why use the phoronix link when the original source has much more info? https://nextcloud.com/blog/open-source-email-pioneer-roundcu...
Roundcube open-source webmail software merges with Nextcloud
101–110 of 259 posts
Re: Roundcube open-source webmail software merges with Nextcloud
#102Speaking of Roundcube: If you're hosting it without apache (as in: without htaccess support), make sure the logs directory and files aren't exposed publicly. They can contain access tokens and even encrypted passwords (encrypted with a default password unless manually changed during installation), and follow a known file structure, so it's quite common for people to get owned this way.
> ~~If you're hosting it without apache (as in: without htaccess support),~~ make sure the logs directory and files aren't exposed publicly.
Never expose any logs to strangers for anything anywhere
Re: Roundcube open-source webmail software merges with Nextcloud
#103I've been running Nextcloud for family collaboration purposes since before the fork from Owncloud. I've been pretty happy with it overall. My biggest gripe with it is the increasing schizophrenia of the UX devs. One thing I _loved_ about Nextcloud was that they paid a lot of attention to making it easy to navigate and use. The newer UX "enhancements" seem to be all about maximizing (useless) whitespace and making eve…
> upgrades are a breeze
upgrades are a breeze even without docker... the self updating function of nextcloud works very well.
Re: Roundcube open-source webmail software merges with Nextcloud
#104I've been running Nextcloud for family collaboration purposes since before the fork from Owncloud. I've been pretty happy with it overall. My biggest gripe with it is the increasing schizophrenia of the UX devs. One thing I _loved_ about Nextcloud was that they paid a lot of attention to making it easy to navigate and use. The newer UX "enhancements" seem to be all about maximizing (useless) whitespace and making eve…
It's even easier with the all-in-one (aio) solution. Upgrades via a simple UI, automatic Borg Backups, etc.
I run this on hetzner cloud with one storagebox for the files and one storagebox for the backups. Runs nicely, gets updates, and as the storageboxes do automatic snapshots, I have double backups.
Re: Roundcube open-source webmail software merges with Nextcloud
#105Given Nextcloud's track record that doesn't bode well for Roundcube's future. We tried to make Nextcloud work for us for years, but it's just too terribly clunky, unstable, bug-ridden, and customer hostile. I hope none of that rubs off on roundcube.
Do you have recommendations for a self hosted webDAV server that could act as a Dropbox / GDrive replacement? I‘m using Nextcloud only for that use case because I haven’t found anything that seemed as stable.
[deleted]
Re: Roundcube open-source webmail software merges with Nextcloud
#106I sure hope there are no changes to standalone roundcube, because I'm just starting to think nextcloud is too heavy. I see people on selfhosting forums asking for alternatives. It would be sad if they swallowed roundcube, which I remember as a decent web email client.
Rainloop is a good alternative IMO
Re: Roundcube open-source webmail software merges with Nextcloud
#107Earlier quoted context omitted.
Nextcloud Mail won't be replaced by Roundcube! "Neither will Roundcube replace Nextcloud Mail or the other way around. ... Nextcloud Mail will evolve as it is, focused on being used naturally within Nextcloud."
Will it be like Microsoft saying that VS Code wouldn't replace Atom after the merger? Not that I like Atom, quite the opposite.
Atom was my first proper Editor. I miss it, even though there were a lot of bugs. It was so much fun finding all the cool community-made packages and trying them out.
Re: Roundcube open-source webmail software merges with Nextcloud
#108Speaking of Roundcube: If you're hosting it without apache (as in: without htaccess support), make sure the logs directory and files aren't exposed publicly. They can contain access tokens and even encrypted passwords (encrypted with a default password unless manually changed during installation), and follow a known file structure, so it's quite common for people to get owned this way.
> ~~If you're hosting it without apache (as in: without htaccess support),~~ make sure the logs directory and files aren't exposed publicly. Never expose any logs to strangers for anything anywhere
Sure, that’s always sound advice. However, most projects are usually designed in a way that their logs are either not exposed at all (due to not being in the webroot for example), or have measurements in place to avoid exposing them (like WordPress for example). Roundcube just puts them there and you have to actively think about excluding them from your webserver configuration. Plus, they dump really sensitive information in there by default. That’s why I wanted to explicitly point it out in this case.
Re: Roundcube open-source webmail software merges with Nextcloud
#109Earlier quoted context omitted.
> if you're using the docker image, upgrades are a breeze. Just bump the tag on the image, redeploy, and you're done. Or you could just run Watchtower beside it and it will automatically update your docker containers. https://github.com/containrrr/watchtower If you are OK with automated updates.
Or you could just use the snap, and you don't need to do anything :)
Pending update of snap
Close the app to avoid disruptions
Re: Roundcube open-source webmail software merges with Nextcloud
#110I've been running Nextcloud for family collaboration purposes since before the fork from Owncloud. I've been pretty happy with it overall. My biggest gripe with it is the increasing schizophrenia of the UX devs. One thing I _loved_ about Nextcloud was that they paid a lot of attention to making it easy to navigate and use. The newer UX "enhancements" seem to be all about maximizing (useless) whitespace and making eve…
> It did take a _lot_ of effort to migrating my existing data to the docker container Or you could just use some external storage. Like SMB or something. And then you would learn what updates aren't 'a breeze'. And there is no built-in SMB support in the default container. Since I'm running it since OwnCloud days too, I have an opinion on it and it's Not. Good. Desktop client for Windows is miserable and sucks: a) yo…
> And finally it's a PHP app with a tons of legacy code
Finally? That's a security nightmare right there.