Cloudron Forum

Yes - I am facing the same issue. It says its updated to 1.117.0 but has not actually updated.

Ok, I have managed to get it working... it seems that the type of "openid-jwks-endpoint" I was using was not correct.

@joseph Sorry meant "saml-callback-url".... I am trying both OpenID & SAML to see which one will start working.

@joseph So I have managed to find what I need what have been unable to locate what "openid-redirect-uri" is... It says it would be from the provider but that isn't correct.

@joseph Yes I have but the bit of docs for the SAML doesn't make it clear what custom properties it needs.

I feel like I am blind, but I can't see what & where I am meant to configure the SAML extension.

I have tried reading over the manual for configuration, but it doesn't exactly point out where to configure & what variables you need to configure.

Any help is appreciated.

@AartJansen It's still not considered stable.
You should always follow 3-2-1 regardless.

@girish Same here, I've not heard of FUTO before this. I hope that a 1-time purchase will work, but I do want the option to be able to donate more.

We all want them to be sustainable (we don't want the project to die) but how this update was presented to the community raised a lot of alarm bells for lots of people mainly due to how it was all worded & presented.

I fully support what they are trying to do, but I do not feel that monthly fees is the best way of doing it - having the option like they have at the moment to purchase it one time is great.

@nebulon

All agreed - Nothing wrong with making money & making sure its sustainable long term, but I just don't want to lose this project to paywalls.

Immich have made photos actually private for me once again - Privacy is a right not a luxury and I would hate for it to become the next victim to lose what it was in the beginnings.

I want to share with everyone here that there has been a whole debate around this as lots of us (myself included) are concerned with how everything is worded.

I personally won't be updating it till the issue around "licence" problem is worked out & I would suggest everyone do the same for now.

It's an amazing bit of software, but The wording is too "corporate", using the words like "free trial", & "licence" makes it sound like the project we know, love & have a thriving community for is going down the path or projects who pay-walled features that were once free.

Every project has to be sustainable - we all get that, but this was not how it should have been presented, worded or explained.

For those who want to read on what I am talking about:
https://github.com/immich-app/immich/discussions/11186#top

https://github.com/immich-app/immich/discussions/11186#discussioncomment-10086948

@nebulon thanks for this document however the current package for Cloudron comes only with OIDC with login with Cloudron. There is no current option not to use OIDC with Cloudron. Is that something they can be changed to give the option to let leave the user management to the app?

@micmc Brilliant! That seems to have fixed the issue. Thanks for your help.

@micmc I will give that a try. Will come back once I've manage to test it.

@girish I will have to contact Cloudflare to see if they can help as most of the reported issues such as Dynamic IP or misconfigured DNS I have ruled out. Thanks for your help.

Hello,

Not sure if it would be possible to add this but allowing Non-Cloudron OpenID Providers.

At the moment it will automatically set up support to sign in using Cloudron however I know for some installs and myself it would be preferred using no provider or a custom provider.

I seem to be having an issue with Cloudflare Proxying.

It keeps thinking my web server is not reachable but if I turn proxying off it will work & you can access the URL without issue.

I have tried to research, but I can't see to see a clear way of fixing it.

Hope someone can help.

@girish So after running a few tests it seems that Traccar does not like the domain to have a "/" at the end, no error logs to support this, but it does track with what was happening - typically my SSO system will want this, so I have made some changes, and it is all working now.

@necrevistonnezr Though Linkding is a good solution for a Bookmark manager, It solves a different issue than Linkwarden.
Linkwarden is more to store links for later, not links you are going to access a lot.

@girish Yeah it's not very helpful error message.

@nebulon the config is as below (I have removed the actual URLs);

<entry key="openid.clientId">CLIENTID</entry>
<entry key="openid.clientSecret">CLIENTSECRET</entry>
<entry key="openid.issuerUrl">https://DOMAIN/application/o/traccar/</entry>
<entry key="openid.authUrl">https://DOMAIN/application/o/authorize/</entry>
<entry key="openid.tokenUrl">https://DOMAIN/application/o/token/</entry>
<entry key="openid.userInfoUrl">https://DOMAIN/application/o/userinfo/</entry>