@timconsidine thanks for the fast reply.
Ok! Not a beefy one. I’m considering setting up these up for customers on an individual basis, and it seems a simple low tier server would be all that’s needed to run these.
Probably a server with 20gb ram for multi number/family use cases would be appropriate.
sorry to revive this conversation, @privsec and @timconsidine, but how powerful of a server do you need?
Have a ton of users that need to print various types of documents? Want to charge per page? Need to keep track of who printed what, and when?
Introducing SAVAPAGE
LINK: https://www.savapage.org/
Out of curiosity, did you get this from Michael Bazzell?
https://inteltechniques.com/voip.linphone.html
https://inteltechniques.com/sms.html
@fbartels Optimism and hope? /s
Great points.
User-agent:ia_archiver
Disallow: /
User-agent: archive.org_bot
Disallow: /
User-agent: *
Disallow: /
User-agent: Rogerbot
User-agent: Exabot
User-agent: MJ12bot
User-agent: Dotbot
User-agent: Gigabot
User-agent: Baiduspider
User-agent: Ezooms
User-agent: Nutch
User-agent: archive.org_bot
User-agent: MJ12bot
User-agent: YandexBot
User-agent: AhrefsBot
User-agent: HTTrack
User-agent: Wget
User-agent: Zeus
User-agent: BLEXBot
User-agent: burroboot
User-agent: DOC
User-agent: MJ12Bot
User-agent: SemrushBot
User-agent: spbot
User-agent: UbiCrawler
User-agent: Zao
User-agent: Netsparker
User-agent: sitecheck.internetseer.com
User-agent: Zealbot
User-agent: MSIECrawler
User-agent: SiteSnagger
User-agent: WebStripper
User-agent: WebCopier
User-agent: Fetch
User-agent: Offline Explorer
User-agent: Teleport
User-agent: TeleportPro
User-agent: WebZIP
User-agent: linko
User-agent: Microsoft.URL.Control
User-agent: Xenu
User-agent: larbin
User-agent: libwww
User-agent: ZyBORG
User-agent: Download Ninja
User-agent: grub-client
User-agent: k2spider
User-agent: NPBot
User-agent: WebReaper
User-agent: CyotekWebCrawler
User-agent: Whizbang
User-agent: UniverseBot
User-agent: SlySearch
Disallow: /
@robi So how can I verify that the limit is actually in effect?
So I do see that on 1072
if(config_cache('pixelfed.enforce_account_limit') == true) {
$size = Cache::remember($user->storageUsedKey(), now()->addDays(3), function() use($user) {
return Media::whereUserId($user->id)->sum('size') / 1000;
});
$limit = (int) config_cache('pixelfed.max_account_size');
if ($size >= $limit) {
abort(403, 'Account size limit reached.');
}
}
However, if you try to disable then re-enable to limit, it wont show back up.
Also, if I change the limit, it wont reflect that in the GUI of any logged in user.
@murgero said in How to update PixelFed storage per user:
@subtlecourage Don't know if it helps, but maybe: https://docs.pixelfed.org/running-pixelfed/installation.html
Thank you for that, with that then, I have discovered a bug within the app.
Bug 1: When I change LIMIT_ACCOUNT_SIZE=true to LIMIT_ACCOUNT_SIZE=false, restart the app, then revert the changes - the limit (atleast graphically) never shows back up.
Bug 2: When I change MAX_ACCOUNT_SIZE=1000000 to MAX_ACCOUNT_SIZE=10000000000 and restart the app, the UI still shows the original 1Gb file limit
This was performed with a vanilla install, version 1.6.1
@brutalbirdie Yup, all sorted and working as intended for now.
I have upvoted your comment above. Thank you.
The title says it all, the default is 1Gig per user, Id like to set it to 10gig per user, any help or ideas on this?
@brutalbirdie said in Volumes are not working:
@subtlecourage OK so default the volume is mounted with permissions for root.
You can check this in the web terminal:
ls -lah /media/ root@d2ff17d2-7106-48bc-87bc-fab2342c0059:/app/code# ls -lah /media/ total 12K drwxr-xr-x 1 root root 4.0K Oct 3 20:07 . drwxr-xr-x 1 root root 4.0K Oct 3 20:07 .. drwxr-xr-x 3 root root 4.0K Oct 3 20:09 portfolioBut this is wrong. If you check the permissions of
/app/data/ls -lah /app/data/ rwxr-xr-x 4 cloudron cloudron 4.0K Oct 3 20:06 . drwxr-xr-x 1 root root 4.0K Oct 3 20:07 .. drwx------ 3 cloudron cloudron 4.0K Oct 3 20:09 config drwxr-xr-x 2 cloudron cloudron 4.0K Oct 3 20:06 foldersThe user is cloudron.
We can also check which user is running the process:
ps uax USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1 0.1 0.0 28480 23648 pts/0 Ss+ 20:17 0:00 /usr/bin/python3 /usr/bin/supervisord --configuration /etc/supervisor/supervisord.conf --nodaemon -i syncthing cloudron 12 0.0 0.0 725144 16408 pts/0 Sl 20:17 0:00 /app/code/syncthing -gui-address=127.0.0.1:3000 -home=/app/data/config -no-browser -auditfile=- root 13 0.0 0.0 18840 6184 pts/0 S 20:17 0:00 nginx: master process /usr/sbin/nginx -c /app/code/nginx.conf cloudron 18 0.0 0.0 19188 3376 pts/0 S 20:17 0:00 nginx: worker process cloudron 19 0.0 0.0 18984 2372 pts/0 S 20:17 0:00 nginx: cache manager process cloudron 24 2.2 0.0 728088 49152 pts/0 SNl 20:17 0:02 /app/code/syncthing -gui-address=127.0.0.1:3000 -home=/app/data/config -no-browser -auditfile=- root 39 0.0 0.0 4240 3460 pts/1 Ss 20:17 0:00 /bin/bash root 58 0.0 0.0 5896 2828 pts/1 R+ 20:19 0:00 ps uaxand the process is also running as user cloudron.
Now you can simple change the permissions for
/media/portfoliochown -R cloudron:cloudron /media/portfolioThen reload Syncthing (browser refresh).
Now there is this warning / error hmmmm
Sadly this did not solve my problem
I have followed your guide step by step and I get 
I have ran your commands, 
and I have restarted the app, twice after running those.
But it still has not done anything
@robi said in CWTCH - Surveilance proof messaging:
Confidant Mail
Oh thats neat!
https://www.confidantmail.org/docs/
@timconsidine I fully agree with
I guess it comes down to the generally low level of tech knowledge in the wider public.
When people hear the word "Encryption" they misunderstand exactly what that means.
E2EE is a fundamental human right, regardless if it can be exploited by criminals.
Having a trustless ecosystem that allows E2EE comms. is vital for the future.
@brutalbirdie said in Volumes are not working:
@subtlecourage I will try to replicate your problem.
Thank you, it is appreciated.
So it is located there, in the three drop down items, but I can not use the volume.
/media/portfolio
/portfolio
Error messages
Came across this recently, and love to see this on cloudron!
Site address: https://cwtch.im/
Serve install/set up: https://git.openprivacy.ca/cwtch.im/server
What is Cwtch?
Cwtch (/kʊtʃ/ - a Welsh word roughly translating to “a hug that creates a safe place”) is a decentralized, privacy-preserving, multi-party messaging protocol that can be used to build metadata resistant applications.
Decentralized and Open: There is no “Cwtch service” or “Cwtch network”. Participants in Cwtch can host their own safe spaces, or lend their infrastructure to others seeking a safe space. The Cwtch protocol is open, and anyone is free to build bots, services and user interfaces and integrate and interact with Cwtch.
Privacy Preserving: All communication in Cwtch is end-to-end encrypted and takes place over Tor v3 onion services.
Metadata Resistant: Cwtch has been designed such that no information is exchanged or available to anyone without their explicit consent, including on-the-wire messages and protocol metadata.
I have added the volume in Cloudron
Its a local filesystem mount
I have added the mount in the app Lychee and Syncthing
However, when I got to either apps file manager, there is no Media folder
There is no media folder
Any ideas?
@girish I have both HDD and SSD
I resolved this for now, but @staff may want to look into this.
The Moodle app takes around 7-10 minutes to install initially. Once that has taken its course, I am then able to adjust the REDIS and Resources section.
When I view the logs for the app, I see
Aug 14 17:10:50 ==> Fresh installation, performing Moodle first time setup
Aug 14 17:10:50 ==> Installing new moodle
Aug 14 17:10:51 Database tables already present; CLI installation cannot continue.
Moodle app version: Moodle 3.11.2
Cloudron app version: v6.3.5 (Ubuntu 20.04.2 LTS)
It is doing something weird though.
It says it should be coming from noreplay@domain.com, but instead it is coming from imanalias@domain.com
Any ideas?
@girish said in Outbound SMTP not working on my External Relay:
@subtlecourage my bad, I should have noticed. The issue here is that Cloudron's relay system only supports STARTTLS. This means that you have to use port 587 in your relay. Port 465 is pure "TLS" (as opposed to port 587 which is opportunistic TLS). Can you try with port 587? If that doesn't work, let me debug further.
Hah, that solved it.
Thank you.
@ccfu
I have never used either.
to reinforce the noob, any documentation on that?
Here is the following scenario.
User 1 has unedited photos, they want to send User 2 these unedited photos, have User 2 edit them, and then after doing what User 2 needs them for, User 2 will sends them back.
Im trying to come up with a way where these two users could swap photos easily, make publicly available the edited photos, and have a non-public folder for the unedited files.
I would want these pictures hosted online in something like lychee.
The more automated the better. My users are extremely not tech savvy, so I need the solution to be as simple as sending a text message or sending an email and having the photos be where the server can pull from and then auto publish the edited photos.
My thought was If I set up a mount for Photos and attach that to Lychee, then I could create two folders, one for public, one for not public photos.
But what I don't know how to do is to facilitate getting the photos there easily. What would be really awesome is if I would set up some sort of nextcloud or syncthing sync so these users accessed two shared folders. One for edited/unedited photos alike. But in order to have the photos appear in the mount, i'd need to set the app up on the server (it is a VPS with 9tb of storage, so I am not worried about space) right? And then what about backups?
I guess I am just hoping for some advise from the community here for this.
@girish said in What's coming in Cloudron 6.3:
Make email setup inside apps optional. This will make it possible to configure specific apps to use some external service for mail delivery directly and the Cloudron package won't touch their mail settings.
Volumes - make mounting easier by automating fstab/exports entries
The email feature is something I think will help my use caase.
The volume feature is freaking phenomenal.
You are all amazing!
It still loads, but for a millisecond.
I almost would rather a pretty background and better design to load for 5 seconds or so. But I guess ill just have to play with it.
So how is this one coming along?Anyone deploy it successfully?
@fbartels said in How can I setup a 302 or 301 redirect from a subdomain to an external site?:
Hi @subtlecourage,
this could be achieved with the surfer app and a simple html. You can read more about it at https://forum.cloudron.io/post/19387.
@scooke said in How can I setup a 302 or 301 redirect from a subdomain to an external site?:
@fbartels I hope op will let us know if they tried this or not.
HUZZAH!! That worked!
I will have to see how advanced surfer will let me get with site design so it is not as ugly as while background and black text. But this is an AWESOME STARTING POINT!!
Thanks!
Hello, I need to setup URL redirect 302 from something.mydomain.com to externaldomain.com/path
Since I am pointing my A records to cloudron, my DNS provider is unable to do this for me and they told me it has to be done on Cloudron's end.
Thank you for your email! I'm happy to clarify.
Though the DNS of your account is hosted by Fastmail. We
can only set up such a redirect website if the A records
of the domain are pointing to our IPs. Currently, I can
see that you've pointed the A records to a different
service.
Please contact your WebHost and they'll let you know
what needs to be done to set up such a redirect. If they
suggest creating any additional records, you can do so
from the Settings->Domains->Edit(for your domain)->
Customize DNS screen.
Feel free to contact me with any additional questions!
I cant get any welcome emails to send, nor password reset emails. This is neutering my install.
@girish said in Outbound SMTP not working on my External Relay:
@subtlecourage Ah ok, so the smtp connection works well enough. Strange then, did you figure this one out already?
Sadly, no.
I keep getting these messages
[outbound] Ongoing connection failed to 66.111.4.140:465 : socket timeout waiting on connect
That is to fastmails servers
Is there any DNS setting that could cause that?
@girish
Please contact support and hyperlink the email that the cloudron admin can change?
@robi Fantastic.
I don't really know to much about docker or docker separation - so that's cool its already being addressed.
@sysadmin Those are all valid points.
Personally, I would probably want it on its own dedicated cloudron box anyways.
But I would be intrigued to hear what others have to say about it.
Also, that install script http://install.btcpayserver.org/ is awesome!
@girish No, I am using hetzner
I am getting a -bash: telnet: command not found
Ok, just kidding.
I installed it.
I got this
:~$ telnet smtp.fastmail.com 465
Trying 66.111.4.140...
Connected to smtp.fastmail.com.
Escape character is '^]'.
Connection closed by foreign host.
Gosh!
It would serve me to do a better job at searching before posting.
I just posted a similar post for this request
Is there a way we can get this in front of peoples eyes without spamming them?
This is something, that I would probably pay to have developed on cloudron as a priority.
Purpose: Spin up your own BTC exchange for an ecommerce solution that integrates well with WooCommerce. No need for KYC regulation. You can also offer your instance to friends and family and even the public for a safe, secure, and automated way to process payments.
The service is by default compatible via TOR and allows for several different altcoin transactions.
There are already a number of providers that have a one click install via docker-compose
Azure
Digital Ocean
AWS
Google Cloud
The requirements for the server are fairly minimal
This is naturally designed to run on a sub domain, so would fit it well/easily with Cloudron.
They have a prtty good community and their documentation is very indepth.
The features of the service offers Tons of Apps, internal and external wallet integrations, Invoices, Subscription payments AND refunds via crypto, a built in accounting system, and even Payjoin support
There are a variety of ways to have this hosted, and it just depends on what your specific use case is.
In summary, a very beneficial, fairly developed app to add to Cloudrons app collection.
@subtlecourage Let me know what you think of those logs
@nebulon said in 2 RSA SSH Keys per user on server:
@subtlecourage not exactly sure what you mean by this. You can keep many SSH keys in your laptop and provision different server with different keys. The SSH key on the client can be used for any user on the remote end, for which the server knows and accepts the public key part (ie stored in the user's
~/.ssh/authorized_keysfile)
In the ~/.ssh/authorized_keys file, I have two SSH keys for user1.
SSH key1 is for computer1 and is on line1.
SSH key2 is for computer2 and is on line2.
Whichever key is on line 2, that is the machine that can SSH into my server.
If I use the above set up staying the same, and I try to SSH using user1's computer1 SSH key I get
No supported authentication methods available (Server sent: publickey)
If I switch the position of the keys so User1's computer1 key is on line2, then I am able to login successfully.
Based off of this, do I have to make a separate user with sudo access for each machine I am going to SSH into the server from?
@nebulon Ok, thats fine. I can add long password's to my ssh keys, but Im still stuck with only being able to ssh from one machine per user.
Do I really need a separate user per machine I ssh in from?
@girish Yeah, purely for security.
The odd thing is that there are only two lines, one key per line.
Is there a setting somewhere that I have to set to enable multiple ssh keys per user? I thought it just worked out of the box.
What I am trying to accomplish
On a windows machine and on a linux machine I want to be able to SSH into my server.
I want to use separate Public/private keys for each machine.
I want to require a password, an SSH key, and TOTP to login.
What I have done
I have followed several guides and even different documentation on how to set this up. Multiple people and guides suggest that what I am trying to accomplish is possible. In addition, why would it be that a user can log in from one machine to the server?
I have a root and a second account set up to use 2fa and ssh on both machines. On linux it knows which to use due to magic (not sure how, but it does (I am using ubuntu if it helps), on windows I tell which profile to use which .pub file via putty).
I have tried both a manual setup (copy/pasta) of my ssh codes into authorized_keys file for both users using the correct keys, and I have also set it up where the SSH key from the windows user is in the authorized_keys file first then hopped over to the linux box and used ssh-copy-id command to append the linux public key to the servers authorized key file for each respective user.
What ends up happening
Only the ssh code that is last in the file is able to be detected. So if I have the windows ssh key last, then that works. If I have the linux ssh key last then only that works.
I genuinely do not understand why this is being such a pain. at this point its looking like a separate user for each machine will be used which isnt the end of the world, but is not most ideal.
Any tribal knowledge anyone has about this?
Oh, one other thing to share, in my /etc/ssh/sshd_config file
I have
AuthenticationMethods publickey,password publickey,keyboard-interactive
AND
PubkeyAuthentication yes
@seeker This would be amazing.
@girish I have DM'ed you the logs
@girish When I try that port (587) I get 
I am using Fastmail
@fbartels said in Outbound SMTP not working on my External Relay:
Hi @subtlecourage,
- is that all the same domain for these error messages?
Yes, the domain name is the same across the board
- when you manually look up the mx records of these domains, do they exist?
- if you do a portscan on one of the mx hosts, does something listen on port 25?
This one, I dont quite understand.
I am able to send and receive email via my domain through the hosted provider
Cloudron is set up to do outbound only
Hello all! I am trying to setup my server to house my employees, however, an issue I am running into is in my email logs I get the error below
I set up my SMTP outbound server according to the docs here -
I have a green circle next to my domain in my Domains subsection under my Email section
My email logs look like this
My SMTP status says
And the outbound settings are fully filled out.
I have verified that my proper port number is 465.
And Finally, I verified I am using the right username and password as well.
What am I doing wrong?