I think the price is fair if you set it into relation with the product quality and the support of it.

Btw, I applied the changes of the system.js according to the changelog to solve this problem in my environment until the update is available. So at least for myself this Post could be set to "solved".

When I invite another User to an appointment he receive the invitation by e-mail. But the senders "E-Mail address" is just the login Name from Cloudron in Radicale, but not a valid E-Mail address. So if the receiver accepts or declines the inivtation, he will get a Bounce, because the Organizers E-Mailaddress is invalid.

Anybody an idea how to fix that?

Example of an ICal file:

BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//MailClient.VObject/9.2.1222.0
BEGIN:VTIMEZONE
TZID:W. Europe Standard Time
X-EM-DISPLAYNAME:(UTC+01:00) Amsterdam\, Berlin\, Bern\, Rome\, Stockholm\,
  Vienna
BEGIN:DAYLIGHT
TZNAME:W. Europe Daylight Time
DTSTART:00010325T020000
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
END:DAYLIGHT
BEGIN:STANDARD
TZNAME:W. Europe Standard Time
DTSTART:00011028T030000
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
UID:a5f514f7-6b33-4a8b-8939-d86ce665a4ec
DTSTART;TZID=W. Europe Standard Time:20230116T100000
DTEND;TZID=W. Europe Standard Time:20230116T103000
TRANSP:OPAQUE
X-MICROSOFT-CDO-BUSYSTATUS:BUSY
LAST-MODIFIED:20230115T154307Z
DTSTAMP:20230115T154307Z
CREATED:20230115T154307Z
SUMMARY:
ATTENDEE;RSVP=TRUE;SCHEDULE-AGENT=NONE:mailto:**E-MAIL OF INVITEE**
ORGANIZER;CN=**FIRST NAME LAST NAME**:/**USERID**/
CLASS:PUBLIC
END:VEVENT
END:VCALENDAR

@girish Yes, this is true.

May main concern was in fact not security related, but legal related. If there is a "Register"-Link it "looks" like I offer this service to public.

@Stardenver Great, thanks a lot! I was not aware of the disabled external Storage App. It works like a charm.

One way to fix this would be to update the HTML on the webserver to use the proxied URL (http://app.proxydomain.com/img.jpg) for the images, rather than the direct URL (http://10.0.0.2/img.jpg).

Another option would be to use relative paths for the images in the HTML.

Another option would be to configure the proxy app to rewrite the URLs of the images to the proxied URL.

Btw, I applied the changes of the system.js according to the changelog to solve this problem in my environment until the update is available. So at least for myself this Post could be set to "solved".

One way to fix this would be to update the HTML on the webserver to use the proxied URL (http://app.proxydomain.com/img.jpg) for the images, rather than the direct URL (http://10.0.0.2/img.jpg).

Another option would be to use relative paths for the images in the HTML.

Another option would be to configure the proxy app to rewrite the URLs of the images to the proxied URL.

I decided to switch for this functionality over to SoGo.

When I invite another User to an appointment he receive the invitation by e-mail. But the senders "E-Mail address" is just the login Name from Cloudron in Radicale, but not a valid E-Mail address. So if the receiver accepts or declines the inivtation, he will get a Bounce, because the Organizers E-Mailaddress is invalid.

Anybody an idea how to fix that?

Example of an ICal file:

BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//MailClient.VObject/9.2.1222.0
BEGIN:VTIMEZONE
TZID:W. Europe Standard Time
X-EM-DISPLAYNAME:(UTC+01:00) Amsterdam\, Berlin\, Bern\, Rome\, Stockholm\,
  Vienna
BEGIN:DAYLIGHT
TZNAME:W. Europe Daylight Time
DTSTART:00010325T020000
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
END:DAYLIGHT
BEGIN:STANDARD
TZNAME:W. Europe Standard Time
DTSTART:00011028T030000
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
UID:a5f514f7-6b33-4a8b-8939-d86ce665a4ec
DTSTART;TZID=W. Europe Standard Time:20230116T100000
DTEND;TZID=W. Europe Standard Time:20230116T103000
TRANSP:OPAQUE
X-MICROSOFT-CDO-BUSYSTATUS:BUSY
LAST-MODIFIED:20230115T154307Z
DTSTAMP:20230115T154307Z
CREATED:20230115T154307Z
SUMMARY:
ATTENDEE;RSVP=TRUE;SCHEDULE-AGENT=NONE:mailto:**E-MAIL OF INVITEE**
ORGANIZER;CN=**FIRST NAME LAST NAME**:/**USERID**/
CLASS:PUBLIC
END:VEVENT
END:VCALENDAR

I think the price is fair if you set it into relation with the product quality and the support of it.

On my Cloudron I get an error in the Logfile when I try to update the Disk usage:

Jan 13 10:37:18 box:tasks startTask: 174 done. error: {
stack: "TypeError: Cannot read properties of undefined (reading 'contents')\n" +
' at getDisks (/home/yellowtent/box/src/system.js:106:60)\n' +
' at processTicksAndRejections (node:internal/process/task_queues:96:5)\n' +
' at async updateDiskUsage (/home/yellowtent/box/src/system.js:182:19)',
message: "Cannot read properties of undefined (reading 'contents')"

Any advise how to fix that?

@girish Yes, this is true.

May main concern was in fact not security related, but legal related. If there is a "Register"-Link it "looks" like I offer this service to public.

@girish Good idea, it seems it has just requested by someone else.

https://vaultwarden.discourse.group/t/hide-registration-form-when-signups-allowed-false/2205

But it seems the recommendation is to modify the css to hide it.

@necrevistonnezr Thank you. It seems my question was not clear enough. I did disable the registration in the vault admin settings. But the link to register an account is still visible on the login page. When someone enters information and try to register he will get an error - which is correct. But I would like to get the link to registration
removed, so nobody tries to register.

Is there a way to remove the link at the login page when the registration has been disabled? I would like to make clear on the login page, that registrations are disabled.