Cloudron Forum

• Main Page: https://fossorial.io/
• Git: https://github.com/fosrl/pangolin
• Licence: AGPL-3
• Docker: Yes
• Demo:

• Summary:
  Pangolin is a self-hosted tunneled reverse proxy management server with identity and access management, designed to securely expose private resources through encrypted WireGuard tunnels running in user space. With Pangolin, you retain full control over your infrastructure while providing a user-friendly and feature-rich solution for managing proxies, authentication, and access, and simplifying complex network setups, all with a clean and simple dashboard web UI.

• Notes: Self-hosted alternative to Cloudflare Tunnels. Allows you to securely expose services in your homelab without opening ports on your firewall.

• Alternative to link: https://alternativeto.net/software/fossorial-pangolin/

Is there any estimated timeframe for the release of 9.0?

Due to the recent Trump administration shenanigans, I have decided that I will make concerted efforts to reduce my dependency on U.S. software companies, wherever possible. Ever since I came across Cloudron 4 years ago, I have been using Digital Ocean as my VPS provider. However this past weekend, I switched to Hetzner thanks to the number of satisfied users on this forum. The transition went smoothly with only one app (Nextcloud) running into some issues which I was able to resolve by myself using the official Cloudron documentation - so great job @girish @nebulon and the rest of the Cloudron team!

I have also been using Cloudflare DNS during the above period and while I have been happy with the services rendered, I feel that I need to change to a DNS provider incorporated in a country that respects global democracy, such as an EU member state.

Bunny DNS seems to be a popular choice on reddit and is supported on Cloudron. Does anyone here have personal experience with them? Are there other providers worthy of consideration?

And how would I go about migrating from Cloudflare DNS to a new provider with minimal downtime to applications hosted on my Cloudron server?

Thanks in advance for your feedback! Once the DNS migration is complete, I will start to look at migrating my outbound email relay provider (currently Amazon SES) followed by my remote backup provider (Backblaze) to friendlier destinations.

@p44 You raise several valid points. Infact when I originally setup the I.T infrastructure for my SME, I chose service providers primarily based on technical aspects. Secondary was the cost element, but I did not pay any mind to political aspects.

But recent events (e.g. Russian invasion of Ukraine, Trump's ongoing global trade war) have changed my point of view where I now feel that it is important to make some political considerations as well. After all, as a business, when choosing a trade partner, you want to be assured of a certain level of economic and regulatory stability, both of which are closely tied to politics.

Have companies such as Digital Ocean or Cloudflare wronged me or my business in any way? No
Was I satisfied with service that I received from them? Absolutely yes
Are they directly responsible for the decisions being made by the current US administration? No
Is it unfair for me to stop purchasing their services due to no fault of their own? Perhaps so

In trying to find suitable EU software providers for my business, I am just trying to safeguard the business from any ill effects that could be caused by the political turmoil and uncertainty that lies ahead. It could be the case that in some scenarios, I am unable to find an EU based alternative and therefore must continue to use a US based service. And that's fine too. But at least I would have done what I could to reduce risk and exposure.

Another upvote to have this in the app store!

Looks like there already is docker image available: https://github.com/traccar/traccar-docker

@p44 @perelin @Gengar thank you for your suggestions, I'll be sure to check them out! Will post an update here once I have made a decision regarding a DNS provider.

Upvoting this. Really pleased that Paperless-ng is now available on Cloudron, but for those of us who need the ability to create multiple user accounts and store files in a folder structure, docspell seems to be a great option.

Now on version 3.0.

This new update comes with a lot of new features:

• Multiple Pages and Easy Layout Management
• Import data from LinkedIn, JSON Resume
• Refreshed UI with a more natural UX
• Export a PDF within 5 seconds
• Get customized links to your resume for easy access/sharing
• Custom-made backend, no more connections to Google/Firebase. Your data is safe, as it has always been.

@nj Thanks for your hard work with this! I am looking forward to the day this becomes available in the app store us n00bs.

I have Kasm running behind a Cloudron reverse proxy and connected to Cloudron's OIDC directory for user authentication. It was pretty straightforward to set up, but if anyone wants/needs a written guide, I am happy to do so.

Out of curiousity, why is it not possible to include the beszel agent in the same app package as the beszel hub?

Hi, non-IT developer here. I run a small (one person) aircraft engineering consultancy firm and recently hired a developer on Fiverr to create a Python script that parses customer PDF documents of a certain format into Excel. Currently I run the script on my computer in Miniconda. I drop the PDF files in a certain folder, run the script, and the excel files are output to a separate directory. It is working great but not user-friendly if I wanted to share the tool with a colleague. Therefore I am looking to turn this into a web app which I would then like to host on my Cloudron instance.

If anyone thinks they would be able to help with this request, please get in touch with me by commenting in this thread or via DM.

I have many more python PDF parsing scripts that I would like to have converted to web apps in the future. Just would like to test the waters with one of them and learn from it.

Thanks in advance!

@scooke Thanks alot of the guide! I was able to install it successfully this time. The issue seems to be that I was previously trying to install the files in a newly created /my-files/ folder vs in /public/. Things went smoothly thereafter and I have tweaked some of the settings to fit my use case.
Have you been able to get email working? When I try to configure the smtp settings, the admin panel just hangs and the only way out is to restart the app.

But overall the product is looking really good and lightning fast as you say!

Thanks again!

@scooke Silly me had entered the wrong port and the admin panel freezes instead of displaying an error. Seems like it may be a bug in Filerun. But everything is working for me now.
I don't have an enterprise license, I am just evaluating the product.

While I am overall quite impressed with Filerun, it is not open source as pointed out by @micmc so I am hesitant to committing to it just yet. My preference is always to put my money towards the development of FOSS projects when possible. I recently hired a developer full-time to work on some projects for me and I am considering having him help out with the development of Cubby during his "down time" or a certain number of hours per week, assuming he has the skillset. We shall see how this unfolds.

Thanks again for your assistance with getting Filerun set-up!

@visamp the youtube video that I linked in the original post is a good place to start, if you haven't already watched it.

1. Install Kasm. (I have it running on a dedicated VM and followed the single server installation instructions: https://kasmweb.com/docs/latest/install/single_server_install.html)

2. Once installed, log into the Kasm host using the admin credentials and then configure the reverse proxy by going to Infrastructure > Zones in the left hand side panel and following the instructions here: https://kasmweb.com/docs/latest/how_to/reverse_proxy.html#update-zones
   (Note: in my case, the default parameters worked fine)

3. Install the Cloudron App proxy and point it to your Kasm host e.g. https://[IP-ADDRESS]:443. Now you should be able to access the Kasm login page via the domain you set in the app proxy. e.g. kasm.yourdomain.tld

4. To use OpenID authentication, first we need to add Kasm as an OIDC client in Cloudron. Go to Cloudron > User Director > OpenID Connect Provider > New Client, and enter the following:
   Name: kasm
   Login callback URL: https://kasm.yourdomain.tld/api/oidc_callback
   Signing Algorithm: RS256

Copy the resulting Client ID and Client Secret for use in step 5.

5. Now in Kasm, go to Access Management > Authentication > OpenID and follow the instructions here: https://kasmweb.com/docs/latest/guide/oidc.html
   Main parameters to be set are:
   Display Name: Can be anything e.g. Login with Cloudron
   Hostname: kasm.yourdomain.tld
   Client ID: paste from step 4
   Client Secret: paste from step 4
   Authorization URL: https://my.yourdomain.tld/openid/auth
   Token URL: https://my.yourdomain.tld/openid/token
   User Info URL: https://my.yourdomain.tld/openid/me
   Scope (One Per Line): openid profile email
   Username Attribute: sub
   Redirect URL: this should be automatically populated and should match what you entered as the callback url in step 4 i.e. https://kasm.yourdomain.tld/api/oidc_callback

I believe that should be it! Give it a shot and let me know if you run into any issues. There could be a possibility that I forgot to document something in the above steps. Once it is confirmed to be working, I will polish it up and submit it as a community guide.

Looks like this issue with the period in the username is a bug in Taiga and @nebulon reported it upstream a year ago.

https://github.com/taigaio/taiga-front/issues/2250

Therefore this issue can be marked as closed.

Thanks @scooke @girish for your assistance.

@nebulon
I just installed the update but now the app is stuck starting. Log excerpt:

Mar 02 22:57:04 => Ensure directories
Mar 02 22:57:04 => Create configs
Mar 02 22:57:04 ==> Configuring static assets
Mar 02 22:57:04 ==> Configuring SASLauthd for LDAP
Mar 02 22:57:04 /app/code/start.sh: line 17: CLOUDRON_LDAP_URL: unbound variable
Mar 02 22:57:05 => Ensure directories
Mar 02 22:57:05 => Create configs
Mar 02 22:57:05 ==> Configuring static assets
Mar 02 22:57:05 ==> Configuring SASLauthd for LDAP
Mar 02 22:57:05 /app/code/start.sh: line 17: CLOUDRON_LDAP_URL: unbound variable
Mar 02 22:57:06 => Ensure directories
Mar 02 22:57:06 => Create configs
Mar 02 22:57:06 ==> Configuring static assets
Mar 02 22:57:06 ==> Configuring SASLauthd for LDAP
Mar 02 22:57:06 /app/code/start.sh: line 17: CLOUDRON_LDAP_URL: unbound variable
Mar 02 22:57:07 => Ensure directories
Mar 02 22:57:07 => Create configs
Mar 02 22:57:07 ==> Configuring static assets
Mar 02 22:57:07 ==> Configuring SASLauthd for LDAP
Mar 02 22:57:07 /app/code/start.sh: line 17: CLOUDRON_LDAP_URL: unbound variable
Mar 02 22:57:09 => Ensure directories
Mar 02 22:57:09 => Create configs
Mar 02 22:57:09 ==> Configuring static assets
Mar 02 22:57:09 ==> Configuring SASLauthd for LDAP
Mar 02 22:57:09 /app/code/start.sh: line 17: CLOUDRON_LDAP_URL: unbound variable
Mar 02 22:57:11 => Ensure directories
Mar 02 22:57:11 => Create configs
Mar 02 22:57:11 ==> Configuring static assets
Mar 02 22:57:11 ==> Configuring SASLauthd for LDAP
Mar 02 22:57:11 /app/code/start.sh: line 17: CLOUDRON_LDAP_URL: unbound variable

Running Cloudron v7.1.2 on Ubuntu 20.04.3 LTS. Reverted to Jitsi package v0.1.0 for now.

Is it possible to configure Baserow enviroment variables in Cloudron? https://baserow.io/docs/installation/configuration

For example, I would like to edit the user file upload configuration to use S3 storage for user uploads and disable the Google docs file preview ?

@girish thank you for the explanation. With that in mind, are there any plans to include similar functionality natively in a future Cloudron release? i.e. an easy way to see the CPU, RAM, storage, network usage of each of the apps installed on your Cloudron instance, receive notifications/alerts when usage is above a certain user-defined threshold etc.

Currently we can sort of do some of this in Cloudron 8 but one needs to go to each app individually which is abit cumbersome and app resource alerting functionality does not presently exist to my knowledge. Like if my CPU is overheating, Cloudron currently will not reporting anything.

If the concern from the Cloudron team is that the beszel agent theoretically introduces security risk as the upstream codebase has not been reviewed in its entirety, would it be possible to take advantage of the wonderful work already done for the beszel agent and fork it into something that you review once and then natively integrate into cloudron? (I'm asking this as a non-developer)