Cloudron Forum

Subject: Wazuh - A Comprehensive Open Source Security Platform Wishlist for Cloudron

Hello Cloudron Community,

I hope this message finds you well. As user of Cloudron, I have witnessed its amazing capabilities in managing web applications and services. However, as wecontinue to explore and expand our needs, there are additional tools and services that could complement and further strengthen our security infrastructure.

One such tool that comes to mind is Wazuh, an open-source security platform that unifies historically separate functions into a single agent and platform architecture. With a diverse set of functionalities ranging from endpoint security to cloud workload protection, Wazuh proves to be an excellent resource in both on-premise data centers and cloud environments.

The key features Wazuh offers include:

1. Endpoint Security
2. Configuration Assessment
3. Malware Detection
4. File Integrity Monitoring
5. Threat Intelligence
6. Threat Hunting
7. Log Data Analysis
8. Vulnerability Detection
9. Security Operations
10. Automated Response
11. Regulatory Compliance
12. IT Hygiene
13. Cloud Security
14. Container Security
15. Posture Management
16. Workload Protection

Given the comprehensive nature of Wazuh's offerings, it would be extremely beneficial for Cloudron users like us to have this as a containerized app. The integration of Wazuh into the Cloudron ecosystem would allow us to leverage its powerful security capabilities while maintaining the ease of use and streamlined management that Cloudron provides.

Therefore, it is with great interest and anticipation that we propose the addition of Wazuh as a container app on Cloudron. This integration would certainly enhance our security measures and provide a more robust and reliable platform for our various operations. We believe this would be a significant addition to Cloudron's already extensive catalogue, offering its users a more holistic security solution.

Please consider this proposal as a 'wishlist' item for future Cloudron updates. We are eager to hear feedback from the rest of the community and the development team on the possibility of this integration.

Thank you for your time and consideration.

Wazuh.com

@Sam_uk said in Appsmith:

Appsmith is a JavaScript-based visual development platform to build and launch internal tools quickly. Use pre-built UI widgets, connect them to your APIs and databases to build dynamic apps and complex workflows.

https://docs.appsmith.com/v/v1.2.1/

https://github.com/appsmithorg/appsmith

I recently packaged appsmith https://github.com/appsmithorg/appsmith -- if anyone intrested here is the docker hub registery link Docker Link. i dont know if i sharing at right location or not

Recently i gave up on Chat gpt pro subscription as the model seems like a chatty person and real work is sub par it tries to do everything immediately even though you ask to first understand requirements and blah blah blah jo matter how good the prompt is it looses easily i used abusive but nothing worked same thing with google gemini ultra. I found a better approach where i hosted typingmind on clodron surfer app and using anthropic and gemini and openai api keys.

So far the results are anthropic is still better when it comes to development and context but its expensive but if i see the time saved by going back and forth with subscription models this thing still works better. I moved on already. Now my new project is to make ide directly connect with my blackwell 6000 i created a heavy workstation whcih is quite heavy and will surely try to use that in future

I recently packaged appsmith https://github.com/appsmithorg/appsmith -- if anyone intrested here is the docker hub registery link Docker Link. i dont know if i sharing at right location or not

@nebulon https://github.com/n8n-io/n8n/issues/8217

@nebulon Yes i confirmed all 4 n8n containers are updated and working thank you.

said in Announcing n8n version 2.0 - coming soon!:

Will be closely watching

Today I did the thing my gut specifically told me not to do: I upgraded n8n → 2.0 on production day.

4 Cloudron instances. 150+ workflows. The kind of numbers that usually trigger the “maybe next weekend…” reflex.

I went in fully expecting chaos, alarms, and at least one mysterious workflow deciding to reinvent itself… and somehow… everything upgraded smoothly. No drama. No broken executions. Not even a passive-aggressive warning.

So yeah—either n8n 2.0 is solid, or the production gods accepted my offering of stress and coffee.

Selfhosted upgrade to 8.2 went smoothly without any hickup

I deployed it as ovf vm machine and number things which needs to be done wow... and now i can feel the real hardwork of cloudron team when they pack and made it one click.....

I have another ubuntu instance with portainer and by internal ip i use cloudron app proxy and even for extra security i put cloudroon sso oauth on top of it i even use wazhu, supabas and many other so instead of having nginx reverse proxy manager seperately i use cloudron

Yes its a good application but very resource intensive workspace so i hosted it separately but their was a proxy issue and was not working so for the timebeing i used nginx proxy manager but @girish released a patch in the last update 7.60. Now all is good and i am using it withing cloudron and also used cloudron ODIC integration it was long weekend night but well spent.

i posted on git as well https://github.com/n8n-io/n8n/pull/8040

Today, I encountered the same error again. Although this thread is closed, I wanted to share the issue I discovered and how I resolved it.

I’ve been running Cloudron on my local cloud, and until yesterday, I was using a Cisco Meraki MX. However, due to outdated equipment, I recently upgraded to a UNIFI cloud setup. Unfortunately, my IP address started appearing on the Spamhaus blacklist. When I checked the Spamhaus website, it didn’t list my IP, so I thought the issue was elsewhere.

After some troubleshooting, I found that Unbound wasn’t providing any useful information. I decided to take a closer look at the logs, where I found the following entries:

2025-02-23T05:53:25.125Z box:mail checkRblStatus: myinboxZZZlabs.com (flippedIp: 123.456.111.111) is in the blocklist of {"name":"SpamHaus Zen","dns":"zen.spamhaus.org","site":"http://spamhaus.org"}
2025-02-23T05:53:25.125Z box:mail checkRblStatus: myinboxZZZlabs.com (error: null) (txtRecords: [["Error: open resolver; https://check.spamhaus.org/returnc/pub/123.456.111.111/"]])
2025-02-23T05:53:30.178Z box:mail checkRblStatus: myinboxZZZlabs.com (ip: 111.222.333.444) blockedServers: [{"name":"SpamHaus Zen","dns":"zen.spamhaus.org","site":"http://spamhaus.org","txtRecords":["Error: open resolver; https://check.spamhaus.org/returnc/pub/123.456.111.111/"]}])
2025-02-23T05:53:33.085Z box:apphealthmonitor app health: 17 running / 14 stopped / 7 unresponsive

At this point, I shifted my attention to the new security gateway. While configuring the firewall policies, I realized that I had enabled the "Encrypt DNS via Google/Cloudron" option. After disabling this setting, the email system immediately came back online.

Solution Summary:
The root cause was the "Encrypt DNS via Google/Cloudron" option causing issues with DNS resolution and email functionality.
Solution: Disable "Encrypt DNS via Google/Cloudron" in the security gateway settings, which immediately restored the email system.
I wanted to share this here so others experiencing the same issue can benefit from the solution. I hope it helps!

Hi Cloudron team and community,

I’m planning to deploy Directus on Cloudron and would like to structure it properly from the beginning with three isolated environments:

Development

Sandbox / UAT

Production

Since Directus uses internal system tables (directus_collections, directus_fields, directus_relations, etc.), I want to avoid schema conflicts or corruption when promoting changes between environments.

I’m aware that tools like pg_dump, Devart, or traditional SQL export don’t handle Directus metadata well, so I’m exploring directus schema snapshot / schema apply for schema promotion and version control.

Before I begin, I’d appreciate help with:

1. What’s the best way to set up three separate Directus instances (e.g., directus-dev.domain.com, directus-sandbox.domain.com, etc.) on a single Cloudron server?

2. Will I run into any issues running multiple Directus apps on the same box, each with their own PostgreSQL database?

3. Any best practices or gotchas for syncing schema and config across environments using CLI-based snapshots?

4. If needed later, can Directus apps on Cloudron be CI/CD integrated (e.g., via schema promotion scripts) without breaking Cloudron’s update flow?

I'm aiming for a clean, maintainable setup that supports Git-based schema tracking and safe production deployments. Any community-tested advice or examples would be very helpful.

Thanks in advance!

@timconsidine said in Appsmith:

@DualOSWinWiz can you check your repo and docker image links

samcorepa/appsmith-cloudron-ce:20251230-135540

@girish finally i figured out the problem it was Unifiy Gateway (it was Using content filtering in order to moderate the traffic and using dns once i turned off that for all turned green and so far since last 3 hours its green.

worked fine on selfhost ubuntu 24.04 on 3 separate instances

@SansGuidon i am using typingmind a rich ui for openai and claude models on surfer

@james said in Private docker registry in Cloudron:

Hello @dualoswinwiz

I have just created a personal access token with the Read-only permission.
Configured Cloudron:

and was able to install my custom app from a private repo.
Did you use registry.hub.docker.com as the Server address?

Nope i was using docker.io once i changed to registry.hub.docker.com its working thank you.

@nebulon all good so far with at least 50 apps