I believe it is mostly working. The link you provided gave all green checks. I think the main issue was the small amount of RAM Matrix and/or Riot was given by default. I bumped them both up to 2 gigs or so and that seemed to be the main fix.

I have the same issue as @murgero, I can now see federated rooms, but I get an error when trying to join them.

Thanks for working on this! I've tested it out and it works great so far, both Matrix and Riot.

One issue I see, and this may just be me not being very familiar with Matrix, is that when I go to search the room directory for Matrix.org, I get Riot failed to get the public room list. Internal server error. I don't know if I am supposed to be able to search and connect to Matrix.org rooms, but I thought I should be able to. Is this a bug or just me?

Thanks again!

Thanks for working on it! Maybe @girish can help with the nginx config or at least confirm if changes are possible to accommodate Authelia.

Having it as a Cloudron app would be great too. Hopefully both is possible. @girish Any idea if this is possible?

I wanted to suggest Authelia as a way of providing Cloudron with SSO, U2F, TOTP, etc. for all apps, especially those which do not support it natively. It seems like it's already packaged for Docker.

Just something to look into. Having U2F with my Yubikey for all Cloudron services would be pretty sweet.

This looks great, I'd love this on Cloudron.

Awesome, I'm glad it's a possibility. It's obviously not a high priority feature, but do you think it could be added to the roadmap at some point?

I'm not sure I have the Cloudron architecture down right, but I thought that each was reverse proxied through the main Cloudron nginx instance? If so, it seems like it would be easy to configure per app client cert authentication, whether the app behind supports it or not. If each app is running its own webserver, which may be the case, then it would be app dependent and not nearly as feasible.

Thanks for the recommendation @girish. I can look into it, but I'd prefer not to involve a 3rd party if possible.

I'd like to request client certificate authentication as an additional feature. It may not be appropriate for every app, but an option to enable it for some would add a great extra level of security.

Thanks.