Cloudron Forum

Subject: Wazuh - A Comprehensive Open Source Security Platform Wishlist for Cloudron

Hello Cloudron Community,

I hope this message finds you well. As user of Cloudron, I have witnessed its amazing capabilities in managing web applications and services. However, as wecontinue to explore and expand our needs, there are additional tools and services that could complement and further strengthen our security infrastructure.

One such tool that comes to mind is Wazuh, an open-source security platform that unifies historically separate functions into a single agent and platform architecture. With a diverse set of functionalities ranging from endpoint security to cloud workload protection, Wazuh proves to be an excellent resource in both on-premise data centers and cloud environments.

The key features Wazuh offers include:

1. Endpoint Security
2. Configuration Assessment
3. Malware Detection
4. File Integrity Monitoring
5. Threat Intelligence
6. Threat Hunting
7. Log Data Analysis
8. Vulnerability Detection
9. Security Operations
10. Automated Response
11. Regulatory Compliance
12. IT Hygiene
13. Cloud Security
14. Container Security
15. Posture Management
16. Workload Protection

Given the comprehensive nature of Wazuh's offerings, it would be extremely beneficial for Cloudron users like us to have this as a containerized app. The integration of Wazuh into the Cloudron ecosystem would allow us to leverage its powerful security capabilities while maintaining the ease of use and streamlined management that Cloudron provides.

Therefore, it is with great interest and anticipation that we propose the addition of Wazuh as a container app on Cloudron. This integration would certainly enhance our security measures and provide a more robust and reliable platform for our various operations. We believe this would be a significant addition to Cloudron's already extensive catalogue, offering its users a more holistic security solution.

Please consider this proposal as a 'wishlist' item for future Cloudron updates. We are eager to hear feedback from the rest of the community and the development team on the possibility of this integration.

Thank you for your time and consideration.

Wazuh.com

@nebulon https://github.com/n8n-io/n8n/issues/8217

@nebulon Yes i confirmed all 4 n8n containers are updated and working thank you.

I have another ubuntu instance with portainer and by internal ip i use cloudron app proxy and even for extra security i put cloudroon sso oauth on top of it i even use wazhu, supabas and many other so instead of having nginx reverse proxy manager seperately i use cloudron

Selfhosted upgrade to 8.2 went smoothly without any hickup

I deployed it as ovf vm machine and number things which needs to be done wow... and now i can feel the real hardwork of cloudron team when they pack and made it one click.....

Yes its a good application but very resource intensive workspace so i hosted it separately but their was a proxy issue and was not working so for the timebeing i used nginx proxy manager but @girish released a patch in the last update 7.60. Now all is good and i am using it withing cloudron and also used cloudron ODIC integration it was long weekend night but well spent.

i posted on git as well https://github.com/n8n-io/n8n/pull/8040

Today, I encountered the same error again. Although this thread is closed, I wanted to share the issue I discovered and how I resolved it.

I’ve been running Cloudron on my local cloud, and until yesterday, I was using a Cisco Meraki MX. However, due to outdated equipment, I recently upgraded to a UNIFI cloud setup. Unfortunately, my IP address started appearing on the Spamhaus blacklist. When I checked the Spamhaus website, it didn’t list my IP, so I thought the issue was elsewhere.

After some troubleshooting, I found that Unbound wasn’t providing any useful information. I decided to take a closer look at the logs, where I found the following entries:

2025-02-23T05:53:25.125Z box:mail checkRblStatus: myinboxZZZlabs.com (flippedIp: 123.456.111.111) is in the blocklist of {"name":"SpamHaus Zen","dns":"zen.spamhaus.org","site":"http://spamhaus.org"}
2025-02-23T05:53:25.125Z box:mail checkRblStatus: myinboxZZZlabs.com (error: null) (txtRecords: [["Error: open resolver; https://check.spamhaus.org/returnc/pub/123.456.111.111/"]])
2025-02-23T05:53:30.178Z box:mail checkRblStatus: myinboxZZZlabs.com (ip: 111.222.333.444) blockedServers: [{"name":"SpamHaus Zen","dns":"zen.spamhaus.org","site":"http://spamhaus.org","txtRecords":["Error: open resolver; https://check.spamhaus.org/returnc/pub/123.456.111.111/"]}])
2025-02-23T05:53:33.085Z box:apphealthmonitor app health: 17 running / 14 stopped / 7 unresponsive

At this point, I shifted my attention to the new security gateway. While configuring the firewall policies, I realized that I had enabled the "Encrypt DNS via Google/Cloudron" option. After disabling this setting, the email system immediately came back online.

Solution Summary:
The root cause was the "Encrypt DNS via Google/Cloudron" option causing issues with DNS resolution and email functionality.
Solution: Disable "Encrypt DNS via Google/Cloudron" in the security gateway settings, which immediately restored the email system.
I wanted to share this here so others experiencing the same issue can benefit from the solution. I hope it helps!

Hi Cloudron team and community,

I’m planning to deploy Directus on Cloudron and would like to structure it properly from the beginning with three isolated environments:

Development

Sandbox / UAT

Production

Since Directus uses internal system tables (directus_collections, directus_fields, directus_relations, etc.), I want to avoid schema conflicts or corruption when promoting changes between environments.

I’m aware that tools like pg_dump, Devart, or traditional SQL export don’t handle Directus metadata well, so I’m exploring directus schema snapshot / schema apply for schema promotion and version control.

Before I begin, I’d appreciate help with:

1. What’s the best way to set up three separate Directus instances (e.g., directus-dev.domain.com, directus-sandbox.domain.com, etc.) on a single Cloudron server?

2. Will I run into any issues running multiple Directus apps on the same box, each with their own PostgreSQL database?

3. Any best practices or gotchas for syncing schema and config across environments using CLI-based snapshots?

4. If needed later, can Directus apps on Cloudron be CI/CD integrated (e.g., via schema promotion scripts) without breaking Cloudron’s update flow?

I'm aiming for a clean, maintainable setup that supports Git-based schema tracking and safe production deployments. Any community-tested advice or examples would be very helpful.

Thanks in advance!

worked fine on selfhost ubuntu 24.04 on 3 separate instances

@girish finally i figured out the problem it was Unifiy Gateway (it was Using content filtering in order to moderate the traffic and using dns once i turned off that for all turned green and so far since last 3 hours its green.

2023-03-23T01:00:38.000Z 2023-03-23T01:00:38.718Z pid=12 tid=2w5k class=ActionMailer::MailDeliveryJob jid=bddee25bd795abf876bd086e INFO: start
2023-03-23T01:00:38.000Z I, [2023-03-23T01:00:38.719272 #11] INFO -- : [655d3bf6-38b4-411c-8131-089c27103815] [ActiveJob] Enqueued ActionMailer::MailDeliveryJob (Job ID: 06617b85-88ae-4505-beb7-244a676f130a) to Sidekiq(mailers) with arguments: "ConversationReplyMailer", "conversation_transcript", "deliver_now", {:params=>{:account=>#<GlobalID:0x00007f40fa9a4f60 @uri=#<URI::GID gid://chatwoot/Account/1>>}, :args=>[#<GlobalID:0x00007f40fa9a4a60 @uri=#<URI::GID gid://chatwoot/Conversation/38>>, "sm@testscript.nys"]}
2023-03-23T01:00:38.000Z I, [2023-03-23T01:00:38.722175 #11] INFO -- : [655d3bf6-38b4-411c-8131-089c27103815] Completed 200 OK in 24ms (ActiveRecord: 5.0ms | Allocations: 3426)
2023-03-23T01:00:38.000Z I, [2023-03-23T01:00:38.723517 #11] INFO -- : source=rack-timeout id=655d3bf6-38b4-411c-8131-089c27103815 timeout=15000ms service=31ms state=completed
2023-03-23T01:00:38.000Z I, [2023-03-23T01:00:38.727362 #12] INFO -- : [ActiveJob] [ActionMailer::MailDeliveryJob] [06617b85-88ae-4505-beb7-244a676f130a] Performing ActionMailer::MailDeliveryJob (Job ID: 06617b85-88ae-4505-beb7-244a676f130a) from Sidekiq(mailers) enqueued at 2023-03-23T01:00:38Z with arguments: "ConversationReplyMailer", "conversation_transcript", "deliver_now", {:params=>{:account=>#<GlobalID:0x00007f87351ccb40 @uri=#<URI::GID gid://chatwoot/Account/1>>}, :args=>[#<GlobalID:0x00007f87351cc618 @uri=#<URI::GID gid://chatwoot/Conversation/38>>, "sm@testscript.nys"]}
2023-03-23T01:00:38.000Z I, [2023-03-23T01:00:38.764880 #12] INFO -- : [ActiveJob] [ActionMailer::MailDeliveryJob] [06617b85-88ae-4505-beb7-244a676f130a] Rendered mailers/conversation_reply_mailer/conversation_transcript.html.erb within layouts/mailer/base (Duration: 8.4ms | Allocations: 960)
2023-03-23T01:00:38.000Z I, [2023-03-23T01:00:38.771291 #12] INFO -- : [ActiveJob] [ActionMailer::MailDeliveryJob] [06617b85-88ae-4505-beb7-244a676f130a] Rendered layout layouts/mailer/base.liquid (Duration: 14.9ms | Allocations: 1693)
2023-03-23T01:00:38.000Z I, [2023-03-23T01:00:38.949978 #12] INFO -- : [ActiveJob] [ActionMailer::MailDeliveryJob] [06617b85-88ae-4505-beb7-244a676f130a] Delivered mail 641ba4b6bcc4f_c20f4456279@95608d00-cc49-481f-bd84-d230007cbf64.mail (177.4ms)
2023-03-23T01:00:38.000Z E, [2023-03-23T01:00:38.950462 #12] ERROR -- : [ActiveJob] [ActionMailer::MailDeliveryJob] [06617b85-88ae-4505-beb7-244a676f130a] Error performing ActionMailer::MailDeliveryJob (Job ID: 06617b85-88ae-4505-beb7-244a676f130a) from Sidekiq(mailers) in 222.72ms: Net::SMTPFatalError (550 Authenticated user livechat@xyz.com cannot send mail as chatsupport.app@xyz.com
2023-03-23T01:00:38.000Z

Hi Umami is not working on 7.6 i checked even on 2 separate instances of cloudron stuck @ starting.

@girish Good Morning or Afternoon their is a critical bug in N8N MySQL and Microsoft SQL query execution since last few update its asking query parameters where it was working before. please se the link n8n forum link . please look into this.

An image for reference

Hi Chatwoot not sending outbound emails since last update on 05/17/2023 with latest version i created a ticket as well but still waiting on this.

Thank you,

@girish thank you problem solved

@girish Hi i recieved today's email which you sent i am reverting back to 1.17.1 thank you.

@girish yes its working now thank you i will observe