Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Roundcube open-source webmail software merges with Nextcloud

phoronix.com

Post reply on HN
Print view View original

181–190 of 259 posts

Re: Roundcube open-source webmail software merges with Nextcloud

#181

Post by jjeaff »

dzikimarian wrote: post #155
nfriedly wrote: post #123

Earlier quoted context omitted.

> docker image, upgrades are a breeze. Maybe this has been improved, but I remember thinking that and then it biting me because updating to the latest image (linuxserver/nextcloud) wasn't actually updating nextcloud itself, just the environment (php, etc.) When I realized this, I had to go through several major nextcloud upgrades, incrementally going from one major version to the next. Then it bit me again a few mont…

Don't use linuxserver images. My feeling is they were done by someone who doesn't understand docker very well. Frequent use of supervisor, lack of logs on stdout, weird automagic config approach. It may feel convenient if someone did homelab without docker, but will bite you in the long run.

hmm, are you sure about that? the whole reason I use the linuxserver offerings is that they all follow the same pattern of not using root privileges in the container and also factoring the uid and group id out as compose variables so you can match them to other containers if needed.

Re: Roundcube open-source webmail software merges with Nextcloud

#182

Post by jospoortvliet »

jonnycomputer wrote: post #55

Comments here seem to suggest that Nextcloud isn't worth it. Later today I'm supposed to talk with some folks at IT looking for an in-house file-sharing/collaboration tool that Dropbox/GoogleDrive is (or was, because after GoogleDrive price hikes our institution ditched them). I was going to suggest Nextcloud as a possible option to investigate...

It'll depend on your requirements. Keep in mind that Nextcloud is the largest on-prem collab platform out there, so more users means more complaints... It is used in huge enterprise and government installations so it can definitely work, but it needs a decent setup. For a small company, use the Nextcloud AIO container I would say. For a big one, get Nextcloud Enterprise (starts at 100 seats) to make sure you get any issues addressed quickly.

Re: Roundcube open-source webmail software merges with Nextcloud

#183

Post by jospoortvliet »

charles_f wrote: post #122

Since we're talking about email, contacts, calendars and files, thought it might be useful to summarize what I tried and landed on. Note that I'm only using it for my own personal setup, not shared with a company: - SyncThing - current solution for some of the filesync I'm doing (mainly personal projects). I have a small server at home that works well as an "always on" client that I can access. - OwnCloud - used to u…

You might like to hear that in the upcoming release we re-wrote the front-end of Files, that'll be snappier. Hope it'll work well for you!

Re: Roundcube open-source webmail software merges with Nextcloud

#184

Post by jospoortvliet »

gpvos wrote: post #157
toxican wrote: post #131

Earlier quoted context omitted.

I'm fairly certain that you can disable the word processor, as well as a lot of the other "core" features. Or at least I'm seeing a whole lot of "disable" buttons when I look at the list of active apps for my Nextcloud install.

Yes, but they are still part of the package. If you have only 500MB you easily run out of disk space for both the installer and the actual installation. And I think they remain on your disk, ready to enable. There is no easy way to remove them completely.

In the AIO you have to explicitly choose to install them, in the bare metal setup they are not installed unless you choose so when you install for the first time. You're right that Nextcloud has gotten bigger, but Collabora is in no way a default part that you can't uninstall...

Re: Roundcube open-source webmail software merges with Nextcloud

#185

Post by jospoortvliet »

downrightmike wrote: post #92
throw555chip wrote: post #90

Meanwhile on Reddit: https://www.reddit.com/r/selfhosted/comments/186g3ak/ownclou... What are the odds, a positive article relating to Nextcloud posted on HN the same day a negative article is posted about Owncloud on Reddit.

Good job Nextcloud marketing team. Probably just pushed up the announcement

Ha, I wish. Been working on this for weeks, it's even a little annoying oC kind'a pooped on the party by having that massive security hole...

Re: Roundcube open-source webmail software merges with Nextcloud

#186

Post by jospoortvliet »

j16sdiz wrote: post #10
ekianjo wrote: post #3

Earlier quoted context omitted.

There is no reason why both can't continue at the same time.

Of course they can! Just wait until they shift focus or somebody shouts efficiency.

Note that we're not backed by a a venture capital firm that needs a 10X exit, we're self-funded and have been sustainably growing ~50%/year since we got started. We're over 100 people so paying for 2 developers on Roundcube (tripling the resources being put into Roundcube today) would be trivial for us.

We'll look what users want, what's best for the ecosystem etc, but we're not looking to kill it and if we ever would, it won't be for the money.

Re: Roundcube open-source webmail software merges with Nextcloud

#187

Post by jospoortvliet »

stracer wrote: post #152
awill wrote: post #129

this isn't good for anyone but Roundcube investors. Roundcube is a well-liked product. Nextcloud is a PHP app with all kinds of security holes.

By that logic, it should be good for Nextcloud investors.

The good news is that neither has investors...

With regards to security, nothing is perfect but I'm absolutely positive that Nextcloud is ahead of the vast majority of open source projects. And if you know of a security hole, go and collect your USD 10K at HackerOne.

Re: Roundcube open-source webmail software merges with Nextcloud

#189

Post by velcrovan »

tuwtuwtuwtuw wrote: post #127
velcrovan wrote: post #67

Earlier quoted context omitted.

The first and only time I had a server hacked was due to a RoundCube vulnerability in 2006. Just a month ago there was news of a RoundCube XSS zero-day that was widely exploited ( https://cyberpedia.medium.com/state-sponsored-cyberattacks-l... ). Don’t use RoundCube!

Can you recommend a webmail client which hasn't had 2 vulnerabilities in the last 15 years?

I can recommend not to host your own webmail in general in 2023 unless you are a Fortune 50 company.

Re: Roundcube open-source webmail software merges with Nextcloud

#190

Post by meonkeys »

manmal wrote: post #39
creshal wrote: post #36

Given Nextcloud's track record that doesn't bode well for Roundcube's future. We tried to make Nextcloud work for us for years, but it's just too terribly clunky, unstable, bug-ridden, and customer hostile. I hope none of that rubs off on roundcube.

Do you have recommendations for a self hosted webDAV server that could act as a Dropbox / GDrive replacement? I‘m using Nextcloud only for that use case because I haven’t found anything that seemed as stable.

What does Nextcloud do poorly that might be better/easier with an alternative?
Post reply on HN