Cloudron Forum

@james Yes it’s technically a feature request. I only threw it in here since it seemed like Girish was already making adjustments to the filtering in the mail event log viewer. If you’re okay forking it to a feature request, that’s totally fine.

@girish Oh that is interesting, I didn’t realize we could customize the DNS server. This is helpful. Thanks so much!

I wonder if this is perhaps related to the issue being troubleshot here: https://forum.cloudron.io/post/104263

Setting default_client_limit = 1500 fixes the warning . I have put this for next release.

@d19dotca said in Shouldn't we get an alert when a service container fails / is unhealthy?: checking so that it ignores any entries of the current Docker networking ranges such as 172.18.xxx.xxx addresses For the moment, I have added validation to not accept such addresses . Ignoring this properly is more complicated (since we have to filter it at apply time) but atleast it won't let you save the blocklist easily .

@girish Yes, I no longer got the Gmail issues when I created my own system service to implement the iptables rule. So it seemed to do the trick. The IP tables rule to add is really just this: iptables -t nat -I POSTROUTING -s 172.18.0.0/16 -o enp3s0f0 -j SNAT --to-source {FLOATING_IP} Where FLOATING_IP is really just replaced with whatever the recognized IP address is that’s used in the DNS records for the MX record. I supposed it could be further improved to only be applicable to the mail container rather than all Docker traffic. And of course the interface would have to be dynamic too. I guess an alternative is for me to create additional MX records with the other IP addresses but then it’s manually done and prone to mistakes/issues. In my opinion, I think we really need an option to select the outbound IP interface using Cloudron for the mail component, in order to avoid the Gmail issues (and any other provider who will use FCrDNS for verifying or rejecting emails in the future). I recognize this may not be a common concern as most people probably only have the one IP address of each type and so the DNS records if setup automatically by Cloudron will use both the IPv4 and IPv6 address, but for those of us who use a floating/failover IP addresses that we want to be the one true IP address being used, this becomes an issue without that workaround in place.

@girish Thanks for renaming. It appears that SPAM mails are showing up even if not selected in the filter though.

That is indeed odd that the app responds with 413 and there is no potential cloudflare proxying or so in between, which could get in the way?

Another example here too (a much longer one): Dec 22 23:24:14 WARN [qtp24334184-588] 07:24:14,205 org.apache.tika.server.core.resource.TikaResource tika/: Text extraction failed (=?utf-8?B?Tm8gMjEgeGlhb3FpbmcgemhhbmcuZG9jeA==?=) Dec 22 23:24:14 org.apache.tika.exception.TikaException: TIKA-198: Illegal IOException from org.apache.tika.parser.pkg.PackageParser@6166fb02 Dec 22 23:24:14 at org.apache.tika.parser.CompositeParser.parse(CompositeParser.java:304) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.CompositeParser.parse(CompositeParser.java:298) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.AutoDetectParser.parse(AutoDetectParser.java:204) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.server.core.resource.TikaResource.parse(TikaResource.java:363) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.server.core.resource.TikaResource.lambda$produceText$1(TikaResource.java:509) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.jaxrs.provider.BinaryDataProvider.writeTo(BinaryDataProvider.java:176) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.jaxrs.utils.JAXRSUtils.writeMessageBody(JAXRSUtils.java:1651) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.serializeMessage(JAXRSOutInterceptor.java:249) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.processResponse(JAXRSOutInterceptor.java:122) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleMessage(JAXRSOutInterceptor.java:84) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.interceptor.OutgoingChainInterceptor.handleMessage(OutgoingChainInterceptor.java:90) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:265) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.transport.http_jetty.JettyHTTPDestination.doService(JettyHTTPDestination.java:244) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.cxf.transport.http_jetty.JettyHTTPHandler.handle(JettyHTTPHandler.java:80) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:223) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1381) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:178) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1303) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:129) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:149) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:122) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.Server.handle(Server.java:563) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.HttpChannel$RequestDispatchable.dispatch(HttpChannel.java:1598) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:753) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:501) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:287) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:314) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:100) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:421) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:390) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:277) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:199) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:411) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:969) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1194) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1149) [tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at java.base/java.lang.Thread.run(Thread.java:840) [?:?] Dec 22 23:24:14 Caused by: org.apache.commons.io.TaggedIOException: invalid code lengths set Dec 22 23:24:14 at org.apache.commons.io.input.TaggedInputStream.handleIOException(TaggedInputStream.java:93) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:228) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.gagravarr.tika.OggDetector.detect(OggDetector.java:68) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.detect.CompositeDetector.detect(CompositeDetector.java:84) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.AutoDetectParser.parse(AutoDetectParser.java:179) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.DelegatingParser.parse(DelegatingParser.java:71) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.extractor.ParsingEmbeddedDocumentExtractor.parseEmbedded(ParsingEmbeddedDocumentExtractor.java:111) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parseEntry(PackageParser.java:481) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parseEntries(PackageParser.java:386) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser._parse(PackageParser.java:336) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parse(PackageParser.java:259) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.CompositeParser.parse(CompositeParser.java:298) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 ... 41 more Dec 22 23:24:14 Caused by: org.apache.commons.io.TaggedIOException: invalid code lengths set Dec 22 23:24:14 at org.apache.commons.io.input.TaggedInputStream.handleIOException(TaggedInputStream.java:93) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:228) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:224) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:224) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.gagravarr.tika.OggDetector.detect(OggDetector.java:68) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.detect.CompositeDetector.detect(CompositeDetector.java:84) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.AutoDetectParser.parse(AutoDetectParser.java:179) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.DelegatingParser.parse(DelegatingParser.java:71) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.extractor.ParsingEmbeddedDocumentExtractor.parseEmbedded(ParsingEmbeddedDocumentExtractor.java:111) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parseEntry(PackageParser.java:481) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parseEntries(PackageParser.java:386) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser._parse(PackageParser.java:336) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parse(PackageParser.java:259) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.CompositeParser.parse(CompositeParser.java:298) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 ... 41 more Dec 22 23:24:14 Caused by: java.util.zip.ZipException: invalid code lengths set Dec 22 23:24:14 at org.apache.commons.compress.archivers.zip.ZipArchiveInputStream.readFromInflater(ZipArchiveInputStream.java:1083) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.compress.archivers.zip.ZipArchiveInputStream.readDeflated(ZipArchiveInputStream.java:998) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.compress.archivers.zip.ZipArchiveInputStream.read(ZipArchiveInputStream.java:929) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at java.base/java.io.BufferedInputStream.fill(BufferedInputStream.java:244) ~[?:?] Dec 22 23:24:14 at java.base/java.io.BufferedInputStream.read(BufferedInputStream.java:263) ~[?:?] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:224) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:224) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:224) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.gagravarr.tika.OggDetector.detect(OggDetector.java:68) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.detect.CompositeDetector.detect(CompositeDetector.java:84) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.AutoDetectParser.parse(AutoDetectParser.java:179) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.DelegatingParser.parse(DelegatingParser.java:71) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.extractor.ParsingEmbeddedDocumentExtractor.parseEmbedded(ParsingEmbeddedDocumentExtractor.java:111) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parseEntry(PackageParser.java:481) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parseEntries(PackageParser.java:386) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser._parse(PackageParser.java:336) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parse(PackageParser.java:259) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.CompositeParser.parse(CompositeParser.java:298) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 ... 41 more Dec 22 23:24:14 Caused by: java.util.zip.DataFormatException: invalid code lengths set Dec 22 23:24:14 at java.base/java.util.zip.Inflater.inflateBytesBytes(Native Method) ~[?:?] Dec 22 23:24:14 at java.base/java.util.zip.Inflater.inflate(Inflater.java:378) ~[?:?] Dec 22 23:24:14 at org.apache.commons.compress.archivers.zip.ZipArchiveInputStream.readFromInflater(ZipArchiveInputStream.java:1081) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.compress.archivers.zip.ZipArchiveInputStream.readDeflated(ZipArchiveInputStream.java:998) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.compress.archivers.zip.ZipArchiveInputStream.read(ZipArchiveInputStream.java:929) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at java.base/java.io.BufferedInputStream.fill(BufferedInputStream.java:244) ~[?:?] Dec 22 23:24:14 at java.base/java.io.BufferedInputStream.read(BufferedInputStream.java:263) ~[?:?] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:224) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:224) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.commons.io.input.ProxyInputStream.read(ProxyInputStream.java:224) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.gagravarr.tika.OggDetector.detect(OggDetector.java:68) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.detect.CompositeDetector.detect(CompositeDetector.java:84) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.AutoDetectParser.parse(AutoDetectParser.java:179) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.DelegatingParser.parse(DelegatingParser.java:71) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.extractor.ParsingEmbeddedDocumentExtractor.parseEmbedded(ParsingEmbeddedDocumentExtractor.java:111) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parseEntry(PackageParser.java:481) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parseEntries(PackageParser.java:386) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser._parse(PackageParser.java:336) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.pkg.PackageParser.parse(PackageParser.java:259) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 at org.apache.tika.parser.CompositeParser.parse(CompositeParser.java:298) ~[tika-server-standard.jar:3.0.0] Dec 22 23:24:14 ... 41 more Dec 22 23:24:14 Dec 23, 2024 7:24:14 AM org.apache.cxf.jaxrs.utils.JAXRSUtils logMessageHandlerProblem Dec 22 23:24:14 SEVERE: Problem with writing the data, class org.apache.tika.server.core.resource.TikaResource$$Lambda$391/0x00007f41fc2ac740, ContentType: text/plain

I think unless the package is modified heavily, it's not going to work .

That's great, thanks @girish! It seems to work now. I enabled it and followed the steps in the new documentation you linked to, and then ran doveadm -c /run/dovecot.conf index -A '*' from the mail container which started indexing everything. Just waiting for the indexing to finish to confirm it'll be good.

@nebulon Fully agree, it's really odd that Wix doesn't allow AAAA records in this day and age. I'll change that domain to noop for now then as recommended, but my preference is to have the logic of the location DNS propagation check change so that domains in manual status can still be successful even if only one IPv4 or one IPv6 address is set rather than both. The noop is for development after all, isn't it? As long as one of the DNS records exists, that should be seen as successful IMO, since it will work in terms of getting traffic to the site still. There shouldn't be a reason to fail that.

@andreasb you can check the sizes of docker images here - https://hub.docker.com/u/cloudron . But looks like it lists only the compressed size. Size of docker images is not documented anywhere . The 6GB includes many layers and the layers are "shared" across apps (the way docker works). We also hvae images on quay - https://quay.io/organization/cloudron . But I think this requires login, despite images being public . These sizes differ from dockerhub [image: 1747727630514-d133353a-28be-41af-87eb-f9806443b9b9-image-resized.png] [image: 1747727643538-435fe29e-0a7f-4135-9c28-7e1481c34c6f-image-resized.png]

For an marketing intro to passkeys - My understanding is that they can be supported via WebAuthn - https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API

That makes sense, not sure why I hadn't thought of that one. I temporarily moved the invoice Ninja app to a different subdomain, created a quick LAMP app on the original subdomain with the file I needed, then verified and undid it all. Thank you for the idea @robi.

Good to know, thanks Girish. It never happened again, only once so I guess it was transient in nature.

Well I'm kind of ashamed to say it but I gave up, I spent far too many hours on this one (felt like ~25 between the last three days) just on this one single issue in order to avoid an IP block for my clients as Microsoft was blocking the IP of the host machine, and I still couldn't get it to work. I eventually opted instead to create a new Public Cloud instance at OVH instead, migrated all the data to it, using the floating IP, and things seem to be working fine now (only accessible with one public IP address so Docker had no other choice, lol). Sorry there's no confirmed solution to this one.

This is now fixed with https://git.cloudron.io/cloudron/box/-/commit/c8cd67258ad0329214e46b841de62e26e36842de

@nebulon I’m not sure I understand… if my server had 128 GB to set, why does Cloudron allow me to set nearly 256 GB? That doesn’t make sense to me.