Ubiquiti Cloud Controller is a Control System for network devices of the same brand.

• https://help.ui.com/hc/en-us/articles/220066768-UniFi-How-to-Install-and-Update-via-APT-on-Debian-or-Ubuntu

• It use mongodb

@jdaviescoates said in What's coming in 6.0 (take 2):

Faster Nextcloud and WordPress!

We have some test image with Nginx + WP, that i have already shared with @girish, in the next few day we will work with him on some special feature to make the manifest compatible with OLS base image that we have pretty much ready, and later we will work on WP and NextCloud performance boost.

Probably next week, we will post some performance benchmarks of the new WP image, for both Nginx and OLS base image.

Hello everyone !
Today we start testing the first version of OpenLiteSpeed on Cloudron, we hope to be able to bring it to open-beta soon.
We are working to bring full support to the OLS webadmin panel; and the main add-on modules, for now the image will be only for WordPress, but we are working to bring other PHP and Django scripts as well (maybe this will use nginx).

A good addition to the Cloudron API, is 4 shore the possibility to been notify of the event accruing on the server with webhooks.

For us business is a good feature, to help us setup action or workflow base on them, increse security and stability are consequences.

For private geek user, they can setup telegram or main with notification coming from there server, that will make a smoother experience with there server.

Event are already json, we just need to be able to send them to an endpoint, maybe with the possibility to choose witch event we want to receive.

Update:

• The cache plugin is functional and connects to OLS for server side caching.
  

I try to summarize the feasible and effective antispam scenario/stack:

• Rspamd
  • It does practically the same job as spamassasin, he needs less training then SA.
  • spamassassin seems more effective than rspamd if configured correctly, thanks to the use of signature exchange nextwork razor, pyzor, ecc ecc.
  • an antivirus(clamav), is impractical for cloudron, because it would require at least 1.5 / 2 GB of ram to have the entire signature database to be fast enough to filter emails, and as far as we are concerned 90% of our customers do not have such resources on the vServer.
• SPF/DKIM/DMARC
  almost all spam is now signed with these protocols, therefore further control by the antispam is normally useless.
  what cloudron does from this point of view is already excellent, haraka is much faster than SA or Rspamd, it would be a waste of resources in most cases to make the antispam and not the MTA do this job.
• DNBSL
  if well configured these work very very well, but many of these do not allow to be used by anonymous servers and many others are paid, for this reason we suggest the use of a proxy or for all emails or at least for parts of the antispam-system such as DNBSL, signature.

@atrilahiji
Yes it is, you need to specify in the manifest the image.
If you can w8 on Monday I can send you more details

Hi everyone,
I started looking for possible solutions to the problem we are having in building the image of Sogo with ActiveSync and not finding a solution (if you want to try to help, find the issue here).

So I looked for an alternative:
What do you think of GroupOffice?

They have a rather complete free version, with modules:

• e-mail (Sieve, Multiple mail for account)
• list itemcontacts
• list itemcalendar
• list itemfile (webdav compatible)
• list itemactivesync (with also a module to control activesync)

• The sharing system is very complete like that of sogo, there can be email accounts, calendars, address book and shared drives.

it is entirely written in PHP so creating a dockerimage should not be a problem, the only disadvantage is that the developers are not very active even if they continue to release bugfixes, they do not have deadlines for new features.

A good way to handle the 3-2-1 for cloudron can be to replicate what Proxmox has done, delegate the replication to the other software(Proxmox Backup Server) installed on the destination backup server, this is for 2 reasons: storage servers/vps often have low resources but those are good enough to enable replication and they are really cheap, probably more expensive then Wasabi, but Wasabi is slow and really not efficient in cost for cold Rsync backup.

If u use Apps, that need more container, like nextcloud or wp, you need to count redis too, for exemple.
And there are System Apps to, like Haraka for the email

@marcusquinn
a full install of cloudron is too many resources w8st for many storage servers, we speak of old CPU (many of our storage servers have Haswell xeon) or just 1 vCore (time4vps) , and often without the support of docker.

@robi
I actually don't like that the 3-2-1 is managed by the main server, because if that is compromised you will have compromised also your backup.

I think that: if cloudron wants to offer a better backup solution should have a 3° party software/node be in charge of the replication for the 2-1.
This will protect the server from any ransomware or if your server is compromised.

@fbartels said in [Backups] Ability to add multiple storage provider/location:

local client (download & upload)

True but is Go, and a Storage Server/VPS have enough resources to have both server and client on it to replicate to an cold s3 storage.

@fbartels said in [Backups] Ability to add multiple storage provider/location:

Another upside is its portability due to being written in golang.

We also need to take into consideration that setup a golang script is easy and can be done by almost anybody in the cloudron community and tanks to the Rest API, cloudron can manage the server super easily, instead if it will be selected a nodejs or py script it can be a lot more difficult to setup.
I think that docker should be excluded as a tool to distribute the destination server for the backup, because many VPS provider of Storage Server offers OpenVZ and not KVM, we would not have that issue but many the will.

@fbartels
you have a command/API that can copy a snapshot to a new location.
(i just had time to check their documentation and a basic install)

I was looking around for a way to solve this issue without using a complicated setup like Ceph (like we did, and we would love to get out of it but that's another story).
I found Restic, it could be used instead of rsync, and it supports S3 but also their own rest server that can run on the destination server of the backup and with their cli, you can create a copy of one of the snapshots without involving the production server, and store it on an HDD offline or on the others providers.

https://github.com/restic
https://github.com/restic/rest-server

A good way to handle the 3-2-1 for cloudron can be to replicate what Proxmox has done, delegate the replication to the other software(Proxmox Backup Server) installed on the destination backup server, this is for 2 reasons: storage servers/vps often have low resources but those are good enough to enable replication and they are really cheap, probably more expensive then Wasabi, but Wasabi is slow and really not efficient in cost for cold Rsync backup.

FTPs can be a solution for scaling and the support for vhost make it easier to manage permission on the storage servers, and storage clusters.

And ftps should perform in almost any circumstances better then sftp.

@aizat
I think you should be able to do that with the API, even if not documented there is a GET request that allows invalidating all the tokens.

GET /api/v1/cloudron/logout?access_token=[your API key]

BUT to be fair, your computer even if stolen is really hard to get in, because of full disk encryption, password auth nowadays delegated to super safe hardware component and secure boot.

It's easy to find other vulnerabilities.

@fbartels
true obviously EAS is EOL, not death.
But I see more future and open standards/ease of use in jmap than in EAS.
I imagine that cloudron could build a webmail and calendar front end with jmap proxy with the compatibility to all current calendar and contact apps on the store because jmap can just be a proxy it doesn't need to be integrated into the mail server.
Apache James complete mail stack use it as a proxy is not integrated directly into the mail server, it acts as a gateway from the internal network that speaks in IMAP and external that use rest API.

Jmap is just been a standard for 2 years or so, and it's used by big providers for their proprietary webmail, and it's easy to develop UI on top of it, because it's just rest API.
there is a really good comment on rainloop issue for supporting jmap

@cbcun
jmap is probably a better idea, Activesync/EAS is now most likely a EOL protocol, MS have moved on to EWS/mapi and now they call them Exchange Server Protocols.