and my Cloudron user shows up in Keycloak .

I would be very interested in developing/documenting a tight integration/best practices between Cloudron/Keycloak as a way to greatly extend/enhance Cloudron user management. Setting up various tenants, self service enabling signups in those tenants etc. For example, building user on-boarding / approval workflows (where you bring on a new team member and they need to be provisioned into groups). Right now, only Cloudron Superadmins have the ability to manage groups, and that isn't a privilege I want to hand out

I originally planned to have Claude build me a web app and utilize the Cloudron API to build that functionality (and was going to AGPLv3 it). However, perhaps, with Keycloak we don't have to fully re-invent the wheel?

IAM is a VERY important requirement/feature to compete with AWS/Azure. It's the next thing my board wants to see as we move through go-live with Cloudron across our various projects/entities.

Who would be the key people I would need to work with to get this built out/tested/integrated/streamlined?

I realize that Cloudron (as I understand it) isn't currently positioned/targeting "enterprise" or those who may use AWS/Azure. I am happy todo the light/medium/(some) heavy lift work to help get it to where I need it to be. I am a founder/CTO of a company that is in the ramp up/growth phase. I steadfastly refuse to use the "big cloud" and Cloudron has been amazing at eliminating about 90% of system admin duties in a reliable way.

The Cloudron Forum link on:

https://docs.cloudron.io/apps/dolibarr/

is broken.

It takes you to the Moodle forum.

Make these two things match:

Groups doesn't have a search function, where users does.

I briefly searched the forum and didn't find anything on this topic. Feel free to point me to existing topics.

1. Is off-box/remote logging possible? I presume I can drop to the root shell and tweak the (r)syslog configuration to send things to a remote target. I would prefer a UI/API way todo this task (to ensure it doesn't break anything).

2. Same for other logging settings (retention/rotation).

3. Integration of logwatch

4. Is the /etc/aliases (root) alias setup to send to whatever Cloudron (SuperAdmin)(s) e-mail addresses?

5. What about docker logs? (Targeting/retention)?

Cloudron is wonderful and covers many of my needs. However I also have a Coolify server and it's running things like Graylog/Librenms and other infrastructure bits that Cloudron doesn't provide. For those of us with a bit bigger "enterprise" type setup/requirements, Cloudron could use some lightweight integration points/support.

@nebulon Going to that URL in my cloudron, I just get re-directed back to /apps. I am attempting to deploy OpenStreamingPlatform on another server and want to connect it to Cloudron for authentication using oauth2. That's my use case.

I will wait for @vladimir.d to reply Otherwise I'll attempt to set it up as a Cloudron OIDC client in next couple days.

@girish

Would it be possible to add search (filters) for groups (like for users?).

How is the cloudron user database backed up?

What about email accounts ?

What about the application access settings / groups etc?

How can I perform a complete backup of my cloudron instance ?

Yes , the application data is safe. That’s very important of course. User files and other data.

However user emails don’t appear to be backed up and neither does the user database.

Looks like it’s OIDC ?

@joseph Right. But Cloudron does check for e-mail setup. It seems what's being asked for (and I agree) is ipv6 related mail health check as part of the periodic e-mail health check Cloudron does already.

How can I verify that? Can you prove that? What file names / patterns should I be looking for?

I see the latest Cloudron Dolibarr update supports OIDC! Thanks! This is awesome. It was my last app to not support OIDC login.

I would also like to see this added to Cloudron officially. With settings for nut server.