3 ms·

The Cloudron is intended to run on a VPS/Single tenant server. Apps get installed into this server as docker containers (this is so that apps are isolated from

The Cloudron is intended to run on a VPS/Single tenant server. Apps get installed into this server as docker containers (this is so that apps are isolated from each other). We also have some best practices in place for Docker containers - read only root fs, non-root user etc. We also have a change coming up where apps will run with user namespaces (but it is waiting on a patch from Docker). At the server level, the Cloudron will only expose ports from the server that the app requires. For most web apps, this means only port 443 (https) and 80. The server is otherwise completely locked down.

tmikaeld 10y ago
Thanks a lot for the reply, very informative! There's certainly an advantage in that you can run just about any app since it's docker based.
- gramakri 10y ago
  We can support a variety of frameworks and languages very easily (thanks to Docker!): * GitLab (rails, go) * Mattermost, Gogs (go) * Rocket.chat (node/meteor) * Wordpress, Piwik, Mediawiki, Rainloop (php) * Irc server (c++) * Taiga (python)
  - tmikaeld 10y ago
    Very nice, do you plan on adding a data-sharing layer on top - like sandstorm does? Like for example, a backup app (Ex. Bacula, UrBackup) might need access to other apps files. Or maybe a central backup solution for all/each app?
    - gramakri 10y ago
      For specific case of backups, apps on cloudron are already encrypted and backed up automatically to your S3 bucket. This happens at a app level, so you can restore apps individually as well. Though, I think you are asking if we some form data picker between apps. Like ownCloud can expose contacts that can get picked up from some mail app? Most apps these days expose a REST API. For example, GitLab sends notifications to Rocket.Chat via webhooks. I can edit files on ownCloud via webdav from my desktop and my radicale contacts are available via carddav to thunderbird. There's standards in place for each kind of data access and all these go beyond web apps. From what I have seen, even having a simple data-sharing layer require requires modifications to apps and this is a lot of work. Like sandstorm, cozy.io also has a interesting data layer but they simply decided to just make apps of their own mostly I am guessing (just guessing :-) ) the reason is that it is very hard to modify and more importantly convince existing app authors to take their changes upstream.
    - deleted 10y ago
      [deleted]

tmikaeld 10y ago

Thanks a lot for the reply, very informative! There's certainly an advantage in that you can run just about any app since it's docker based.

gramakri 10y ago
We can support a variety of frameworks and languages very easily (thanks to Docker!): * GitLab (rails, go) * Mattermost, Gogs (go) * Rocket.chat (node/meteor) * Wordpress, Piwik, Mediawiki, Rainloop (php) * Irc server (c++) * Taiga (python)
- tmikaeld 10y ago
  Very nice, do you plan on adding a data-sharing layer on top - like sandstorm does? Like for example, a backup app (Ex. Bacula, UrBackup) might need access to other apps files. Or maybe a central backup solution for all/each app?
  - gramakri 10y ago
    For specific case of backups, apps on cloudron are already encrypted and backed up automatically to your S3 bucket. This happens at a app level, so you can restore apps individually as well. Though, I think you are asking if we some form data picker between apps. Like ownCloud can expose contacts that can get picked up from some mail app? Most apps these days expose a REST API. For example, GitLab sends notifications to Rocket.Chat via webhooks. I can edit files on ownCloud via webdav from my desktop and my radicale contacts are available via carddav to thunderbird. There's standards in place for each kind of data access and all these go beyond web apps. From what I have seen, even having a simple data-sharing layer require requires modifications to apps and this is a lot of work. Like sandstorm, cozy.io also has a interesting data layer but they simply decided to just make apps of their own mostly I am guessing (just guessing :-) ) the reason is that it is very hard to modify and more importantly convince existing app authors to take their changes upstream.
  - deleted 10y ago
    [deleted]