Posts made by subtlecourage

What an awesome app!

@girish

It is doing something weird though.

It says it should be coming from noreplay@domain.com, but instead it is coming from imanalias@domain.com

Any ideas?

@girish said in Outbound SMTP not working on my External Relay:

@subtlecourage my bad, I should have noticed. The issue here is that Cloudron's relay system only supports STARTTLS. This means that you have to use port 587 in your relay. Port 465 is pure "TLS" (as opposed to port 587 which is opportunistic TLS). Can you try with port 587? If that doesn't work, let me debug further.

Hah, that solved it.

Thank you.

@ccfu
I have never used either.

to reinforce the noob, any documentation on that?

Here is the following scenario.

User 1 has unedited photos, they want to send User 2 these unedited photos, have User 2 edit them, and then after doing what User 2 needs them for, User 2 will sends them back.

Im trying to come up with a way where these two users could swap photos easily, make publicly available the edited photos, and have a non-public folder for the unedited files.

I would want these pictures hosted online in something like lychee.

The more automated the better. My users are extremely not tech savvy, so I need the solution to be as simple as sending a text message or sending an email and having the photos be where the server can pull from and then auto publish the edited photos.

My thought was If I set up a mount for Photos and attach that to Lychee, then I could create two folders, one for public, one for not public photos.
But what I don't know how to do is to facilitate getting the photos there easily. What would be really awesome is if I would set up some sort of nextcloud or syncthing sync so these users accessed two shared folders. One for edited/unedited photos alike. But in order to have the photos appear in the mount, i'd need to set the app up on the server (it is a VPS with 9tb of storage, so I am not worried about space) right? And then what about backups?

I guess I am just hoping for some advise from the community here for this.

@robi
HAHAHAHA

Thats an excellent idea.

Thanks for clicking, dont forget to buy everything!!

@girish said in What's coming in Cloudron 6.3:

Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.
Volumes - make mounting easier by automating fstab/exports entries

The email feature is something I think will help my use caase.
The volume feature is freaking phenomenal.

You are all amazing!

@robi

It still loads, but for a millisecond.

I almost would rather a pretty background and better design to load for 5 seconds or so. But I guess ill just have to play with it.

So how is this one coming along?Anyone deploy it successfully?

@fbartels said in How can I setup a 302 or 301 redirect from a subdomain to an external site?:

Hi @subtlecourage,

this could be achieved with the surfer app and a simple html. You can read more about it at https://forum.cloudron.io/post/19387.

@scooke said in How can I setup a 302 or 301 redirect from a subdomain to an external site?:

@fbartels I hope op will let us know if they tried this or not.

HUZZAH!! That worked!

I will have to see how advanced surfer will let me get with site design so it is not as ugly as while background and black text. But this is an AWESOME STARTING POINT!!

Thanks!

Hello, I need to setup URL redirect 302 from something.mydomain.com to externaldomain.com/path

Since I am pointing my A records to cloudron, my DNS provider is unable to do this for me and they told me it has to be done on Cloudron's end.

Thank you for your email! I'm happy to clarify.

Though the DNS of your account is hosted by Fastmail. We
can only set up such a redirect website if the A records
of the domain are pointing to our IPs. Currently, I can
see that you've pointed the A records to a different
service.

Please contact your WebHost and they'll let you know
what needs to be done to set up such a redirect. If they
suggest creating any additional records, you can do so
from the Settings->Domains->Edit(for your domain)->
Customize DNS screen.

Feel free to contact me with any additional questions!

@subtlecourage

I cant get any welcome emails to send, nor password reset emails. This is neutering my install.

@girish said in Outbound SMTP not working on my External Relay:

@subtlecourage Ah ok, so the smtp connection works well enough. Strange then, did you figure this one out already?

Sadly, no.
I keep getting these messages
[outbound] Ongoing connection failed to 66.111.4.140:465 : socket timeout waiting on connect

That is to fastmails servers

Is there any DNS setting that could cause that?

@girish
Please contact support and hyperlink the email that the cloudron admin can change?

@robi Fantastic.

I don't really know to much about docker or docker separation - so that's cool its already being addressed.

@sysadmin Those are all valid points.

Personally, I would probably want it on its own dedicated cloudron box anyways.

But I would be intrigued to hear what others have to say about it.

Also, that install script http://install.btcpayserver.org/ is awesome!

@girish No, I am using hetzner

I am getting a -bash: telnet: command not found

Ok, just kidding.

I installed it.

I got this

:~$ telnet smtp.fastmail.com 465
Trying 66.111.4.140...
Connected to smtp.fastmail.com.
Escape character is '^]'.
Connection closed by foreign host.

Gosh!

It would serve me to do a better job at searching before posting.

I just posted a similar post for this request

Is there a way we can get this in front of peoples eyes without spamming them?

This is something, that I would probably pay to have developed on cloudron as a priority.

Purpose: Spin up your own BTC exchange for an ecommerce solution that integrates well with WooCommerce. No need for KYC regulation. You can also offer your instance to friends and family and even the public for a safe, secure, and automated way to process payments.

The service is by default compatible via TOR and allows for several different altcoin transactions.

There are already a number of providers that have a one click install via docker-compose
Azure
Digital Ocean
AWS
Google Cloud

The requirements for the server are fairly minimal

This is naturally designed to run on a sub domain, so would fit it well/easily with Cloudron.

They have a prtty good community and their documentation is very indepth.

The features of the service offers Tons of Apps, internal and external wallet integrations, Invoices, Subscription payments AND refunds via crypto, a built in accounting system, and even Payjoin support

There are a variety of ways to have this hosted, and it just depends on what your specific use case is.

In summary, a very beneficial, fairly developed app to add to Cloudrons app collection.

@subtlecourage Let me know what you think of those logs

@nebulon said in 2 RSA SSH Keys per user on server:

@subtlecourage not exactly sure what you mean by this. You can keep many SSH keys in your laptop and provision different server with different keys. The SSH key on the client can be used for any user on the remote end, for which the server knows and accepts the public key part (ie stored in the user's ~/.ssh/authorized_keys file)

In the ~/.ssh/authorized_keys file, I have two SSH keys for user1.

SSH key1 is for computer1 and is on line1.
SSH key2 is for computer2 and is on line2.

Whichever key is on line 2, that is the machine that can SSH into my server.

If I use the above set up staying the same, and I try to SSH using user1's computer1 SSH key I get

No supported authentication methods available (Server sent: publickey)

If I switch the position of the keys so User1's computer1 key is on line2, then I am able to login successfully.

Based off of this, do I have to make a separate user with sudo access for each machine I am going to SSH into the server from?

@nebulon Ok, thats fine. I can add long password's to my ssh keys, but Im still stuck with only being able to ssh from one machine per user.

Do I really need a separate user per machine I ssh in from?

@girish Yeah, purely for security.

The odd thing is that there are only two lines, one key per line.

Is there a setting somewhere that I have to set to enable multiple ssh keys per user? I thought it just worked out of the box.

@girish Sent it your way!

What I am trying to accomplish

On a windows machine and on a linux machine I want to be able to SSH into my server.
I want to use separate Public/private keys for each machine.
I want to require a password, an SSH key, and TOTP to login.

What I have done

I have followed several guides and even different documentation on how to set this up. Multiple people and guides suggest that what I am trying to accomplish is possible. In addition, why would it be that a user can log in from one machine to the server?

I have a root and a second account set up to use 2fa and ssh on both machines. On linux it knows which to use due to magic (not sure how, but it does (I am using ubuntu if it helps), on windows I tell which profile to use which .pub file via putty).

I have tried both a manual setup (copy/pasta) of my ssh codes into authorized_keys file for both users using the correct keys, and I have also set it up where the SSH key from the windows user is in the authorized_keys file first then hopped over to the linux box and used ssh-copy-id command to append the linux public key to the servers authorized key file for each respective user.

What ends up happening

Only the ssh code that is last in the file is able to be detected. So if I have the windows ssh key last, then that works. If I have the linux ssh key last then only that works.

I genuinely do not understand why this is being such a pain. at this point its looking like a separate user for each machine will be used which isnt the end of the world, but is not most ideal.

Any tribal knowledge anyone has about this?

Oh, one other thing to share, in my /etc/ssh/sshd_config file

I have
AuthenticationMethods publickey,password publickey,keyboard-interactive
AND
PubkeyAuthentication yes

@seeker This would be amazing.

@girish I have DM'ed you the logs

@girish When I try that port (587) I get

I am using Fastmail

@fbartels

@fbartels said in Outbound SMTP not working on my External Relay:

Hi @subtlecourage,

• is that all the same domain for these error messages?

Yes, the domain name is the same across the board

• when you manually look up the mx records of these domains, do they exist?

• if you do a portscan on one of the mx hosts, does something listen on port 25?
  This one, I dont quite understand.

I am able to send and receive email via my domain through the hosted provider
Cloudron is set up to do outbound only

Hello all! I am trying to setup my server to house my employees, however, an issue I am running into is in my email logs I get the error below

I set up my SMTP outbound server according to the docs here -

I have a green circle next to my domain in my Domains subsection under my Email section

My email logs look like this

My SMTP status says

And the outbound settings are fully filled out.

I have verified that my proper port number is 465.

And Finally, I verified I am using the right username and password as well.

What am I doing wrong?