Posts made by mehdi

@girish You can try with an app-password, or try another Basic Auth ProxyAuth app, like Transmission (with an android app or a browser extension)

@girish Are you on 6.1 ? Maybe your 2FA implementation broke something with the basic auth ?

@cbeams You just say on the forum that it's been package, give a link to the repo, and the Cloudron team will get to it

@girish said in What's coming in 6.1:

@mehdi Currently, it is ignored. Do you think we should maybe disable password validation with basic auth and make it only work with app passwords?

That's an interesting idea. Another possible way would be to only allow BasicAuth if explicitely asked for in the Manifest. It would need a minor change for the apps that need it, but it's totally acceptable IMO. (both options are not exclusive :))

@girish quick question about :

proxyAuth: add 2fa

How's this gonna work with the basic-auth? Or is it just gonna be ignored for basic auth? (in this case, it does not really bring any additional security)

I just noticed that I cannot create new App Passwords for regular LDAP login anymore. When I go to the App Passwords thing, the drop down menu only allows me to create an app password for SFTP connections and for the Mail server, not for "normal" apps anymore.

I am not sure since when, could be since the latest Cloudron version (I'm on v6.0.1), or since I added a few apps. I tested for multiple user accounts on my cloudron, and on multiple browsers.

Of course, I am available if any debugging steps are needed, or any more information.

@jodumont I completely agree I just pointed out that we should add this as a new app, not "Switch out OpenVPN Server" as the thread title says

@jordanurbs I think it's a question of DNS propagation. Can you ping the domain in question from your computer, and check if the IP in question corresponds to the new server, or the old one ?

@humptydumpty Yes, using firebase indeed means that Google will have access to all the data

I am 100% in favor of bundling a simple UI together with the registry. Even if one does not need it and wants to use the gitlab UI, there's basically nothing to lose besides a few kB of storage ^^

@jodumont This table seems to be either outdated severly, or just plain wrong. Whatsapp does use end-to-end encryption, and has been using it for years.

@jodumont about Olvid, from what I know, yes their calls are also encrypted, but they are only available for paid users.

@jodumont I am of course only talking about good end-to-end encryption, like Signal or WhatsApp (yeah, WhatsApp has many flaws, mainly their owner, but they do have good encryption).

I don't know about Telegram's encryption, I never looked into it. I just know they don't use any by default (which, in itself, is bad)

@jodumont you comparison does not take into account whether or not the messages are encrypted. I personally think it's the most important feature to take into account.

Also, take a look at Olvid. I don't use it personally, but I heard good things.

@dkdkdkk what I do in similar cases is quite simple : allow routing between the 2 VLANs on the router.

So, your Cloudron and the camera would be able to talk to each other directly. And you can still only allow the first VLAN to route to the internet. That's what I'm doing for my "smart home" stuff. This should check all your boxes

@girish Allright, no worries, I just wanted to make sure it had not been forgotten! No hurry, sorry for the ping

@girish gentle reminder

@girish gentle reminder

@girish Yes, it does appear to pass the correct credentials, and the function in question seems to give no error. I'll try to debug further on the app side, but for now I think we can just file this as an unexplained weird thing

One detail I did not give is that it was the only app that was stopped during the update. For the other apps, which were running during the update, the LDAP did not break. Maybe it was a coincidence, maybe not