Cloudron Forum

https://github.com/photoprism/photoprism

We will be working on the following for 8.2:

• Backup integrity - store size and checksum of backups. Also provide a way to "verify" backup integrity in the remote.
• Show backup/restore progress
• Multiple Backup Destinations
• Granular Backup schedule
• Fix issue with removal of stale/failed/partial backups
• Add sqlite3 addon
• Remove the global lock for backups.
• App archival?
• VM mode for apps?
• Branding of OIDC button
• Add more notification methods
• Don't run du for small disks (see)
• Mail attachment search

This used to 8.1 but see this post

OpenSlides is the all-in-one solution for running your plenary meetings and conferences. Show the current presentation on the main screen, while you show the agenda, motions, list of speakers on others. Working on elections and documents in parallel with all participants. Web-based and always up-to-date.

https://openslides.com/en
https://github.com/OpenSlides/OpenSlides

Mostly quality of life improvements

What’s coming in 7.3

• (mail) Per mailbox quota - message limit and size
• (mail) VERP and bounce management for mailtrain and mautic
• SFTP export flag for volumes We will enhance the web file manager instead
• (mail) Virtual all directory in dovecot for search
• (mail) Expose mail queue operations
• (mail) wildcard aliases
• (mail) send as subaddress
• External app links in Dashboard
• storj/filebase integration
• Expose groups via LDAP: already implemented in a previous release
• Set domain of LDAP server
• Configurable TURN server
• Backup integrity
• OpenVPN/Wireguard integration

(We split the features into two release 6.2, 6.3 and 7.0, 8.0 they are tagged appropriately below)

Features planned for 9.0:

• (9.0) Multihost support. i.e you can have many servers and have a single dashboard to manage users, apps and domains - https://git.cloudron.io/cloudron/box/-/issues/142

These features are already implemented:

• (6.2) Move apps to new base image v3 - See https://forum.cloudron.io/topic/4366/docker-base-image-3-0
• (6.2) Database upgrades - MySQL 8, Postgres 12, Redis 5, Mongo DB 4.2.
• (6.2) Update node to 14.15.4
• (6.2) Update docker to 20.10.3
• Add service account type . This will add a way to create a "service" or bot user that can be used for automation but doesn't appear in LDAP directory queries. Decided against this because of lack of use cases.
• (6.2) Make it possible to restore without updating DNS. This is useful if you want to test out cloudron backups.
• (6.2) Add a way to manage apps <-> groups better. Currently, it's hard to get a grip on what apps a user/group has access to easily (maybe add filters as well).
• FTP access to volumes This is complicated, maybe some other release.
• (6.2) TLS addon (for DoT in AdguardHome)
• (7.4) Implement LDAP+2FA across apps - See https://git.cloudron.io/cloudron/box/-/issues/705 . Deprecated in favor of OIDC support.

Update: 6.2 is out. We will work on 6.3 - https://forum.cloudron.io/topic/4723/what-s-coming-in-cloudron-6-3 . It's a required first step for multi-host.

MeshCentral2 is complete remote computer management web site you can download and run in minutes. It's much like the original MeshCentral, but completely re-built using NodeJS. Easy to install and operate, runs on many platforms including Linux and Windows. This project is open source under the Apache 2.0 license. Once you get your MeshCentral server installed, you then install agents on remote computers and once the agent connects back, you can immediately take control of the remote computer over the Internet. You can do remote desktop, remote terminal and remote access to files

https://github.com/Ylianst/MeshCentral
https://www.meshcommander.com/meshcentral2

Why let only SaaS providers have shiny status pages ?

We have a self-hosted Uptime Kuma now showing the status of all our public facing selfhosted services - https://status.cloudron.io

https://vikunja.io/
https://code.vikunja.io/

For 7.5, we just want to focus on fixing some long standing issues instead of adding new features. Also, Cloudron 7.4 added OIDC support, so we are also working on moving apps from LDAP to OIDC slowly (as long as the migration works seamlessly).

These are fairly critical and we haven't paid attention to them in a while:

• (mail) Virtual all directory in dovecot for search
• (mail) Investigate why Spam learning/filtering sometimes does not work effectively.
• (mail) SPF regression adding an extra header and leaking client IP.
• Backup integrity - store size and checksum of backups. Also provide a way to "verify" backup integrity in the remote.
• Backup/restore progress
• SSHFS/CIFS import is not working - 1 and 2
• Add optional flag for turn addon.
• Add check to indicate that Cloudron 7.6 will not support servers without AVX. This is required for MongoDB 6.0
• Upgrade Redis to 7 . This is required for Discourse
• Improve app repair workflow

Demo: https://watch.owncast.online

Github: https://github.com/owncast/owncast

Documentation: https://owncast.online

You can read the announcement here.

Features:

• MongoDB was updated to 5.0 . Because of this we cannot support CPUs without AVX support anymore.
• New base image 4.2.0 cloudron/base:4.2.0@sha256:46da2fffb36353ef714f97ae8e962bd2c212ca091108d768ba473078319a47f4
• OVH DNS backend
• DNSimple DNS backend
• System Info shows SMBIOS information
• Editable network volumes
• Color-keyed notifications
• External Directory Connector improvements
  • 2FA Behavior: When using another Cloudron as an authentication provider, 2FA of the external directory is used. When using other providers, users can setup 2FA locally.
  • User Attributes: The user's role and active state are local and not synced from LDAP.
  • Groups Behavior: When Sync Groups is enabled, groups will be automatically created and users will be associated. External Groups are readonly and cannot be edited.
  • Sync Behavior: The local directory is synced with the external directory every 4 hours.
  • Keep/Make Local: This feature has been removed. It never worked properly because local users were overwritten with the next sync.

Smaller changes:

• turn: add ddos mitigation settings
• api: return json when route not found
• oidc: loginRedirectUri can be empty string
• mail: add option to enable/disable Virtual All mailbox
• app proxy: Host header is set to match the proxy domain instead of the target domain
• oidc: add oidc logo as login indicator for apps
• dyndns: update dns every 10 mins
• dashboard: remove nginx config of old domain when domain changed
• Show disk consumption of docker volumes for /run and /tmp of apps separately
• roles: admin role can access branding and networking
• mail: fix issue with redis emitting warnings non-stop
• mail: fix issue where doublle header was sent
• logviewer: preserve horizontal scroll position
• dockerproxy: allow child containers to access volumes
• postgres: enable cube, vector and earthdistance extensions
• Add ability to register a Cloudron with a setupToken only
• support: replace ticket section with help section
• firewall: increase blocklist size to 262144
• route53: retry on rate limit errors
• update: continue with app update if box update does not start
• ldap: fix error messages to show proper error messages in the external LDAP connector
• dashboard: fix various UI elements hidden for admin user
• email: improve loading of the mail usage to not block other views from loading
• eventlog: add events for directory server and exernal directory configuration
• profile: changing email now requires password

@LoudLemur thanks for the kind words

This forum/community plays a big role is keeping us motivated and excited. Personally, I have learnt so much from you guys! I had no idea so many selfhosted apps existed for a start.

Since I based in the valley, I constantly hear "everyone uses gmail", "everyone uses slack" etc. So, whenever I read on the forum about using these different apps everyday, it reinforces the idea that they are enough people out there who have different priorities/values/use cases. For me, this is incredibly valuable feedback.

For the coming weeks, we are going to focus on getting some new apps packaged. The list is:

• OnlyOffice
• Bitwarden - @Felix and @iamthefij have done much of the heavy lifting, we just have to get it across the line.
• OpenVPN - We will add an admin interface that let's the admins configure some popular vpn settings.
• BigBlueButton or Jitsi (we will evaluate which works well for conferencing. We have used both and they both work well but BBB might win). If you have any thoughts here, please leave a comment.
• Development apps - basically provide a git push workflow for hosting custom nodejs/php apps (and make it work so that they can be mixed with various caches and databases).

If we should prioritize something else, please let us know! But the above should keep us occupied this month.

We are continuing to work on getting many more of the apps published, see the WIP tag. Thanks to the community for really helping us out here!

CHANGE IN PLANS: As mentioned in the 5.4 post, we decided to release some of the features listed here in an intermediary release. I have marked the features below as such.

UPDATE 2: There is now a 5.5

UPDATE 3: There is now a 5.6

UPDATE 4: 6.0

6.0 will be a feature rich release:

• Focal support
• Mailbox sharing - we tried IMAP based mailbox sharing but this doesn't work well for the apps we have. We will instead make it such that a single mailbox can have multiple owners.
• Optimize WP and Nextcloud installations. This is not directly related to box code but we want to speeden things up and optimize the configs since we have a large number of installs with these 2 apps. @MooCloud_Matt has given us a lot of ideas to work with here.
• Unified dashboard for multiple cloudron setups - This will provide a unified auth across cloudron setups plus a single dashboard to control multiple cloudrons. Details are still being worked on and I will post it once I have more info.
• Fix access control for service provider setups - There's a few small issues. Service providers wants admin flag per app, better control of SFTP user management and also to unify PHPMyAdmin across apps. We will see what we can do.
• Mail - Full text search via IMAP (solr integration)

Already released

• (5.4) Dark mode for dashboard
• (5.4) File manager UI to edit the files inside apps. For the initial version, one can only view and edit the files under /app/data (i.e one cannot view the files in the read-only parts of the file system. this is because of some technical reasons)
• (5.5) Backup upload/download speed - Currently, backups can be quite slow but we have some ideas to speed it up
• (5.4) Allow admin to lock email and display name globally. This essentially makes the LDAP directory non-editable by normal users.
• (5.5) Allow backup and update time to be set. Currently, this is all hard coded and it's causing problems for people working in the night
• (5.6) Mail: Configurable mail server settings - whitelist/blacklist, max message size, tls configuration. In the next release after 6.0, we will make spam settings configurable.

This will mostly have email related improvements. There's also a few last mail related migrations to do for multi-host in Cloudron 8 (everything else is migrated, yay).

• Better email monitoring/visibility for admins. @d19dotca raised many important posts and there's also existing ones. We have to read the posts in more detail and discuss internally before we give more details on what we plan to do here.
• Add easier way to setup mailbox redirects
• Add way to setup sieve rules for mailboxes from the dashboard itself. One way we are thinking of doing this is to simply expose mail data via the file manager. Just like how app data is also exposed via file manager. Just to make it easier to use, we will probably add "download"/"restore" action in the mailbox view to add on top of this.
• Backup mail data separately (instead of as part of box code). This will allow restoring and backing up mail stuff separately just like it's an app.
• Add a way to run cronjobs (per app?)
• Operator role for specific app. This new role will allow assigning a user as "operator" for some apps and that user can then view logs, restart app, increase memory limit etc but without being a cloudron admin as such.
• Make it easy to install non-appstore apps.

EDIT: Since we stop supporting Ubuntu 16 from this release, we decided to call this Cloudron 7.0 and not 6.4.

We are going to spend pretty much rest of the year in packaging new apps. We started on this already - Directus 9, Chatwoot, Redash 10, Baserow are some of the apps we published just last couple of weeks.

For 7.1, we hope to implement:

• Mail manager role
• Password reveal for password fields (this already shipped as part of 7.0.4).
• Multi-domain support for apps like minio, mailtrain v2
• Whatever jitsi needs
• Option to expose LDAP server publicly
• Add LDAP option to expose groups.
• Import/export of users and mailboxes with csv/json
• Add a per-app mail from validation flag (currently, it's per domain).
• IPv6 support

Much smaller release given the vacation time and I think we want to make more releases often. The previous one took forever!

• Update base image for apps and addons to Ubuntu 22. This is already under way - https://forum.cloudron.io/topic/8130/docker-base-image-4-0
• (mail) Virtual all directory in dovecot for search
• (mail) Investigate why Spam learning/filtering sometimes does not work effectively.
• Backup integrity - store size and checksum of backups. Also provide a way to "verify" backup integrity in the remote.
• Backup/restore progress
• OpenVPN/Wireguard integration
• DoT support with client ID
• Community repo (appstore)
• Add optional flag for turn addon.

https://github.com/chatwoot/chatwoot

https://www.chatwoot.com/docs

First off, I hope all you guys are staying safe in these tough times! Our team is split in Santa Clara and Berlin and we are doing well!

5.1 will be a quick release. There are a bunch of security related fixes but the main feature is the integration of turn addon/service into the platform. This will help us get the video conference apps in asap since it's the need of the hour.

Hi All,
Now that we have a bunch of translations, would be good to notify the translators when we make a new release.

I created a @translator group on this forum. You should get a badge on this forum as well

I tried my best to guess here, but haven't managed to map all the ids from weblate to this forum ids. I will update this list as I get in touch with them.