Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Roundcube open-source webmail software merges with Nextcloud

phoronix.com

Post reply on HN
Print view View original

241–250 of 259 posts

Re: Roundcube open-source webmail software merges with Nextcloud

#241

Post by giancarlostoro »

bityard wrote: post #76

I've been running Nextcloud for family collaboration purposes since before the fork from Owncloud. I've been pretty happy with it overall. My biggest gripe with it is the increasing schizophrenia of the UX devs. One thing I _loved_ about Nextcloud was that they paid a lot of attention to making it easy to navigate and use. The newer UX "enhancements" seem to be all about maximizing (useless) whitespace and making eve…

> The newer UX "enhancements" seem to be all about maximizing (useless) whitespace and making every widget as spherical as possible.

I have used Firefox my entire life and sometime back they added really stupid whitespace between the address bar on both ends. Every single time I reinstall the browser on a new OS I see it and remove the whitespace. It drives me up a wall. It looks so gimmicky and like a complete waste of a UI that didnt need to be changed.

Sometimes the best UI decision is to leave things as-is, especially if your UI has been plenty standard.

Re: Roundcube open-source webmail software merges with Nextcloud

#242

Post by iggldiggl »

crtasm wrote: post #133
AndroTux wrote: post #108

Earlier quoted context omitted.

Sure, that’s always sound advice. However, most projects are usually designed in a way that their logs are either not exposed at all (due to not being in the webroot for example), or have measurements in place to avoid exposing them (like WordPress for example). Roundcube just puts them there and you have to actively think about excluding them from your webserver configuration. Plus, they dump really sensitive inform…

Can you configure Roundcube to store them outside the webroot?

If you're running Roundcube on its own subdomain, you just set the webroot to the "public_html" subfolder and then nothing else is accessible.

Re: Roundcube open-source webmail software merges with Nextcloud

#243

Post by coolliquidcode »

ColoursofOSINT wrote: post #234
coolliquidcode wrote: post #218

Earlier quoted context omitted.

I think you think I'm someone else.

You're correct, I'll retract my statement. Both start with coll/cooll, I've got to increase my zoom apparently.

Honestly it's a mistake I would make too.

Re: Roundcube open-source webmail software merges with Nextcloud

#244

Post by brazzy »

jerf wrote: post #222
brazzy wrote: post #199

Earlier quoted context omitted.

>On the plus side, if you're using the docker image, upgrades are a breeze. I've had problems that required fiddly manual interventions twice after updating to a new major version. And what keeps me from using it for anything other than File synching is the lack of a functioning integrated backup mechanism. There is a plugin, but it's unusable shite (tries to keep the entire data in memory, big has been open for year…

One of the things I like about the docker image is just that it absolutely rigidly guarantees that all the state is located only in exactly the directories I specify, and I can be sure of that by construction. So my Nextcloud backup solution is a cron job that shuts the entire container down and runs a restic job on it, then brings it back up when the backup is complete. I'm not completely sure that's quite "self-mad…

Hm so I guess your setup uses the default SQLite database? I switched to MariaDB because I kept having Nextcloud freeze after a few weeks.

Re: Roundcube open-source webmail software merges with Nextcloud

#245

Post by tuwtuwtuwtuw »

dugite-code wrote: post #220
velcrovan wrote: post #189

Earlier quoted context omitted.

I can recommend not to host your own webmail in general in 2023 unless you are a Fortune 50 company.

Or you can just host it behind a VPN if you're not confident in your ability to manage/patch/monitor it

That wouldn't really solve XSS vulnerabilities (of course depending on what the vulnerability is).

Re: Roundcube open-source webmail software merges with Nextcloud

#246

Post by tuwtuwtuwtuw »

velcrovan wrote: post #189
tuwtuwtuwtuw wrote: post #127

Earlier quoted context omitted.

Can you recommend a webmail client which hasn't had 2 vulnerabilities in the last 15 years?

I can recommend not to host your own webmail in general in 2023 unless you are a Fortune 50 company.

Alright, can you recommend a webmail host who hasn't had 2 security issues the last 15 years then?

Re: Roundcube open-source webmail software merges with Nextcloud

#247

Post by jerf »

brazzy wrote: post #244
jerf wrote: post #222

Earlier quoted context omitted.

One of the things I like about the docker image is just that it absolutely rigidly guarantees that all the state is located only in exactly the directories I specify, and I can be sure of that by construction. So my Nextcloud backup solution is a cron job that shuts the entire container down and runs a restic job on it, then brings it back up when the backup is complete. I'm not completely sure that's quite "self-mad…

Hm so I guess your setup uses the default SQLite database? I switched to MariaDB because I kept having Nextcloud freeze after a few weeks.

No. Docker compose, if you want to get technical not just "docker", with MariaDB. When the cron job runs docker-compose down it backs all the subdirs up, including the full DB directory. (Probably not a cheap plan for a heavy-use site, but for my family it's a normal thing for day-to-day to have no changes.)

Interesting that you comment about SQLite being a problem. I am not a heavy user of Nextcloud, but I haven't had the operational problems many people report here; I wonder if that's correlated to using SQLite.

Re: Roundcube open-source webmail software merges with Nextcloud

#248

Post by calamari4065 »

bityard wrote: post #76

I've been running Nextcloud for family collaboration purposes since before the fork from Owncloud. I've been pretty happy with it overall. My biggest gripe with it is the increasing schizophrenia of the UX devs. One thing I _loved_ about Nextcloud was that they paid a lot of attention to making it easy to navigate and use. The newer UX "enhancements" seem to be all about maximizing (useless) whitespace and making eve…

I really wish someone would make an alternate frontend for nextcloud. The backend is pretty solid from what I can tell, but the web UI is basically unusable.

I kept upgrading the server because I thought the abysmal performance was a backend bottleneck. But no, if I turn on profiling in my browser, I can see it taking geologic ages to do... Whatever it's doing. The server is mostly idle just waiting for the browser to respond.

It's almost impressive how bad it is.

Re: Roundcube open-source webmail software merges with Nextcloud

#249

Post by teekert »

t-writescode wrote: post #232
apitman wrote: post #226

Earlier quoted context omitted.

So you pass in the docker socket and the AIO container runs docker commands on the host?

That is correct, yes.

It sounds a bit like using the same password for all your services... Hack a Nextcloud instance, gain root on any system through Docker,

Re: Roundcube open-source webmail software merges with Nextcloud

#250

Post by goodpoint »

gjsman-1000 wrote: post #113
goodpoint wrote: post #110

Earlier quoted context omitted.

> And finally it's a PHP app with a tons of legacy code Finally? That's a security nightmare right there.

I think legacy code in any language is a security nightmare; not just PHP. Imagine a half-a-decade-old NodeJS project...

Old code does not develop vulnerabilities by sitting around.
Post reply on HN