Cloudron Forum

I have just added a couple of applications wishes here:

• Urlaubsverwaltung - https://forum.cloudron.io/topic/14719/urlaubsverwaltung-on-cloudron-application-for-leave-management-vacation-requests-absences-sick-notes-and-optionally-overtimes
• Zeiterfassung - https://forum.cloudron.io/topic/14720/zeiterfassung-an-application-for-tracking-working-hours-and-fulfilling-legal-requirements-for-time-tracking

These might be relevant for you @andrewwri (on Cloudron, or directly via the app provider)

Ah! I found the original request: https://forum.cloudron.io/topic/6216/vacation-management-urlaubsverwaltung-cloud
Sorry for the dupe. Please feel free to delete/merge/replace.

• Title: Zeiterfassung - An application for tracking working hours and fulfilling legal requirements for time tracking

• Main Page: https://urlaubsverwaltung.cloud/zeiterfassung/
• Git: https://github.com/urlaubsverwaltung/zeiterfassung
• Licence: e.g. AGPL-3.0 license
• Dockerfile: No, but dockerfile / Docker compose available
• Demo: https://urlaubsverwaltung.cloud/demo/

• Summary: Is time tracking a big topic for you guys right now too? That works out well!

Get started with time tracking - The following functions are already included:

• Recording of times: Clock-in/Clock-out recording or individual time bookings
• Stopwatch mode
• Visualization of hours worked on a weekly and monthly level
• Reports for your own recorded hours (CSV download)
• Reports for supervisors (CSV download)

• Notes: Straigth forward work time recording, DVSGO compliant, translated in English and a few other languages, possible integration with Holiday/absences management app

• Alternative to / Libhunt link: Maybe Kimai?
• Screenshots:
  
  

• Title: Urlaubsverwaltung on Cloudron - Application for leave management: vacation requests, absences, sick notes and optionally overtimes

• Main Page: https://urlaubsverwaltung.cloud/
• Git: https://github.com/urlaubsverwaltung/urlaubsverwaltung
• Licence: e.g. Apache-2.0 license
• Dockerfile: None that I can find but docker image / docker compose available
• Demo: https://urlaubsverwaltung.cloud/demo/

• Summary: Urlaubsverwaltung is a web application for electronically managing absences.
  Using vacation requests, an employee can submit a request that can be approved, rejected, or canceled by the respective authorized persons. Each employee can maintain their overtime to always keep track and if a person should become unavailable, the sick note can be directly recorded.

• Notes: DVSGO compliant, seems easy/straight forward with additional mobile apps, translated in English and a few other languages. Integration possible with Zeiterfassung - I swear I had seen a request for this on Cloudron in the past, but at last I cannot find it in the App wishlist anymore.

• Alternative to / Libhunt link:
• Screenshots:
  
  

@andrewwri said in Staff holiday/leave/sickness tracker:

To be honest, I'm not really involved in the community around Cloudron very much

You should! There is a bunch a welcoming and very knowledgeable people around here.

do these sorts of projects tend to end up being available as apps on Cloudron?

Does Cloudron publish app regularly? -> Yes, but I think that the demands/wishes exceed the capacity
How does one project/app get published over another? -> The would be a question for @staff

Hi @andrewwri,

I have limited exposure to this at the moment but I am somewhat tracking the topic also.

Maybe you could try helping here, if this is still active/relevant:
https://forum.cloudron.io/topic/11062/horilla-open-source-hr-software/28

Otherwise Kimai might also work for you - Available as Cloudron App already.

Looks like the latest Freescout release fixes this - Thanks for packaging and releasing it already.

Thanks @nebulon - It seems as overnight contributors have reported/added more information. I will certainly contribute if anything meaningful comes up from our side. In the meantime, the issue remains for now (previous version works though.)

So far, I have no reason to think that this anything other than exclusively exchange-releated.

I spent a couple of hours trying to troubleshoot this, but at last it appears that there is an issue with Freescout latest release and fetching email from Microsoft exchange-based mailboxes.

Symptoms:

• Trying to fetching emails from Microsoft Exchange based mailbox returns the following error:

<< * OK The Microsoft Exchange IMAP4 service is ready. (BACKENDAUTHENTICATE) [RgBSADQAUAAyADgAMQBDAEEAMAAzADQAOAAuAEQARQBVAFAAMgA4ADEALgBQAFIATwBEAC4ATwBVAFQATABPAE8ASwAuAEMATwBNAA==]
TAG1 AUTHENTICATE XOAUTH2 .....
<< TAG1 NO AUTHENTICATE failed.

Please see here:
https://github.com/freescout-help-desk/freescout/issues/5101

Restoring the app to before the update brings back the fetching of emails.

Might be interesting to put the update on hold/roll back the update until this is solved?

Unless I misunderstand @vk182's post, This seems like something that was described here, here , and here.
As well as some old references here.

Looks like a feature in high demand, with a fair amount of use cases...

I hear that and I appreciate the work that has been done on both Cloudron as well as Stirling-PDF's part (the new version looks like quite the upgrade).

However, it does not gives me clarity on where things stands with regards to OIDC/SSO enabled instances, and which are now subject to the change.

If I am to try to make sense of this, the new version of Stirling-PDF comes with changes of the following order:

1. Either you stick to an unlicensed/free-licensed private instance (requiring log-in)

• you get 5 user max
• you still do not get seamless authentication (SSO) with your OIDC/OAuth provider
• you do not get access to advance/enterprise features, but only basic ones (the definition of which I am not certain of, for now as well as future release)

2. Or you change to a licensed private instance

• the price is either per month per server (83,25 Euro - No SSO) or per month per user (6,67 Euro - SSO included)
  This is a steep steep price increase compared to the prior version of the software / previous license.
• you get access to advanced feature

3. Or you get to run a public instance with no login requirement

• possible performance impact on server
• degraded security
• access to only basic features.
• is it still limited to 5 concurrent users?

Don't get me wrong - I understand the predicament for open-source developers to make a living.
However I do think a different approach, both taking care of the situation set by previous license conditions, as well as, not price-locking features that were previously free would have greatly changed the perception of this situation - We are now clearly in the ssotax.org category here.
This also sets a precedent in handling this type of situation, which does not inspire the best of confidence for the future ones.

At this stage, unfortunately, I cannot recommend this software anymore, nor can I continue using it/providing it to my users/customers. Sad face.

I know that this are fairly fresh changes. However I am not clear if using Cloudon's OIDC still works with this new package.

If it is, then I am also not clear on whether this requires an enterprise license from the get go or not, and what is left of the "grand-fathered" OIDC accounts originally created.

If not, then this is a disappointment (from Stirling - not from Cloudron) and contradicts my understanding of what @froodle said here when I mentioned the topic and tried to anticipate these changes.

Hi,

I have been facing issues with 2FA and 2FA enforcement since migrating to 9.0.x (not sure if this came with 9.0 or the later minor updates).

1. (minor issue - arguably more of a discussion topic) Resetting 2FA for a user.
   At the moment, to reset 2FA for a user, you need to edit the user profile and click on the "Reset 2FA" button.
   The Reset 2FA button then disappear, but you remain on the user profile, with for only further action the "Cancel" button (the "Save" button remain greyed out / inactive).
   I found that this leaves doubt as to whether the "reset 2FA" action has been taken into account / has worked.
   (Only testing reveals that is has)

An option would be to make the save button active once the "Reset 2FA" button has been pressed.
An alternative would be to display a validation message confirming that the 2FA has been reset for the user

2. (major issue) 2FA enforcement does not work.
   Consider this: my server has the User > Settings > "Require users to set up 2FA" turned on (it was already on prior to V9 upgrade).
   Problem: at the moment, there is no enforcement of 2FA registration for the end user, either for a brand new created user or when resetting 2FA for an existing user.
   Upon the related user login, there no prompt to the user to register for 2FA. The only way to do so, is voluntarily: by going into the user profile and clicking "enable 2FA". So anything but a enforcement/requirement.

Turning the server setting off/on has no incidence on the situation - I have also tested this connecting from multiple device/browser with no differences in the result.
I see no relevant log entries and the server appears to be healthy.

This is of course an important issue, and create a security hole.
The question is whether I am the only one experiencing this on our servers or if some other fellow cloudronians are too?

I am also unsure where to look further to trouble shoot this, so any help is appreciated.

Thanks,

Same here about the backup.
I have also witnessed the automatic update to from v8 to v9. However, this was on only my unlicensed/free Cloudron servers. All licensed ones were waiting on manual trigger (probably because v9 is still officially not released), which once triggered went smoothly.

Another UI thing:

• on the users page (https://my.demo.cloudron.io/#/users), if any user belongs to a lot of groups, then you need to scroll horizontally to access the "..." edit menu for any user:

However, in doing so, you loose sight of the user/username and thus it becomes challenging to edit the right user.
Additionally, the horizontal scroll bar indication, only appears at the bottom of the user list, not the bottom of the page.
Hence, if you have a good number of users:

• you first need to realize that the edit menu is hidden because of horizontal scrolling.
• Then you need to get to the bottom of the list to access the horizontal scroll bar
• Scroll horizontally
• Then you need to scroll back up to the user that you wish to edit, but then can but sure anymore since the username is hidden.

Currently, your best best in this situation is to search for the specific user hopping that you have enough information to do so.

Potentially, the "..." edit menu should "float" at the end of the line and be accessible at all time, without horizontal scrolling necessary.

Hopefully this makes sense.

@msbt said in Cloudron 9.0 (beta) bug reports:

• If a server requires a reboot, would be nice to be able to do that directly from the notification popup (in 8 you had the dedicated notifications page where you you push the button)

In passing, I have also looked for a notification page anywhere, but could not find this - this means that once the notifications are acknowledged, there is not traces of them anywhere, anymore. I sometimes used the notifications page in v8.x.x to go back and see for example, for how long a notification had been going on, to inform of a situation (e.g. problem with backup etc..). I found it useful.

Possibly a bug - Maybe more of a specification/documentation situation.

I updated one of our servers from v8.3.2 to v9.0.7 yesterday. The overnight S3 backup to a local device failed with the following error:

Backup endpoint is not active: Error listing objects. code: undefined message: self-signed certificate HTTP: undefined

Up until now, the server was configured to backup to a s3-v4 compatible storage location using https and allowing self signed certificate.

While troubleshooting, changing the s3 endpoint from https to http and updating the cloudron config accordingly resolved the issue and allowed for backup to proceed.
To note:

• the (local) address and port of the S3 endpoint have not changed
• I regenerated the self signed certificate and made another attempt but got no luck here either.

I am not clear whether https id part of the s3 specifications or not. However, https with S3 worked fine with 8.3.2 so it is:

• either a bug in v9.0.7
• or a change / normalization within cloudron for which a more meaningful error message (or form validation) and/or documentation would be helpful.

Hopefully this helps.

I believe that this is what I tried to convey here also.

Would be a nice addition indeed especially if made available not only for LAMP/Surfer app (already a good start) but also others ones.

Thanks for the update.