https://jitsi.org/Projects/JitsiMeet
This open source video conferencing solution is amazing - it pretty much works like join.me allowing people to instantly create group video chat rooms where people can join so long as they have the room URL
This software works with rocketchat to provide an integrated video conferencing solution. It is also the basis for hipchat's video conferencing feature set.
https://bitwarden.com
Self-hosted password manager.
Already has a beta Docker deploy: https://help.bitwarden.com/article/install-on-premise/
Paperless for indexing and archiving scanned paper documents.
It supports Docker, see documentation.
This app was forked and now maintained at https://github.com/jonaswinkler/paperless-ng
Discourse is an opensource discussion platform built for the next decade of the Internet. A modern forum, everything's been redesigned to be easy.
I'd like to request Discourse as a Cloudron app.
It's already Dockerized and there's LDAP support plugins available.
Create agents that monitor and act on your behalf. Your agents are standing by!
Huginn is a system for building agents that perform automated tasks for you online. They can read the web, watch for events, and take actions on your behalf. Huginn's Agents create and consume events, propagating them along a directed graph. Think of it as a hackable version of IFTTT or Zapier on your own server. You always know who has your data. You do.
huginn/huginn - GitHub
https://github.com/huginn/huginn
cantino/huginn - Docker Hub
https://hub.docker.com/r/cantino/huginn/
Huginn - An Information Collection Agent
http://i-programmer.info/news/136-open-source/5684-huginn-an-information-collection-agent.html
Huginn Self Hosted software solution - Automation | LibHunt
https://selfhosted.libhunt.com/project/huginn
Huginn and Muninn - Wikipedia
https://en.wikipedia.org/wiki/Huginn_and_Muninn
Open Source Self-Hosted Huginn Alternatives - AlternativeTo.net
https://alternativeto.net/software/huginn/?license=opensource&platform=self-hosted
ERPNext is a free and open-source integrated Enterprise Resource Planning (ERP) software developed by Frappé Technologies Pvt. Ltd. and is built on MariaDB database system using a Python based server-side framework.
There are a few packaged versions on Docker Hub already, so it should be just a matter of reading a dockerfile and massaging it into the standard Cloudron packaging format. :thinking:
A GNU Social-compatible microblogging server.
Mastodon is a free, open-source social network server. A decentralized solution to commercial platforms, it avoids the risks of a single company monopolizing your communication. Anyone can run Mastodon and participate in the social network seamlessly.
https://github.com/matrix-org/synapse
https://medium.com/@RiotChat/lets-riot-f5b0aa99dc8e#.p9qy35ruz
Run a matrix home server in the cloudron, that also can join in a federated decentralized network of many servers. Can be bridged with a lot of stuff, including IRC. Text/audio/video chats, groups, etc.
[1.40.3]
This is fixed for the next release. We found a way to remove docker as a startup dependency of unbound and thus can mount volumes prior to docker and resolve the remote volume's DNS.
Essentially the trick was to tell unbound to listen to future interfaces (in this case the local interface for the docker network, where the apps are running in) https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html?highlight=ip-freebind#term-ip-freebind-yes-or-no
@timconsidine may not be required, but the expressjs framework is usually a solid option to be used. Cloudron itself and also surfer and the likes use that.
@timconsidine might be easier, if you push your current code to some public repository or so, to better guide you.
@mehdi interesting idea. The volumes however only allow to configure /mnt, /media, /opt or /srv for the filesystem type.
@ruihildt I guess that is a bit of a trade-off between usability and real threat. Generally an attacker would have to get the time window right, know the ip address and then will be able to setup the Cloudron. However to actually then also modify the code to let the normal user believe nothing the system is untampered with, he/she needs to have SSH access, which the dashboard does not give as such. So further an attacker would need to know a security hole in Cloudron components.
Overall from my current perspective, that risk is quite low. Does anyone else have a different idea how to exploit this?
[1.11.5]
@scooke generally both CODE and OnlyOffice do not store anything persistently on the app itself. So given that you tried installing a fresh OnlyOffice instance altogether (uninstall+install) this issue might be more likely to be Nextcloud and their OnlyOffice connector related. So maybe look there for more info.
Great investigation! I have fixed up that copy and paste error in the restore.js now