Sandstorm at Debian and Ubuntu

Sandstorm CloudFlare DNS settings

Source: https://github.com/sandstorm-io/sandstorm/issues/3714#issuecomment-2366866243

For me, it works at CloudFlare DNS using TLS Strict checking and DNS setting clicking to orange cloud icon to make TLS proxy with Origin certificate, that is at /etc/caddy/certs/example.com.pem with above private key and below cert.

DNS records:

* A example.com ip-address
@ A example.com ip-address

Caddyfile, proxy to KVM VM that is running Debian and Sandstorm:

*.example.com example.com {
        tls {
                load /etc/caddy/certs
                alpn http/1.1
        }

        reverse_proxy 123.123.123.123:80
}

At /opt/sandstorm/sandstorm.conf is domain, http port etc.

Some related info at:

https://github.com/wekan/wekan/wiki/Caddy-Webserver-Config

I also had to wait that Origin certificate becomes active.

But this worked for me only at CloudFlare. It did not work at FreeDNS of Namecheap.

Also, I still need to write script to fix IP address if Dynamic DNS IP address changes, using CloudFlare API, because my cable modem does not have DDNS option for CloudFlare.

Now that there is also a way to run Sandstorm at Ubuntu, it would be possible for me to move Sandstorm from KVM VM to run directly at host, without VM, and proxy from Caddy to localhost port of Sandstorm.

https://groups.google.com/g/sandstorm-dev/c/4JFhr7B7QZU?pli=1

Debian amd64

Installing Sandstorm works normally

Ubuntu 24.04 amd64

How to install Sandstorm: https://groups.google.com/g/sandstorm-dev/c/4JFhr7B7QZU

Sandstorm Website

If you have any grains at Sandstorm's Oasis montly paid service, please move those to self-hosted, because only Oasis grain hosting part is shutting down - HN. This does not affect any other parts like self-hosting at sandcats.io, App Market, updates, etc.

Works on Ubuntu 64bit, on Debian 64bit.

Security audited, recommended for security critical use on public internet or internal network. Sandstorm Security Features. Sandstorm is completely Open Source, including Blackrock Clustering.

Install to your own server. Automatic updates, tested before release. Sandstorm Wekan has different features than Standalone.

Works

Google/GitHub/LDAP/SAML/Passwordless email login.
Import from Wekan JSON.
Free SSL at https://yourservername.sandcats.io domain.
Rescuing MongoDB data from Sandstorm Grain .zip file to Standalone Wekan

Does not work

Sandstorm open issues
Import from Trello does not import attachments, because Sandstorm-compatible HTTP-access from Wekan to outside of Wekan grain sandbox is not implemented yet
Copying/Moving card to another board.
REST API
Outgoing Webhooks
Email from Wekan

Demo

Keep backups

Keep backups. Download your Wekan grains.
It's possible to Export from Wekan Sandstorm grain .zip file to rescue data

Wekan App

Wekan at experimental or official Sandstorm App Market. Note: Only use official. Experimental versions are broken.

Newest Wekap app .spk file download at https://releases.wekan.team/sandstorm/

Bug reports and Feature Requests

Wekan for Sandstorm bug reports and feature requests

Sandstorm bug reports and feature requests

Building Wekan for Sandstorm

Wekan Sandstorm cards to CSV using Python

Importing to Trello workaround

It is not possible to import attachments directly from Trello when using Sandstorm version of Wekan. This is because Wekan is in secure sandbox at Sandstorm, and does not yet have Sandstorm-compatible way to import attachments from outside of Sandstorm. You need to:

Install Standalone version of Wekan, for example Docker/Snap/VirtualBox, for example to your own computer
Import board from Trello
Export board as Wekan board. Exported JSON file includes attachments as base64 encoded files.
Import board as Wekan board to Sandstorm.

Sandstorm.md 5.3 KB Verlauf Originalformat