7.7.2 changes

docker is using a extra udp port for every container. when there is
a lot of containers, a lot of random udp ports get used up. this causes
problems when installing apps that require contiguous port ranges

.eslintrc.json

@@ -0,0 +1,25 @@
+{
+    "env": {
+        "node": true,
+        "es6": true
+    },
+    "extends": "eslint:recommended",
+    "parserOptions": {
+        "ecmaVersion": 13
+    },
+    "rules": {
+        "linebreak-style": [
+            "error",
+            "unix"
+        ],
+        "quotes": [
+            "error",
+            "single"
+        ],
+        "semi": [
+            "error",
+            "always"
+        ],
+        "no-console": "off"
+    }
+}

.gitattributes

@@ -1,6 +1,7 @@
 # following files are skipped when exporting using git archive
 test export-ignore
-docs export-ignore
+.jshintrc export-ignore
+.gitlab export-ignore
 .gitattributes export-ignore
 .gitignore export-ignore
 

.gitignore

@@ -1,10 +1,9 @@
 node_modules/
 coverage/
+.nyc_output/
 webadmin/dist/
-setup/splash/website/
 installer/src/certs/server.key
 
 # vim swap files
 *.swp
 
-

.gitlab/issue_templates/Bug.md

@@ -0,0 +1,6 @@
+Please do not use this issue tracker for support requests and bug reports.
+This issue tracker is used by the Cloudron development team to track actual
+bugs in the code.
+
+Please use the forum at https://forum.cloudron.io to report bugs. For
+confidential issues, please email us at support@cloudron.io.

.gitlab/issue_templates/Feature.md

@@ -0,0 +1,7 @@
+Please do not use this issue tracker for support requests and feature reports.
+This issue tracker is used by the Cloudron development team to track issues in
+the code.
+
+Please use the forum at https://forum.cloudron.io to report bugs. For
+confidential issues, please email us at support@cloudron.io.
+

.jshintrc

@@ -1,8 +1,5 @@
 {
     "node": true,
-    "browser": true,
     "unused": true,
-    "globalstrict": true,
-    "predef": [ "angular", "$" ],
-    "esnext": true
+    "esversion": 11
 }

LICENSE

@@ -1,661 +1,35 @@
-                    GNU AFFERO GENERAL PUBLIC LICENSE
-                       Version 3, 19 November 2007
+The Cloudron Subscription license
+Copyright (c) 2022 Cloudron UG
+
+With regard to the Cloudron Software:
+
+This software and associated documentation files (the "Software") may only be
+used in production, if you (and any entity that you represent) have agreed to,
+and are in compliance with, the Cloudron Subscription Terms of Service, available
+at https://cloudron.io/legal/terms.html (the “Subscription Terms”), or other
+agreement governing the use of the Software, as agreed by you and Cloudron,
+and otherwise have a valid Cloudron Subscription. Subject to the foregoing sentence,
+you are free to modify this Software and publish patches to the Software. You agree
+that Subscription and/or its licensors (as applicable) retain all right, title and
+interest in and to all such modifications and/or patches, and all such modifications
+and/or patches may only be used, copied, modified, displayed, distributed, or otherwise
+exploited with a valid Cloudron subscription. Notwithstanding the foregoing, you may copy
+and modify the Software for development and testing purposes, without requiring a
+subscription.  You agree that Cloudron and/or its licensors (as applicable) retain
+all right, title and interest in and to all such modifications.  You are not
+granted any other rights beyond what is expressly stated herein.  Subject to the
+foregoing, it is forbidden to copy, merge, publish, distribute, sublicense,
+and/or sell the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+For all third party components incorporated into the Cloudron Software, those
+components are licensed under the original license provided by the owner of the
+applicable component.
 
- Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
-                            Preamble
-
-  The GNU Affero General Public License is a free, copyleft license for
-software and other kinds of works, specifically designed to ensure
-cooperation with the community in the case of network server software.
-
-  The licenses for most software and other practical works are designed
-to take away your freedom to share and change the works.  By contrast,
-our General Public Licenses are intended to guarantee your freedom to
-share and change all versions of a program--to make sure it remains free
-software for all its users.
-
-  When we speak of free software, we are referring to freedom, not
-price.  Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-them if you wish), that you receive source code or can get it if you
-want it, that you can change the software or use pieces of it in new
-free programs, and that you know you can do these things.
-
-  Developers that use our General Public Licenses protect your rights
-with two steps: (1) assert copyright on the software, and (2) offer
-you this License which gives you legal permission to copy, distribute
-and/or modify the software.
-
-  A secondary benefit of defending all users' freedom is that
-improvements made in alternate versions of the program, if they
-receive widespread use, become available for other developers to
-incorporate.  Many developers of free software are heartened and
-encouraged by the resulting cooperation.  However, in the case of
-software used on network servers, this result may fail to come about.
-The GNU General Public License permits making a modified version and
-letting the public access it on a server without ever releasing its
-source code to the public.
-
-  The GNU Affero General Public License is designed specifically to
-ensure that, in such cases, the modified source code becomes available
-to the community.  It requires the operator of a network server to
-provide the source code of the modified version running there to the
-users of that server.  Therefore, public use of a modified version, on
-a publicly accessible server, gives the public access to the source
-code of the modified version.
-
-  An older license, called the Affero General Public License and
-published by Affero, was designed to accomplish similar goals.  This is
-a different license, not a version of the Affero GPL, but Affero has
-released a new version of the Affero GPL which permits relicensing under
-this license.
-
-  The precise terms and conditions for copying, distribution and
-modification follow.
-
-                       TERMS AND CONDITIONS
-
-  0. Definitions.
-
-  "This License" refers to version 3 of the GNU Affero General Public License.
-
-  "Copyright" also means copyright-like laws that apply to other kinds of
-works, such as semiconductor masks.
-
-  "The Program" refers to any copyrightable work licensed under this
-License.  Each licensee is addressed as "you".  "Licensees" and
-"recipients" may be individuals or organizations.
-
-  To "modify" a work means to copy from or adapt all or part of the work
-in a fashion requiring copyright permission, other than the making of an
-exact copy.  The resulting work is called a "modified version" of the
-earlier work or a work "based on" the earlier work.
-
-  A "covered work" means either the unmodified Program or a work based
-on the Program.
-
-  To "propagate" a work means to do anything with it that, without
-permission, would make you directly or secondarily liable for
-infringement under applicable copyright law, except executing it on a
-computer or modifying a private copy.  Propagation includes copying,
-distribution (with or without modification), making available to the
-public, and in some countries other activities as well.
-
-  To "convey" a work means any kind of propagation that enables other
-parties to make or receive copies.  Mere interaction with a user through
-a computer network, with no transfer of a copy, is not conveying.
-
-  An interactive user interface displays "Appropriate Legal Notices"
-to the extent that it includes a convenient and prominently visible
-feature that (1) displays an appropriate copyright notice, and (2)
-tells the user that there is no warranty for the work (except to the
-extent that warranties are provided), that licensees may convey the
-work under this License, and how to view a copy of this License.  If
-the interface presents a list of user commands or options, such as a
-menu, a prominent item in the list meets this criterion.
-
-  1. Source Code.
-
-  The "source code" for a work means the preferred form of the work
-for making modifications to it.  "Object code" means any non-source
-form of a work.
-
-  A "Standard Interface" means an interface that either is an official
-standard defined by a recognized standards body, or, in the case of
-interfaces specified for a particular programming language, one that
-is widely used among developers working in that language.
-
-  The "System Libraries" of an executable work include anything, other
-than the work as a whole, that (a) is included in the normal form of
-packaging a Major Component, but which is not part of that Major
-Component, and (b) serves only to enable use of the work with that
-Major Component, or to implement a Standard Interface for which an
-implementation is available to the public in source code form.  A
-"Major Component", in this context, means a major essential component
-(kernel, window system, and so on) of the specific operating system
-(if any) on which the executable work runs, or a compiler used to
-produce the work, or an object code interpreter used to run it.
-
-  The "Corresponding Source" for a work in object code form means all
-the source code needed to generate, install, and (for an executable
-work) run the object code and to modify the work, including scripts to
-control those activities.  However, it does not include the work's
-System Libraries, or general-purpose tools or generally available free
-programs which are used unmodified in performing those activities but
-which are not part of the work.  For example, Corresponding Source
-includes interface definition files associated with source files for
-the work, and the source code for shared libraries and dynamically
-linked subprograms that the work is specifically designed to require,
-such as by intimate data communication or control flow between those
-subprograms and other parts of the work.
-
-  The Corresponding Source need not include anything that users
-can regenerate automatically from other parts of the Corresponding
-Source.
-
-  The Corresponding Source for a work in source code form is that
-same work.
-
-  2. Basic Permissions.
-
-  All rights granted under this License are granted for the term of
-copyright on the Program, and are irrevocable provided the stated
-conditions are met.  This License explicitly affirms your unlimited
-permission to run the unmodified Program.  The output from running a
-covered work is covered by this License only if the output, given its
-content, constitutes a covered work.  This License acknowledges your
-rights of fair use or other equivalent, as provided by copyright law.
-
-  You may make, run and propagate covered works that you do not
-convey, without conditions so long as your license otherwise remains
-in force.  You may convey covered works to others for the sole purpose
-of having them make modifications exclusively for you, or provide you
-with facilities for running those works, provided that you comply with
-the terms of this License in conveying all material for which you do
-not control copyright.  Those thus making or running the covered works
-for you must do so exclusively on your behalf, under your direction
-and control, on terms that prohibit them from making any copies of
-your copyrighted material outside their relationship with you.
-
-  Conveying under any other circumstances is permitted solely under
-the conditions stated below.  Sublicensing is not allowed; section 10
-makes it unnecessary.
-
-  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
-
-  No covered work shall be deemed part of an effective technological
-measure under any applicable law fulfilling obligations under article
-11 of the WIPO copyright treaty adopted on 20 December 1996, or
-similar laws prohibiting or restricting circumvention of such
-measures.
-
-  When you convey a covered work, you waive any legal power to forbid
-circumvention of technological measures to the extent such circumvention
-is effected by exercising rights under this License with respect to
-the covered work, and you disclaim any intention to limit operation or
-modification of the work as a means of enforcing, against the work's
-users, your or third parties' legal rights to forbid circumvention of
-technological measures.
-
-  4. Conveying Verbatim Copies.
-
-  You may convey verbatim copies of the Program's source code as you
-receive it, in any medium, provided that you conspicuously and
-appropriately publish on each copy an appropriate copyright notice;
-keep intact all notices stating that this License and any
-non-permissive terms added in accord with section 7 apply to the code;
-keep intact all notices of the absence of any warranty; and give all
-recipients a copy of this License along with the Program.
-
-  You may charge any price or no price for each copy that you convey,
-and you may offer support or warranty protection for a fee.
-
-  5. Conveying Modified Source Versions.
-
-  You may convey a work based on the Program, or the modifications to
-produce it from the Program, in the form of source code under the
-terms of section 4, provided that you also meet all of these conditions:
-
-    a) The work must carry prominent notices stating that you modified
-    it, and giving a relevant date.
-
-    b) The work must carry prominent notices stating that it is
-    released under this License and any conditions added under section
-    7.  This requirement modifies the requirement in section 4 to
-    "keep intact all notices".
-
-    c) You must license the entire work, as a whole, under this
-    License to anyone who comes into possession of a copy.  This
-    License will therefore apply, along with any applicable section 7
-    additional terms, to the whole of the work, and all its parts,
-    regardless of how they are packaged.  This License gives no
-    permission to license the work in any other way, but it does not
-    invalidate such permission if you have separately received it.
-
-    d) If the work has interactive user interfaces, each must display
-    Appropriate Legal Notices; however, if the Program has interactive
-    interfaces that do not display Appropriate Legal Notices, your
-    work need not make them do so.
-
-  A compilation of a covered work with other separate and independent
-works, which are not by their nature extensions of the covered work,
-and which are not combined with it such as to form a larger program,
-in or on a volume of a storage or distribution medium, is called an
-"aggregate" if the compilation and its resulting copyright are not
-used to limit the access or legal rights of the compilation's users
-beyond what the individual works permit.  Inclusion of a covered work
-in an aggregate does not cause this License to apply to the other
-parts of the aggregate.
-
-  6. Conveying Non-Source Forms.
-
-  You may convey a covered work in object code form under the terms
-of sections 4 and 5, provided that you also convey the
-machine-readable Corresponding Source under the terms of this License,
-in one of these ways:
-
-    a) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by the
-    Corresponding Source fixed on a durable physical medium
-    customarily used for software interchange.
-
-    b) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by a
-    written offer, valid for at least three years and valid for as
-    long as you offer spare parts or customer support for that product
-    model, to give anyone who possesses the object code either (1) a
-    copy of the Corresponding Source for all the software in the
-    product that is covered by this License, on a durable physical
-    medium customarily used for software interchange, for a price no
-    more than your reasonable cost of physically performing this
-    conveying of source, or (2) access to copy the
-    Corresponding Source from a network server at no charge.
-
-    c) Convey individual copies of the object code with a copy of the
-    written offer to provide the Corresponding Source.  This
-    alternative is allowed only occasionally and noncommercially, and
-    only if you received the object code with such an offer, in accord
-    with subsection 6b.
-
-    d) Convey the object code by offering access from a designated
-    place (gratis or for a charge), and offer equivalent access to the
-    Corresponding Source in the same way through the same place at no
-    further charge.  You need not require recipients to copy the
-    Corresponding Source along with the object code.  If the place to
-    copy the object code is a network server, the Corresponding Source
-    may be on a different server (operated by you or a third party)
-    that supports equivalent copying facilities, provided you maintain
-    clear directions next to the object code saying where to find the
-    Corresponding Source.  Regardless of what server hosts the
-    Corresponding Source, you remain obligated to ensure that it is
-    available for as long as needed to satisfy these requirements.
-
-    e) Convey the object code using peer-to-peer transmission, provided
-    you inform other peers where the object code and Corresponding
-    Source of the work are being offered to the general public at no
-    charge under subsection 6d.
-
-  A separable portion of the object code, whose source code is excluded
-from the Corresponding Source as a System Library, need not be
-included in conveying the object code work.
-
-  A "User Product" is either (1) a "consumer product", which means any
-tangible personal property which is normally used for personal, family,
-or household purposes, or (2) anything designed or sold for incorporation
-into a dwelling.  In determining whether a product is a consumer product,
-doubtful cases shall be resolved in favor of coverage.  For a particular
-product received by a particular user, "normally used" refers to a
-typical or common use of that class of product, regardless of the status
-of the particular user or of the way in which the particular user
-actually uses, or expects or is expected to use, the product.  A product
-is a consumer product regardless of whether the product has substantial
-commercial, industrial or non-consumer uses, unless such uses represent
-the only significant mode of use of the product.
-
-  "Installation Information" for a User Product means any methods,
-procedures, authorization keys, or other information required to install
-and execute modified versions of a covered work in that User Product from
-a modified version of its Corresponding Source.  The information must
-suffice to ensure that the continued functioning of the modified object
-code is in no case prevented or interfered with solely because
-modification has been made.
-
-  If you convey an object code work under this section in, or with, or
-specifically for use in, a User Product, and the conveying occurs as
-part of a transaction in which the right of possession and use of the
-User Product is transferred to the recipient in perpetuity or for a
-fixed term (regardless of how the transaction is characterized), the
-Corresponding Source conveyed under this section must be accompanied
-by the Installation Information.  But this requirement does not apply
-if neither you nor any third party retains the ability to install
-modified object code on the User Product (for example, the work has
-been installed in ROM).
-
-  The requirement to provide Installation Information does not include a
-requirement to continue to provide support service, warranty, or updates
-for a work that has been modified or installed by the recipient, or for
-the User Product in which it has been modified or installed.  Access to a
-network may be denied when the modification itself materially and
-adversely affects the operation of the network or violates the rules and
-protocols for communication across the network.
-
-  Corresponding Source conveyed, and Installation Information provided,
-in accord with this section must be in a format that is publicly
-documented (and with an implementation available to the public in
-source code form), and must require no special password or key for
-unpacking, reading or copying.
-
-  7. Additional Terms.
-
-  "Additional permissions" are terms that supplement the terms of this
-License by making exceptions from one or more of its conditions.
-Additional permissions that are applicable to the entire Program shall
-be treated as though they were included in this License, to the extent
-that they are valid under applicable law.  If additional permissions
-apply only to part of the Program, that part may be used separately
-under those permissions, but the entire Program remains governed by
-this License without regard to the additional permissions.
-
-  When you convey a copy of a covered work, you may at your option
-remove any additional permissions from that copy, or from any part of
-it.  (Additional permissions may be written to require their own
-removal in certain cases when you modify the work.)  You may place
-additional permissions on material, added by you to a covered work,
-for which you have or can give appropriate copyright permission.
-
-  Notwithstanding any other provision of this License, for material you
-add to a covered work, you may (if authorized by the copyright holders of
-that material) supplement the terms of this License with terms:
-
-    a) Disclaiming warranty or limiting liability differently from the
-    terms of sections 15 and 16 of this License; or
-
-    b) Requiring preservation of specified reasonable legal notices or
-    author attributions in that material or in the Appropriate Legal
-    Notices displayed by works containing it; or
-
-    c) Prohibiting misrepresentation of the origin of that material, or
-    requiring that modified versions of such material be marked in
-    reasonable ways as different from the original version; or
-
-    d) Limiting the use for publicity purposes of names of licensors or
-    authors of the material; or
-
-    e) Declining to grant rights under trademark law for use of some
-    trade names, trademarks, or service marks; or
-
-    f) Requiring indemnification of licensors and authors of that
-    material by anyone who conveys the material (or modified versions of
-    it) with contractual assumptions of liability to the recipient, for
-    any liability that these contractual assumptions directly impose on
-    those licensors and authors.
-
-  All other non-permissive additional terms are considered "further
-restrictions" within the meaning of section 10.  If the Program as you
-received it, or any part of it, contains a notice stating that it is
-governed by this License along with a term that is a further
-restriction, you may remove that term.  If a license document contains
-a further restriction but permits relicensing or conveying under this
-License, you may add to a covered work material governed by the terms
-of that license document, provided that the further restriction does
-not survive such relicensing or conveying.
-
-  If you add terms to a covered work in accord with this section, you
-must place, in the relevant source files, a statement of the
-additional terms that apply to those files, or a notice indicating
-where to find the applicable terms.
-
-  Additional terms, permissive or non-permissive, may be stated in the
-form of a separately written license, or stated as exceptions;
-the above requirements apply either way.
-
-  8. Termination.
-
-  You may not propagate or modify a covered work except as expressly
-provided under this License.  Any attempt otherwise to propagate or
-modify it is void, and will automatically terminate your rights under
-this License (including any patent licenses granted under the third
-paragraph of section 11).
-
-  However, if you cease all violation of this License, then your
-license from a particular copyright holder is reinstated (a)
-provisionally, unless and until the copyright holder explicitly and
-finally terminates your license, and (b) permanently, if the copyright
-holder fails to notify you of the violation by some reasonable means
-prior to 60 days after the cessation.
-
-  Moreover, your license from a particular copyright holder is
-reinstated permanently if the copyright holder notifies you of the
-violation by some reasonable means, this is the first time you have
-received notice of violation of this License (for any work) from that
-copyright holder, and you cure the violation prior to 30 days after
-your receipt of the notice.
-
-  Termination of your rights under this section does not terminate the
-licenses of parties who have received copies or rights from you under
-this License.  If your rights have been terminated and not permanently
-reinstated, you do not qualify to receive new licenses for the same
-material under section 10.
-
-  9. Acceptance Not Required for Having Copies.
-
-  You are not required to accept this License in order to receive or
-run a copy of the Program.  Ancillary propagation of a covered work
-occurring solely as a consequence of using peer-to-peer transmission
-to receive a copy likewise does not require acceptance.  However,
-nothing other than this License grants you permission to propagate or
-modify any covered work.  These actions infringe copyright if you do
-not accept this License.  Therefore, by modifying or propagating a
-covered work, you indicate your acceptance of this License to do so.
-
-  10. Automatic Licensing of Downstream Recipients.
-
-  Each time you convey a covered work, the recipient automatically
-receives a license from the original licensors, to run, modify and
-propagate that work, subject to this License.  You are not responsible
-for enforcing compliance by third parties with this License.
-
-  An "entity transaction" is a transaction transferring control of an
-organization, or substantially all assets of one, or subdividing an
-organization, or merging organizations.  If propagation of a covered
-work results from an entity transaction, each party to that
-transaction who receives a copy of the work also receives whatever
-licenses to the work the party's predecessor in interest had or could
-give under the previous paragraph, plus a right to possession of the
-Corresponding Source of the work from the predecessor in interest, if
-the predecessor has it or can get it with reasonable efforts.
-
-  You may not impose any further restrictions on the exercise of the
-rights granted or affirmed under this License.  For example, you may
-not impose a license fee, royalty, or other charge for exercise of
-rights granted under this License, and you may not initiate litigation
-(including a cross-claim or counterclaim in a lawsuit) alleging that
-any patent claim is infringed by making, using, selling, offering for
-sale, or importing the Program or any portion of it.
-
-  11. Patents.
-
-  A "contributor" is a copyright holder who authorizes use under this
-License of the Program or a work on which the Program is based.  The
-work thus licensed is called the contributor's "contributor version".
-
-  A contributor's "essential patent claims" are all patent claims
-owned or controlled by the contributor, whether already acquired or
-hereafter acquired, that would be infringed by some manner, permitted
-by this License, of making, using, or selling its contributor version,
-but do not include claims that would be infringed only as a
-consequence of further modification of the contributor version.  For
-purposes of this definition, "control" includes the right to grant
-patent sublicenses in a manner consistent with the requirements of
-this License.
-
-  Each contributor grants you a non-exclusive, worldwide, royalty-free
-patent license under the contributor's essential patent claims, to
-make, use, sell, offer for sale, import and otherwise run, modify and
-propagate the contents of its contributor version.
-
-  In the following three paragraphs, a "patent license" is any express
-agreement or commitment, however denominated, not to enforce a patent
-(such as an express permission to practice a patent or covenant not to
-sue for patent infringement).  To "grant" such a patent license to a
-party means to make such an agreement or commitment not to enforce a
-patent against the party.
-
-  If you convey a covered work, knowingly relying on a patent license,
-and the Corresponding Source of the work is not available for anyone
-to copy, free of charge and under the terms of this License, through a
-publicly available network server or other readily accessible means,
-then you must either (1) cause the Corresponding Source to be so
-available, or (2) arrange to deprive yourself of the benefit of the
-patent license for this particular work, or (3) arrange, in a manner
-consistent with the requirements of this License, to extend the patent
-license to downstream recipients.  "Knowingly relying" means you have
-actual knowledge that, but for the patent license, your conveying the
-covered work in a country, or your recipient's use of the covered work
-in a country, would infringe one or more identifiable patents in that
-country that you have reason to believe are valid.
-
-  If, pursuant to or in connection with a single transaction or
-arrangement, you convey, or propagate by procuring conveyance of, a
-covered work, and grant a patent license to some of the parties
-receiving the covered work authorizing them to use, propagate, modify
-or convey a specific copy of the covered work, then the patent license
-you grant is automatically extended to all recipients of the covered
-work and works based on it.
-
-  A patent license is "discriminatory" if it does not include within
-the scope of its coverage, prohibits the exercise of, or is
-conditioned on the non-exercise of one or more of the rights that are
-specifically granted under this License.  You may not convey a covered
-work if you are a party to an arrangement with a third party that is
-in the business of distributing software, under which you make payment
-to the third party based on the extent of your activity of conveying
-the work, and under which the third party grants, to any of the
-parties who would receive the covered work from you, a discriminatory
-patent license (a) in connection with copies of the covered work
-conveyed by you (or copies made from those copies), or (b) primarily
-for and in connection with specific products or compilations that
-contain the covered work, unless you entered into that arrangement,
-or that patent license was granted, prior to 28 March 2007.
-
-  Nothing in this License shall be construed as excluding or limiting
-any implied license or other defenses to infringement that may
-otherwise be available to you under applicable patent law.
-
-  12. No Surrender of Others' Freedom.
-
-  If conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License.  If you cannot convey a
-covered work so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you may
-not convey it at all.  For example, if you agree to terms that obligate you
-to collect a royalty for further conveying from those to whom you convey
-the Program, the only way you could satisfy both those terms and this
-License would be to refrain entirely from conveying the Program.
-
-  13. Remote Network Interaction; Use with the GNU General Public License.
-
-  Notwithstanding any other provision of this License, if you modify the
-Program, your modified version must prominently offer all users
-interacting with it remotely through a computer network (if your version
-supports such interaction) an opportunity to receive the Corresponding
-Source of your version by providing access to the Corresponding Source
-from a network server at no charge, through some standard or customary
-means of facilitating copying of software.  This Corresponding Source
-shall include the Corresponding Source for any work covered by version 3
-of the GNU General Public License that is incorporated pursuant to the
-following paragraph.
-
-  Notwithstanding any other provision of this License, you have
-permission to link or combine any covered work with a work licensed
-under version 3 of the GNU General Public License into a single
-combined work, and to convey the resulting work.  The terms of this
-License will continue to apply to the part which is the covered work,
-but the work with which it is combined will remain governed by version
-3 of the GNU General Public License.
-
-  14. Revised Versions of this License.
-
-  The Free Software Foundation may publish revised and/or new versions of
-the GNU Affero General Public License from time to time.  Such new versions
-will be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-  Each version is given a distinguishing version number.  If the
-Program specifies that a certain numbered version of the GNU Affero General
-Public License "or any later version" applies to it, you have the
-option of following the terms and conditions either of that numbered
-version or of any later version published by the Free Software
-Foundation.  If the Program does not specify a version number of the
-GNU Affero General Public License, you may choose any version ever published
-by the Free Software Foundation.
-
-  If the Program specifies that a proxy can decide which future
-versions of the GNU Affero General Public License can be used, that proxy's
-public statement of acceptance of a version permanently authorizes you
-to choose that version for the Program.
-
-  Later license versions may give you additional or different
-permissions.  However, no additional obligations are imposed on any
-author or copyright holder as a result of your choosing to follow a
-later version.
-
-  15. Disclaimer of Warranty.
-
-  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-
-  16. Limitation of Liability.
-
-  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGES.
-
-  17. Interpretation of Sections 15 and 16.
-
-  If the disclaimer of warranty and limitation of liability provided
-above cannot be given local legal effect according to their terms,
-reviewing courts shall apply local law that most closely approximates
-an absolute waiver of all civil liability in connection with the
-Program, unless a warranty or assumption of liability accompanies a
-copy of the Program in return for a fee.
-
-                     END OF TERMS AND CONDITIONS
-
-            How to Apply These Terms to Your New Programs
-
-  If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
-  To do so, attach the following notices to the program.  It is safest
-to attach them to the start of each source file to most effectively
-state the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
-    box
-    Copyright (C) 2016,2017 Cloudron UG
-
-    This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU Affero General Public License as published
-    by the Free Software Foundation, either version 3 of the License, or
-    (at your option) any later version.
-
-    This program is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU Affero General Public License for more details.
-
-    You should have received a copy of the GNU Affero General Public License
-    along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-Also add information on how to contact you by electronic and paper mail.
-
-  If your software can interact with users remotely through a computer
-network, you should also make sure that it provides a way for users to
-get its source.  For example, if your program is a web application, its
-interface could display a "Source" link that leads users to an archive
-of the code.  There are many ways you could offer source, and different
-solutions will be better for different programs; see section 13 for the
-specific requirements.
-
-  You should also get your employer (if you work as a programmer) or school,
-if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU AGPL, see
-<http://www.gnu.org/licenses/>.

README.md

@@ -1,3 +1,5 @@
+![Translation status](https://translate.cloudron.io/widgets/cloudron/-/svg-badge.svg)
+
 # Cloudron
 
 [Cloudron](https://cloudron.io) is the best way to run apps on your server.
@@ -29,36 +31,43 @@ anyone to effortlessly host web applications on their server on their own terms.
 * Trivially migrate to another server keeping your apps and data (for example, switch your
   infrastructure provider or move to a bigger server).
 
-* Comprehensive [REST API](https://cloudron.io/documentation/developer/api/).
+* Comprehensive [REST API](https://docs.cloudron.io/api/).
 
-* [CLI](https://cloudron.io/documentation/cli/) to configure apps.
+* [CLI](https://docs.cloudron.io/custom-apps/cli/) to configure apps.
 
 * Alerts, audit logs, graphs, dns management ... and much more
 
 ## Demo
 
-Try our demo at https://my-demo.cloudron.me (username: cloudron password: cloudron).
+Try our demo at https://my.demo.cloudron.io (username: cloudron password: cloudron).
 
 ## Installing
 
-You can install the Cloudron platform on your own server or get a managed server
-from cloudron.io. In either case, the Cloudron platform will keep your server and
-apps up-to-date and secure.
+[Install script](https://docs.cloudron.io/installation/) - [Pricing](https://cloudron.io/pricing.html)
 
-* [Selfhosting](https://cloudron.io/documentation/installation/) - [Pricing](https://cloudron.io/pricing.html)
-* [Managed Hosting](https://cloudron.io/managed.html)
+**Note:** This repo is a small part of what gets installed on your server - there is
+the dashboard, database addons, graph container, base image etc. Cloudron also relies
+on external services such as the App Store for apps to be installed. As such, don't
+clone this repo and npm install and expect something to work.
 
-## Documentation
+## License
 
-* [Documentation](https://cloudron.io/documentation/)
+Please note that the Cloudron code is under a source-available license. This is not the same as an
+open source license but ensures the code is available for introspection (and hacking!).
 
-## Related repos
+## Contributions
 
-The [base image repo](https://git.cloudron.io/cloudron/docker-base-image) is the parent image of all
-the containers in the Cloudron.
+Just to give some heads up, we are a bit restrictive in merging changes. We are a small team and
+would like to keep our maintenance burden low. It might be best to discuss features first in the [forum](https://forum.cloudron.io),
+to also figure out how many other people will use it to justify maintenance for a feature.
 
-## Community
+# Localization
+
+![Translation status](https://translate.cloudron.io/widgets/cloudron/-/287x66-white.png)
+
+## Support
+
+* [Documentation](https://docs.cloudron.io/)
+* [Forum](https://forum.cloudron.io/)
 
-* [Chat](https://chat.cloudron.io/)
-* [Support](mailto:support@cloudron.io)
 

VERSION

@@ -0,0 +1 @@
+# release version. do not edit manually

baseimage/createAMI

@@ -1,193 +0,0 @@
-#!/bin/bash
-
-set -eu -o pipefail
-
-assertNotEmpty() {
-    : "${!1:? "$1 is not set."}"
-}
-
-readonly SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-readonly SOURCE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")"/.. && pwd)"
-export JSON="${SOURCE_DIR}/node_modules/.bin/json"
-
-INSTANCE_TYPE="t2.micro"
-BLOCK_DEVICE="DeviceName=/dev/sda1,Ebs={VolumeSize=20,DeleteOnTermination=true,VolumeType=gp2}"
-SSH_KEY_NAME="id_rsa_yellowtent"
-
-revision=$(git rev-parse HEAD)
-ami_name=""
-server_id=""
-server_ip=""
-destroy_server="yes"
-deploy_env="prod"
-image_id=""
-
-args=$(getopt -o "" -l "revision:,name:,no-destroy,env:,region:" -n "$0" -- "$@")
-eval set -- "${args}"
-
-while true; do
-    case "$1" in
-    --env) deploy_env="$2"; shift 2;;
-    --revision) revision="$2"; shift 2;;
-    --name) ami_name="$2"; shift 2;;
-    --no-destroy) destroy_server="no"; shift 2;;
-    --region)
-        case "$2" in
-        "us-east-1")
-            image_id="ami-6edd3078"
-            security_group="sg-a5e17fd9"
-            subnet_id="subnet-b8fbc0f1"
-            ;;
-        "eu-central-1")
-            image_id="ami-5aee2235"
-            security_group="sg-19f5a770" # everything open on eu-central-1
-            subnet_id=""
-            ;;
-        *)
-            echo "Unknown aws region $2"
-            exit 1
-            ;;
-        esac
-        export AWS_DEFAULT_REGION="$2"    # used by the aws cli tool
-        shift 2
-        ;;
-    --) break;;
-    *) echo "Unknown option $1"; exit 1;;
-    esac
-done
-
-# TODO fix this
-export AWS_ACCESS_KEY_ID="${AWS_ACCESS_KEY}"
-export AWS_SECRET_ACCESS_KEY="${AWS_ACCESS_SECRET}"
-
-readonly ssh_keys="${HOME}/.ssh/id_rsa_yellowtent"
-readonly SSH="ssh -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ${ssh_keys}"
-
-if [[ ! -f "${ssh_keys}" ]]; then
-    echo "caas ssh key is missing at ${ssh_keys} (pick it up from secrets repo)"
-    exit 1
-fi
-
-if [[ -z "${image_id}" ]]; then
-    echo "--region is required (us-east-1 or eu-central-1)"
-    exit 1
-fi
-
-function get_pretty_revision() {
-    local git_rev="$1"
-    local sha1=$(git rev-parse --short "${git_rev}" 2>/dev/null)
-
-    echo "${sha1}"
-}
-
-function wait_for_ssh() {
-    echo "=> Waiting for ssh connection"
-    while true; do
-        echo -n "."
-
-        if $SSH ubuntu@${server_ip} echo "hello"; then
-            echo ""
-            break
-        fi
-
-        sleep 5
-    done
-}
-
-now=$(date "+%Y-%m-%d-%H%M%S")
-pretty_revision=$(get_pretty_revision "${revision}")
-
-if [[ -z "${ami_name}" ]]; then
-    ami_name="box-${deploy_env}-${pretty_revision}-${now}"
-fi
-
-echo "=> Create EC2 instance"
-id=$(aws ec2 run-instances --image-id "${image_id}" --instance-type "${INSTANCE_TYPE}" --security-group-ids "${security_group}" --block-device-mappings "${BLOCK_DEVICE}" --key-name "${SSH_KEY_NAME}" --subnet-id "${subnet_id}" --associate-public-ip-address \
-    | $JSON Instances \
-    | $JSON 0.InstanceId)
-
-[[ -z "$id" ]] && exit 1
-echo "Instance created  ID $id"
-
-echo "=> Waiting for instance to get a public IP"
-while true; do
-    server_ip=$(aws ec2 describe-instances --instance-ids ${id} \
-        | $JSON Reservations.0.Instances \
-        | $JSON 0.PublicIpAddress)
-
-    if [[ ! -z "${server_ip}" ]]; then
-        echo ""
-        break
-    fi
-
-    echo -n "."
-    sleep 1
-done
-
-echo "Got public IP ${server_ip}"
-
-wait_for_ssh
-
-echo "=> Fetching cloudron-setup"
-while true; do
-
-    if $SSH ubuntu@${server_ip} wget "https://cloudron.io/cloudron-setup" -O "cloudron-setup"; then
-        echo ""
-        break
-    fi
-
-    echo -n "."
-    sleep 5
-done
-
-echo "=> Running cloudron-setup"
-$SSH ubuntu@${server_ip} sudo /bin/bash "cloudron-setup" --env "${deploy_env}" --provider "ami" --skip-reboot
-
-wait_for_ssh
-
-echo "=> Removing ssh key"
-$SSH ubuntu@${server_ip} sudo rm /home/ubuntu/.ssh/authorized_keys /root/.ssh/authorized_keys
-
-echo "=> Creating AMI"
-image_id=$(aws ec2 create-image --instance-id "${id}" --name "${ami_name}" | $JSON ImageId)
-[[ -z "$id" ]] && exit 1
-echo "Creating AMI with Id ${image_id}"
-
-echo "=> Waiting for AMI to be created"
-while true; do
-    state=$(aws ec2 describe-images --image-ids ${image_id} \
-        | $JSON Images \
-        | $JSON 0.State)
-
-    if [[ "${state}" == "available" ]]; then
-        echo ""
-        break
-    fi
-
-    echo -n "."
-    sleep 5
-done
-
-if [[ "${destroy_server}" == "yes" ]]; then
-    echo "=> Deleting EC2 instance"
-
-    while true; do
-        state=$(aws ec2 terminate-instances --instance-id "${id}" \
-            | $JSON TerminatingInstances \
-            | $JSON 0.CurrentState.Name)
-
-        if [[ "${state}" == "shutting-down" ]]; then
-            echo ""
-            break
-        fi
-
-        echo -n "."
-        sleep 5
-    done
-fi
-
-echo ""
-echo "Done."
-echo ""
-echo "New AMI is: ${image_id}"
-echo ""

baseimage/createDOImage

@@ -1,179 +0,0 @@
-#!/bin/bash
-
-set -eu -o pipefail
-
-assertNotEmpty() {
-    : "${!1:? "$1 is not set."}"
-}
-
-readonly SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-readonly SOURCE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")"/.. && pwd)"
-export JSON="${SOURCE_DIR}/node_modules/.bin/json"
-
-revision=$(git rev-parse HEAD)
-box_name=""
-server_id=""
-server_ip=""
-destroy_server="yes"
-deploy_env="dev"
-
-# Only GNU getopt supports long options. OS X comes bundled with the BSD getopt
-# brew install gnu-getopt to get the GNU getopt on OS X
-[[ $(uname -s) == "Darwin" ]] && GNU_GETOPT="/usr/local/opt/gnu-getopt/bin/getopt" || GNU_GETOPT="getopt"
-readonly GNU_GETOPT
-
-args=$(${GNU_GETOPT} -o "" -l "revision:,regions:,size:,name:,no-destroy,env:" -n "$0" -- "$@")
-eval set -- "${args}"
-
-while true; do
-    case "$1" in
-    --env) deploy_env="$2"; shift 2;;
-    --revision) revision="$2"; shift 2;;
-    --name) box_name="$2"; destroy_server="no"; shift 2;;
-    --no-destroy) destroy_server="no"; shift 2;;
-    --) break;;
-    *) echo "Unknown option $1"; exit 1;;
-    esac
-done
-
-echo "Creating digitalocean image"
-if [[ "${deploy_env}" == "staging" ]]; then
-    assertNotEmpty DIGITAL_OCEAN_TOKEN_STAGING
-    export DIGITAL_OCEAN_TOKEN="${DIGITAL_OCEAN_TOKEN_STAGING}"
-elif [[ "${deploy_env}" == "dev" ]]; then
-    assertNotEmpty DIGITAL_OCEAN_TOKEN_DEV
-    export DIGITAL_OCEAN_TOKEN="${DIGITAL_OCEAN_TOKEN_DEV}"
-elif [[ "${deploy_env}" == "prod" ]]; then
-    assertNotEmpty DIGITAL_OCEAN_TOKEN_PROD
-    export DIGITAL_OCEAN_TOKEN="${DIGITAL_OCEAN_TOKEN_PROD}"
-else
-    echo "No such env ${deploy_env}."
-    exit 1
-fi
-
-vps="/bin/bash ${SCRIPT_DIR}/digitalocean.sh"
-
-readonly ssh_keys="${HOME}/.ssh/id_rsa_caas_${deploy_env}"
-readonly scp202="scp -P 202 -o ConnectTimeout=10 -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ${ssh_keys}"
-readonly scp22="scp -o ConnectTimeout=10 -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ${ssh_keys}"
-
-readonly ssh202="ssh -p 202 -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ${ssh_keys}"
-readonly ssh22="ssh -o IdentitiesOnly=yes -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -i ${ssh_keys}"
-
-if [[ ! -f "${ssh_keys}" ]]; then
-    echo "caas ssh key is missing at ${ssh_keys} (pick it up from secrets repo)"
-    exit 1
-fi
-
-function get_pretty_revision() {
-    local git_rev="$1"
-    local sha1=$(git rev-parse --short "${git_rev}" 2>/dev/null)
-
-    echo "${sha1}"
-}
-
-now=$(date "+%Y-%m-%d-%H%M%S")
-pretty_revision=$(get_pretty_revision "${revision}")
-
-if [[ -z "${box_name}" ]]; then
-    # if you change this, change the regexp is appstore/janitor.js
-    box_name="box-${deploy_env}-${pretty_revision}-${now}" # remove slashes
-
-    # create a new server if no name given
-    if ! caas_ssh_key_id=$($vps get_ssh_key_id "caas"); then
-        echo "Could not query caas ssh key"
-        exit 1
-    fi
-    echo "Detected caas ssh key id: ${caas_ssh_key_id}"
-
-    echo "Creating Server with name [${box_name}]"
-    if ! server_id=$($vps create ${caas_ssh_key_id} ${box_name}); then
-        echo "Failed to create server"
-        exit 1
-    fi
-    echo "Created server with id: ${server_id}"
-
-    # If we run scripts overenthusiastically without the wait, setup script randomly fails
-    echo -n "Waiting 120 seconds for server creation"
-    for i in $(seq 1 24); do
-        echo -n "."
-        sleep 5
-    done
-    echo ""
-else
-    if ! server_id=$($vps get_id "${box_name}"); then
-        echo "Could not determine id from name"
-        exit 1
-    fi
-    echo "Reusing server with id: ${server_id}"
-
-    $vps power_on "${server_id}"
-fi
-
-# Query until we get an IP
-while true; do
-    echo "Trying to get the server IP"
-    if server_ip=$($vps get_ip "${server_id}"); then
-        echo "Server IP : [${server_ip}]"
-        break
-    fi
-    echo "Timedout, trying again in 10 seconds"
-    sleep 10
-done
-
-while true; do
-    echo "Trying to copy init script to server"
-    if $scp22 "${SCRIPT_DIR}/initializeBaseUbuntuImage.sh" root@${server_ip}:.; then
-        break
-    fi
-    echo "Timedout, trying again in 30 seconds"
-    sleep 30
-done
-
-echo "Copying infra_version.js"
-$scp22 "${SCRIPT_DIR}/../src/infra_version.js" root@${server_ip}:.
-
-echo "Copying box source"
-cd "${SOURCE_DIR}"
-git archive --format=tar HEAD | $ssh22 "root@${server_ip}" "cat - > /tmp/box.tar.gz"
-
-echo "Executing init script"
-if ! $ssh22 "root@${server_ip}" "/bin/bash /root/initializeBaseUbuntuImage.sh caas"; then
-    echo "Init script failed"
-    exit 1
-fi
-
-echo "Shutting down server with id : ${server_id}"
-$ssh22 "root@${server_ip}" "shutdown -f now" || true # shutdown sometimes terminates ssh connection immediately making this command fail
-
-# wait 10 secs for actual shutdown
-echo "Waiting for 10 seconds for server to shutdown"
-sleep 30
-
-echo "Powering off server"
-if ! $vps power_off "${server_id}"; then
-    echo "Could not power off server"
-    exit 1
-fi
-
-snapshot_name="box-${deploy_env}-${pretty_revision}-${now}"
-echo "Snapshotting as ${snapshot_name}"
-if ! image_id=$($vps snapshot "${server_id}" "${snapshot_name}"); then
-    echo "Could not snapshot and get image id"
-    exit 1
-fi
-
-if [[ "${destroy_server}" == "yes" ]]; then
-    echo "Destroying server"
-    if ! $vps destroy "${server_id}"; then
-        echo "Could not destroy server"
-        exit 1
-    fi
-else
-    echo "Skipping server destroy"
-fi
-
-echo "Transferring image ${image_id} to other regions"
-$vps transfer_image_to_all_regions "${image_id}"
-
-echo "Done."

baseimage/digitalocean.sh

@@ -1,261 +0,0 @@
-#!/bin/bash
-
-if [[ -z "${DIGITAL_OCEAN_TOKEN}" ]]; then
-    echo "Script requires DIGITAL_OCEAN_TOKEN env to be set"
-    exit 1
-fi
-
-if [[ -z "${JSON}" ]]; then
-    echo "Script requires JSON env to be set to path of JSON binary"
-    exit 1
-fi
-
-readonly CURL="curl --retry 5 -s -u ${DIGITAL_OCEAN_TOKEN}:"
-
-function debug() {
-    echo "$@" >&2
-}
-
-function get_ssh_key_id() {
-    id=$($CURL "https://api.digitalocean.com/v2/account/keys" \
-        | $JSON ssh_keys \
-        | $JSON -c "this.name === \"$1\"" \
-        | $JSON 0.id)
-    [[ -z "$id" ]] && exit 1
-    echo "$id"
-}
-
-function create_droplet() {
-    local ssh_key_id="$1"
-    local box_name="$2"
-
-    local image_region="sfo1"
-    local ubuntu_image_slug="ubuntu-16-04-x64"
-    local box_size="1gb"
-
-    local data="{\"name\":\"${box_name}\",\"size\":\"${box_size}\",\"region\":\"${image_region}\",\"image\":\"${ubuntu_image_slug}\",\"ssh_keys\":[ \"${ssh_key_id}\" ],\"backups\":false}"
-
-    id=$($CURL -X POST -H 'Content-Type: application/json' -d "${data}" "https://api.digitalocean.com/v2/droplets" | $JSON droplet.id)
-    [[ -z "$id" ]] && exit 1
-    echo "$id"
-}
-
-function get_droplet_ip() {
-    local droplet_id="$1"
-    ip=$($CURL "https://api.digitalocean.com/v2/droplets/${droplet_id}" | $JSON "droplet.networks.v4[0].ip_address")
-    [[ -z "$ip" ]] && exit 1
-    echo "$ip"
-}
-
-function get_droplet_id() {
-    local droplet_name="$1"
-    id=$($CURL "https://api.digitalocean.com/v2/droplets?per_page=200" | $JSON "droplets" | $JSON -c "this.name === '${droplet_name}'" | $JSON "[0].id")
-    [[ -z "$id" ]] && exit 1
-    echo "$id"
-}
-
-function power_off_droplet() {
-    local droplet_id="$1"
-    local data='{"type":"power_off"}'
-    local response=$($CURL -X POST -H 'Content-Type: application/json' -d "${data}" "https://api.digitalocean.com/v2/droplets/${droplet_id}/actions")
-    local event_id=`echo "${response}" | $JSON action.id`
-
-    if [[ -z "${event_id}" ]]; then
-        debug "Got no event id, assuming already powered off."
-        debug "Response: ${response}"
-        return
-    fi
-
-    debug "Powered off droplet. Event id: ${event_id}"
-    debug -n "Waiting for droplet to power off"
-
-    while true; do
-        local event_status=`$CURL "https://api.digitalocean.com/v2/droplets/${droplet_id}/actions/${event_id}" | $JSON action.status`
-        if [[ "${event_status}" == "completed" ]]; then
-            break
-        fi
-        debug -n "."
-        sleep 10
-    done
-    debug ""
-}
-
-function power_on_droplet() {
-    local droplet_id="$1"
-    local data='{"type":"power_on"}'
-    local event_id=`$CURL -X POST -H 'Content-Type: application/json' -d "${data}" "https://api.digitalocean.com/v2/droplets/${droplet_id}/actions" | $JSON action.id`
-
-    debug "Powered on droplet. Event id: ${event_id}"
-
-    if [[ -z "${event_id}" ]]; then
-        debug "Got no event id, assuming already powered on"
-        return
-    fi
-
-    debug -n "Waiting for droplet to power on"
-
-    while true; do
-        local event_status=`$CURL "https://api.digitalocean.com/v2/droplets/${droplet_id}/actions/${event_id}" | $JSON action.status`
-        if [[ "${event_status}" == "completed" ]]; then
-            break
-        fi
-        debug -n "."
-        sleep 10
-    done
-    debug ""
-}
-
-function get_image_id() {
-    local snapshot_name="$1"
-    local image_id=""
-
-    if ! response=$($CURL "https://api.digitalocean.com/v2/images?per_page=200"); then
-        echo "Failed to get image listing. ${response}"
-        return 1
-    fi
-
-    if ! image_id=$(echo "$response" \
-       | $JSON images \
-       | $JSON -c "this.name === \"${snapshot_name}\"" 0.id); then
-        echo "Failed to parse curl response: ${response}"
-        return 1
-    fi
-
-    if [[ -z "${image_id}" ]]; then
-        echo "Failed to get image id of ${snapshot_name}. reponse: ${response}"
-        return 1
-    fi
-
-    echo "${image_id}"
-}
-
-function snapshot_droplet() {
-    local droplet_id="$1"
-    local snapshot_name="$2"
-    local data="{\"type\":\"snapshot\",\"name\":\"${snapshot_name}\"}"
-    local event_id=`$CURL -X POST -H 'Content-Type: application/json' -d "${data}" "https://api.digitalocean.com/v2/droplets/${droplet_id}/actions" | $JSON action.id`
-
-    debug "Droplet snapshotted as ${snapshot_name}. Event id: ${event_id}"
-    debug -n "Waiting for snapshot to complete"
-
-    while true; do
-        if ! response=$($CURL "https://api.digitalocean.com/v2/droplets/${droplet_id}/actions/${event_id}"); then
-            echo "Could not get action status. ${response}"
-            continue
-        fi
-        if ! event_status=$(echo "${response}" | $JSON action.status); then
-            echo "Could not parse action.status from response. ${response}"
-            continue
-        fi
-        if [[ "${event_status}" == "completed" ]]; then
-            break
-        fi
-        debug -n "."
-        sleep 10
-    done
-    debug "! done"
-
-    if ! image_id=$(get_image_id "${snapshot_name}"); then
-        return 1
-    fi
-    echo "${image_id}"
-}
-
-function destroy_droplet() {
-    local droplet_id="$1"
-    # TODO: check for 204 status
-    $CURL -X DELETE "https://api.digitalocean.com/v2/droplets/${droplet_id}"
-    debug "Droplet destroyed"
-    debug ""
-}
-
-function transfer_image() {
-    local image_id="$1"
-    local region_slug="$2"
-    local data="{\"type\":\"transfer\",\"region\":\"${region_slug}\"}"
-    local event_id=`$CURL -X POST -H 'Content-Type: application/json' -d "${data}" "https://api.digitalocean.com/v2/images/${image_id}/actions" | $JSON action.id`
-    echo "${event_id}"
-}
-
-function wait_for_image_event() {
-    local image_id="$1"
-    local event_id="$2"
-
-    debug -n "Waiting for ${event_id}"
-
-    while true; do
-        local event_status=`$CURL "https://api.digitalocean.com/v2/images/${image_id}/actions/${event_id}" | $JSON action.status`
-        if [[ "${event_status}" == "completed" ]]; then
-            break
-        fi
-        debug -n "."
-        sleep 10
-    done
-    debug ""
-}
-
-function transfer_image_to_all_regions() {
-    local image_id="$1"
-
-    xfer_events=()
-    image_regions=(ams2) ## sfo1 is where the image is created
-    for image_region in ${image_regions[@]}; do
-        xfer_event=$(transfer_image ${image_id} ${image_region})
-        echo "Image transfer to ${image_region} initiated. Event id: ${xfer_event}"
-        xfer_events+=("${xfer_event}")
-        sleep 1
-    done
-
-    echo "Image transfer initiated, but they will take some time to get transferred."
-
-    for xfer_event in ${xfer_events[@]}; do
-        $vps wait_for_image_event "${image_id}" "${xfer_event}"
-    done
-}
-
-if [[ $# -lt 1 ]]; then
-    debug "<command> <params...>"
-    exit 1
-fi
-
-case $1 in
-get_ssh_key_id)
-    get_ssh_key_id "${@:2}"
-    ;;
-
-create)
-    create_droplet "${@:2}"
-    ;;
-
-get_id)
-    get_droplet_id "${@:2}"
-    ;;
-
-get_ip)
-    get_droplet_ip "${@:2}"
-    ;;
-
-power_on)
-    power_on_droplet "${@:2}"
-    ;;
-
-power_off)
-    power_off_droplet "${@:2}"
-    ;;
-
-snapshot)
-    snapshot_droplet "${@:2}"
-    ;;
-
-destroy)
-    destroy_droplet "${@:2}"
-    ;;
-
-transfer_image_to_all_regions)
-    transfer_image_to_all_regions "${@:2}"
-    ;;
-
-*)
-    echo "Unknown command $1"
-    exit 1
-esac

baseimage/initializeBaseUbuntuImage.sh

@@ -1,107 +0,0 @@
-#!/bin/bash
-
-set -euv -o pipefail
-
-readonly SOURCE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-
-readonly arg_provider="${1:-generic}"
-readonly arg_infraversionpath="${SOURCE_DIR}/${2:-}"
-
-function die {
-    echo $1
-    exit 1
-}
-
-export DEBIAN_FRONTEND=noninteractive
-
-apt-get -o Dpkg::Options::="--force-confdef" update -y
-apt-get -o Dpkg::Options::="--force-confdef" dist-upgrade -y
-
-echo "==> Installing required packages"
-
-debconf-set-selections <<< 'mysql-server mysql-server/root_password password password'
-debconf-set-selections <<< 'mysql-server mysql-server/root_password_again password password'
-
-# this enables automatic security upgrades (https://help.ubuntu.com/community/AutomaticSecurityUpdates)
-apt-get -y install \
-    acl \
-    awscli \
-    build-essential \
-    cron \
-    curl \
-    dmsetup \
-    iptables \
-    logrotate \
-    mysql-server-5.7 \
-    nginx-full \
-    openssh-server \
-    pwgen \
-    rcconf \
-    swaks \
-    unattended-upgrades \
-    unbound \
-    xfsprogs
-
-# this ensures that unattended upgades are enabled, if it was disabled during ubuntu install time (see #346)
-# debconf-set-selection of unattended-upgrades/enable_auto_updates + dpkg-reconfigure does not work
-cp /usr/share/unattended-upgrades/20auto-upgrades /etc/apt/apt.conf.d/20auto-upgrades
-
-echo "==> Installing node.js"
-mkdir -p /usr/local/node-8.9.3
-curl -sL https://nodejs.org/dist/v8.9.3/node-v8.9.3-linux-x64.tar.gz | tar zxvf - --strip-components=1 -C /usr/local/node-8.9.3
-ln -sf /usr/local/node-8.9.3/bin/node /usr/bin/node
-ln -sf /usr/local/node-8.9.3/bin/npm /usr/bin/npm
-apt-get install -y python   # Install python which is required for npm rebuild
-[[ "$(python --version 2>&1)" == "Python 2.7."* ]] || die "Expecting python version to be 2.7.x"
-
-# https://docs.docker.com/engine/installation/linux/ubuntulinux/
-echo "==> Installing Docker"
-
-# create systemd drop-in file
-mkdir -p /etc/systemd/system/docker.service.d
-echo -e "[Service]\nExecStart=\nExecStart=/usr/bin/dockerd -H fd:// --log-driver=journald --exec-opt native.cgroupdriver=cgroupfs --storage-driver=overlay2" > /etc/systemd/system/docker.service.d/cloudron.conf
-
-curl -sL https://download.docker.com/linux/ubuntu/dists/xenial/pool/stable/amd64/docker-ce_17.09.0~ce-0~ubuntu_amd64.deb -o /tmp/docker.deb
-# apt install with install deps (as opposed to dpkg -i)
-apt install -y /tmp/docker.deb
-rm /tmp/docker.deb
-
-storage_driver=$(docker info | grep "Storage Driver" | sed 's/.*: //')
-if [[ "${storage_driver}" != "overlay2" ]]; then
-    echo "Docker is using "${storage_driver}" instead of overlay2"
-    exit 1
-fi
-
-echo "==> Enable memory accounting"
-apt-get -y install grub2
-sed -e 's/^GRUB_CMDLINE_LINUX="\(.*\)"$/GRUB_CMDLINE_LINUX="\1 cgroup_enable=memory swapaccount=1 panic_on_oops=1 panic=5"/' -i /etc/default/grub
-update-grub
-
-echo "==> Downloading docker images"
-if [ ! -f "${arg_infraversionpath}/infra_version.js" ]; then
-    echo "No infra_versions.js found"
-    exit 1
-fi
-
-images=$(node -e "var i = require('${arg_infraversionpath}/infra_version.js'); console.log(i.baseImages.join(' '), Object.keys(i.images).map(function (x) { return i.images[x].tag; }).join(' '));")
-
-echo -e "\tPulling docker images: ${images}"
-for image in ${images}; do
-    docker pull "${image}"
-done
-
-echo "==> Install collectd"
-if ! apt-get install -y collectd collectd-utils; then
-    # FQDNLookup is true in default debian config. The box code has a custom collectd.conf that fixes this
-    echo "Failed to install collectd. Presumably because of http://mailman.verplant.org/pipermail/collectd/2015-March/006491.html"
-    sed -e 's/^FQDNLookup true/FQDNLookup false/' -i /etc/collectd/collectd.conf
-fi
-
-# Disable bind for good measure (on online.net, kimsufi servers these are pre-installed and conflicts with unbound)
-systemctl stop bind9 || true
-systemctl disable bind9 || true
-
-# on ovh images dnsmasq seems to run by default
-systemctl stop dnsmasq || true
-systemctl disable dnsmasq || true
-

box.js

@@ -2,55 +2,83 @@
 
 'use strict';
 
-require('supererror')({ splatchError: true });
+const constants = require('./src/constants.js'),
+    fs = require('fs'),
+    ldapServer = require('./src/ldapserver.js'),
+    oidc = require('./src/oidc.js'),
+    paths = require('./src/paths.js'),
+    proxyAuth = require('./src/proxyauth.js'),
+    safe = require('safetydance'),
+    server = require('./src/server.js'),
+    directoryServer = require('./src/directoryserver.js');
 
-// remove timestamp from debug() based output
-require('debug').formatArgs = function formatArgs(args) {
-    args[0] = this.namespace + ' ' + args[0];
-};
+let logFd;
 
-var appHealthMonitor = require('./src/apphealthmonitor.js'),
-    async = require('async'),
-    config = require('./src/config.js'),
-    ldap = require('./src/ldap.js'),
-    server = require('./src/server.js');
+async function setupLogging() {
+    if (constants.TEST) return;
 
-console.log();
-console.log('==========================================');
-console.log(' Cloudron will use the following settings ');
-console.log('==========================================');
-console.log();
-console.log(' Environment:                    ', config.CLOUDRON ? 'CLOUDRON' : 'TEST');
-console.log(' Version:                        ', config.version());
-console.log(' Admin Origin:                   ', config.adminOrigin());
-console.log(' Appstore API server origin:     ', config.apiServerOrigin());
-console.log(' Appstore Web server origin:     ', config.webServerOrigin());
-console.log();
-console.log('==========================================');
-console.log();
+    logFd = fs.openSync(paths.BOX_LOG_FILE, 'a');
+    // we used to write using a stream before but it caches internally and there is no way to flush it when things crash
+    process.stdout.write = process.stderr.write = function (...args) {
+        const callback = typeof args[args.length-1] === 'function' ? args.pop() : function () {}; // callback is required for fs.write
+        fs.write.apply(fs, [logFd, ...args, callback]);
+    };
+}
 
-async.series([
-    server.start,
-    ldap.start,
-    appHealthMonitor.start,
-], function (error) {
-    if (error) {
-        console.error('Error starting server', error);
-        process.exit(1);
-    }
-    console.log('Cloudron is up and running');
-});
+// this is also used as the 'uncaughtException' handler which can only have synchronous functions
+function exitSync(status) {
+    if (status.error) fs.write(logFd, status.error.stack + '\n', function () {});
+    fs.fsyncSync(logFd);
+    fs.closeSync(logFd);
+    process.exit(status.code);
+}
 
-var NOOP_CALLBACK = function () { };
+async function startServers() {
+    await setupLogging();
+    await server.start(); // do this first since it also inits the database
+    await proxyAuth.start();
+    await ldapServer.start();
 
-process.on('SIGINT', function () {
-    server.stop(NOOP_CALLBACK);
-    ldap.stop(NOOP_CALLBACK);
-    setTimeout(process.exit.bind(process), 3000);
-});
+    const conf = await directoryServer.getConfig();
+    if (conf.enabled) await directoryServer.start();
+}
 
-process.on('SIGTERM', function () {
-    server.stop(NOOP_CALLBACK);
-    ldap.stop(NOOP_CALLBACK);
-    setTimeout(process.exit.bind(process), 3000);
-});
+async function main() {
+    const [error] = await safe(startServers());
+    if (error) return exitSync({ error: new Error(`Error starting server: ${JSON.stringify(error)}`), code: 1 });
+
+    // require this here so that logging handler is already setup
+    const debug = require('debug')('box:box');
+
+    process.on('SIGHUP', async function () {
+        debug('Received SIGHUP. Re-reading configs.');
+        const conf = await directoryServer.getConfig();
+        if (conf.enabled) await directoryServer.checkCertificate();
+    });
+
+    process.on('SIGINT', async function () {
+        debug('Received SIGINT. Shutting down.');
+
+        await proxyAuth.stop();
+        await server.stop();
+        await directoryServer.stop();
+        await ldapServer.stop();
+        await oidc.stop();
+        setTimeout(process.exit.bind(process), 3000);
+    });
+
+    process.on('SIGTERM', async function () {
+        debug('Received SIGTERM. Shutting down.');
+
+        await proxyAuth.stop();
+        await server.stop();
+        await directoryServer.stop();
+        await ldapServer.stop();
+        await oidc.stop();
+        setTimeout(process.exit.bind(process), 3000);
+    });
+
+    process.on('uncaughtException', (error) => exitSync({ error, code: 1 }));
+}
+
+main();

crashnotifierservice.js

@@ -1,16 +0,0 @@
-#!/usr/bin/env node
-
-'use strict';
-
-var sendFailureLogs = require('./src/logcollector').sendFailureLogs;
-
-function main() {
-    if (process.argv.length !== 3) return console.error('Usage: crashnotifier.js <processName>');
-
-    var processName = process.argv[2];
-    console.log('Started crash notifier for', processName);
-
-    sendFailureLogs(processName, { unit: processName });
-}
-
-main();

dashboard/.gitattributes

@@ -0,0 +1,6 @@
+# following files are skipped when exporting using git archive
+test export-ignore
+docs export-ignore
+.gitattributes export-ignore
+.gitignore export-ignore
+

dashboard/.gitignore

@@ -0,0 +1,11 @@
+dist/
+node_modules/
+
+# vim swap files
+*.swp
+
+# these are not done yet
+src/translation/ja.json
+src/translation/pl.json
+src/translation/si.json
+src/translation/gl.json

dashboard/.jshintrc

@@ -0,0 +1,20 @@
+{
+    "node": true,
+    "browser": true,
+    "unused": true,
+    "esversion": 6,
+    "globalstrict": false,
+    "predef": [
+        "$",
+        "angular",
+        "async",
+        "describe",
+        "it",
+        "before",
+        "after",
+        "require",
+        "monaco",
+        "Mimer",
+        "ISTATES"
+    ]
+}

dashboard/LICENSE

@@ -0,0 +1,35 @@
+The Cloudron Subscription license
+Copyright (c) 2022 Cloudron UG
+
+With regard to the Cloudron Software:
+
+This software and associated documentation files (the "Software") may only be
+used in production, if you (and any entity that you represent) have agreed to,
+and are in compliance with, the Cloudron Subscription Terms of Service, available
+at https://cloudron.io/legal/terms.html (the “Subscription Terms”), or other
+agreement governing the use of the Software, as agreed by you and Cloudron,
+and otherwise have a valid Cloudron Subscription. Subject to the foregoing sentence,
+you are free to modify this Software and publish patches to the Software. You agree
+that Subscription and/or its licensors (as applicable) retain all right, title and
+interest in and to all such modifications and/or patches, and all such modifications
+and/or patches may only be used, copied, modified, displayed, distributed, or otherwise
+exploited with a valid Cloudron subscription. Notwithstanding the foregoing, you may copy
+and modify the Software for development and testing purposes, without requiring a
+subscription.  You agree that Cloudron and/or its licensors (as applicable) retain
+all right, title and interest in and to all such modifications.  You are not
+granted any other rights beyond what is expressly stated herein.  Subject to the
+foregoing, it is forbidden to copy, merge, publish, distribute, sublicense,
+and/or sell the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+For all third party components incorporated into the Cloudron Software, those
+components are licensed under the original license provided by the owner of the
+applicable component.
+

dashboard/README.md

@@ -0,0 +1,20 @@
+# Cloudron Dashboard
+
+This is the front end code of Cloudron. The backend code is [here](https://git.cloudron.io/cloudron/box).
+
+## Developing
+
+* `npm install`
+* `gulp develop --api-origin=https://my.example.com`
+
+## License
+
+Please note that the Cloudron code is under a source-available license. This is not the same as an
+open source license but ensures the code is available for inspection (and hacking!).
+
+## Contributions
+
+Just to give a heads-up, we are a bit restrictive in merging changes. We are a small team and
+would like to keep our maintenance burden low. It might be best to first discuss features in the [forum](https://forum.cloudron.io),
+which also helps to determine how many other people will use it to justify maintenance for a feature.
+

dashboard/gulpfile.js

@@ -0,0 +1,214 @@
+/* jslint node:true */
+
+'use strict';
+
+const argv = require('yargs').argv,
+    concat = require('gulp-concat'),
+    ejs = require('gulp-ejs'),
+    execSync = require('child_process').execSync,
+    fs = require('fs'),
+    gulp = require('gulp'),
+    sass = require('gulp-sass')(require('sass')),
+    serve = require('gulp-serve'),
+    sourcemaps = require('gulp-sourcemaps');
+
+if (argv.help || argv.h) {
+    console.log('Supported arguments for "gulp develop":');
+    console.log(' --api-origin <cloudron api uri>');
+    console.log(' --revision <revision>');
+    console.log(' --appstore-console-origin <appstore console uri>');
+
+    process.exit(1);
+}
+
+const revision = argv.revision || '';
+
+let apiOrigin = '';
+if (argv.apiOrigin) {
+    if (argv.apiOrigin.indexOf('https://') === 0) apiOrigin = argv.apiOrigin;
+    else apiOrigin = 'https://' + argv.apiOrigin;
+}
+
+var appstore = {
+    consoleOrigin: argv.appstoreConsoleOrigin || ''
+};
+
+console.log();
+console.log('Cloudron API:          %s', apiOrigin || 'default');
+console.log('Building for revision: %s', revision);
+console.log();
+console.log('Overriding appstore origin:');
+console.log(' Console: %s', appstore.consoleOrigin || 'no');
+console.log();
+
+gulp.task('fontawesome', function () {
+    return gulp.src('node_modules/@fortawesome/fontawesome-free/**/*')
+        .pipe(gulp.dest('dist/3rdparty/fontawesome/'));
+});
+
+gulp.task('bootstrap', function () {
+    return gulp.src('node_modules/bootstrap-sass/assets/javascripts/bootstrap.min.js')
+        .pipe(gulp.dest('dist/3rdparty/js'));
+});
+
+gulp.task('moment', function () {
+    return gulp.src('node_modules/moment/min/*')
+        .pipe(gulp.dest('dist/3rdparty/js'));
+});
+
+gulp.task('3rdparty-copy', function () {
+    return gulp.src([
+        'src/3rdparty/**/*.js',
+        'src/3rdparty/**/*.map',
+        'src/3rdparty/**/*.css',
+        'src/3rdparty/**/*.otf',
+        'src/3rdparty/**/*.eot',
+        'src/3rdparty/**/*.svg',
+        'src/3rdparty/**/*.gif',
+        'src/3rdparty/**/*.ttf',
+        'node_modules/chart.js/dist/chart.umd.js'
+    ]).pipe(gulp.dest('dist/3rdparty/'));
+});
+
+gulp.task('3rdparty', gulp.series(['3rdparty-copy', 'moment', 'bootstrap', 'fontawesome']));
+
+// --------------
+// JavaScript
+// --------------
+
+gulp.task('js-index', function () {
+    return gulp.src([
+        'src/js/index.js',
+        'src/js/client.js',
+        'src/js/utils.js',
+        'src/views/*.js'
+    ])
+        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
+        .pipe(sourcemaps.init())
+        .pipe(concat('index.js', { newLine: ';' }))
+        .pipe(sourcemaps.write())
+        .pipe(gulp.dest('dist/js'));
+});
+
+gulp.task('js-passwordreset', function () {
+    return gulp.src(['src/js/passwordreset.js', 'src/js/utils.js'])
+        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
+        .pipe(sourcemaps.init())
+        .pipe(concat('passwordreset.js', { newLine: ';' }))
+        .pipe(sourcemaps.write())
+        .pipe(gulp.dest('dist/js'));
+});
+
+gulp.task('js-setupaccount', function () {
+    return gulp.src(['src/js/setupaccount.js', 'src/js/utils.js'])
+        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
+        .pipe(sourcemaps.init())
+        .pipe(concat('setupaccount.js', { newLine: ';' }))
+        .pipe(sourcemaps.write())
+        .pipe(gulp.dest('dist/js'));
+});
+
+gulp.task('js-setup', function () {
+    return gulp.src(['src/js/setup.js', 'src/js/client.js', 'src/js/utils.js'])
+        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
+        .pipe(sourcemaps.init())
+        .pipe(concat('setup.js', { newLine: ';' }))
+        .pipe(sourcemaps.write())
+        .pipe(gulp.dest('dist/js'));
+});
+
+gulp.task('js-setupdns', function () {
+    return gulp.src(['src/js/setupdns.js', 'src/js/client.js', 'src/js/utils.js'])
+        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
+        .pipe(sourcemaps.init())
+        .pipe(concat('setupdns.js', { newLine: ';' }))
+        .pipe(sourcemaps.write())
+        .pipe(gulp.dest('dist/js'));
+});
+
+gulp.task('js-restore', function () {
+    return gulp.src(['src/js/restore.js', 'src/js/client.js', 'src/js/utils.js'])
+        .pipe(ejs({ apiOrigin: apiOrigin, revision: revision, appstore: appstore }, {}, { ext: '.js' }))
+        .pipe(sourcemaps.init())
+        .pipe(concat('restore.js', { newLine: ';' }))
+        .pipe(sourcemaps.write())
+        .pipe(gulp.dest('dist/js'));
+});
+
+gulp.task('js', gulp.series([ 'js-index', 'js-passwordreset', 'js-setupaccount', 'js-setup', 'js-setupdns', 'js-restore' ]));
+
+// --------------
+// HTML
+// --------------
+
+gulp.task('html-views', function () {
+    return gulp.src('src/views/**/*.html').pipe(gulp.dest('dist/views'));
+});
+
+gulp.task('html-templates', function () {
+    return gulp.src('src/templates/**/*').pipe(gulp.dest('dist/templates'));
+});
+
+gulp.task('html-raw', function () {
+    return gulp.src('src/*.html').pipe(ejs({ apiOrigin: apiOrigin, revision: revision }, {}, { ext: '.html' })).pipe(gulp.dest('dist'));
+});
+
+gulp.task('html', gulp.series(['html-views', 'html-templates', 'html-raw']));
+
+// --------------
+// CSS
+// --------------
+
+gulp.task('css', function () {
+    return gulp.src('src/*.scss')
+        .pipe(sass({ includePaths: ['node_modules/bootstrap-sass/assets/stylesheets/'] }).on('error', sass.logError))
+        .pipe(gulp.dest('dist'));
+});
+
+gulp.task('images', function () {
+    return gulp.src('src/img/**')
+        .pipe(gulp.dest('dist/img'));
+});
+
+gulp.task('translation', function () {
+    return gulp.src('src/translation/**')
+        .pipe(gulp.dest('dist/translation'));
+});
+
+gulp.task('timezones', function (done) {
+    execSync('./scripts/createTimezones.js ./dist/js/timezones.js');
+    done();
+});
+
+// --------------
+// Utilities
+// --------------
+
+gulp.task('clean', function (done) {
+    fs.rm('dist', { recursive: true, force: true }, done);
+});
+
+gulp.task('default', gulp.series(['clean', 'html', 'js', 'timezones', '3rdparty', 'translation', 'images', 'css']));
+
+gulp.task('watch', function (done) {
+    gulp.watch(['src/*.scss'], gulp.series(['css']));
+    gulp.watch(['src/img/*'], gulp.series(['images']));
+    gulp.watch(['src/translation/*'], gulp.series(['translation']));
+    gulp.watch(['src/**/*.html'], gulp.series(['html']));
+    gulp.watch(['src/views/*.html'], gulp.series(['html-views']));
+    gulp.watch(['src/templates/*.html'], gulp.series(['html-templates']));
+    gulp.watch(['scripts/createTimezones.js', 'src/js/utils.js'], gulp.series(['timezones']));
+    gulp.watch(['src/js/setup.js', 'src/js/client.js', 'src/js/utils.js'], gulp.series(['js-setup']));
+    gulp.watch(['src/js/setupdns.js', 'src/js/client.js', 'src/js/utils.js'], gulp.series(['js-setupdns']));
+    gulp.watch(['src/js/restore.js', 'src/js/client.js', 'src/js/utils.js'], gulp.series(['js-restore']));
+    gulp.watch(['src/js/passwordreset.js', 'src/js/utils.js'], gulp.series(['js-passwordreset']));
+    gulp.watch(['src/js/setupaccount.js', 'src/js/utils.js'], gulp.series(['js-setupaccount']));
+    gulp.watch(['src/js/index.js', 'src/js/client.js', 'src/views/*.js', 'src/js/utils.js'], gulp.series(['js-index']));
+    gulp.watch(['src/3rdparty/**/*'], gulp.series(['3rdparty']));
+    done();
+});
+
+gulp.task('serve', serve({ root: 'dist', port: 4000, hostname: '0.0.0.0' }));
+
+gulp.task('develop', gulp.series(['default', 'watch', 'serve']));
+

dashboard/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "dashboard",
+  "version": "1.0.0",
+  "description": "[Cloudron](https://cloudron.io) is the best way to run apps on your server.",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "update-translations": "curl https://translate.cloudron.io/api/components/cloudron/dashboard/file/ -o lang.zip && unzip -jo lang.zip -d ./src/translation/ && rm lang.zip"
+  },
+  "repository": {
+    "type": "git",
+    "url": "ssh://git@git.cloudron.io:6000/cloudron/dashboard.git"
+  },
+  "author": "",
+  "license": "SEE LICENSE IN LICENSE",
+  "dependencies": {
+    "@fortawesome/fontawesome-free": "^6.5.1",
+    "bootstrap-sass": "^3.4.3",
+    "chart.js": "^4.4.2",
+    "gulp": "^4.0.2",
+    "gulp-concat": "^2.6.1",
+    "gulp-ejs": "^5.1.0",
+    "gulp-sass": "^5.1.0",
+    "gulp-serve": "^1.4.0",
+    "gulp-sourcemaps": "^3.0.0",
+    "moment": "^2.30.1",
+    "sass": "^1.71.1",
+    "yargs": "^17.7.2"
+  },
+  "eslintConfig": {
+    "env": {
+      "browser": true
+    }
+  }
+}

dashboard/scripts/addUsers.js

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+
+// This script creates many users to test the UI for such a case
+
+// WARNING keep those in sync with delUsers.js
+const USERNAME_PREFIX = 'manyuser';
+const PASSOWRD_PREFIX = 'password';
+const DISPLAYNAME_PREFIX = 'User ';
+const EMAIL_DOMAIN = 'example.com'; // addresses will be username@EMAIL_DOMAIN
+const COUNT = 100;
+
+var async = require('async'),
+    readlineSync = require('readline-sync'),
+    superagent = require('superagent');
+
+if (process.argv.length !== 3) {
+    console.log('Usage: ./addUsers.js <cloudronDomain>');
+    process.exit(1);
+}
+
+const cloudronDomain = process.argv[2];
+
+function getAccessToken(callback) {
+    let username = readlineSync.question('Username: ', {});
+    let password = readlineSync.question('Password: ', { noEchoBack: true });
+
+    superagent.post(`https://${cloudronDomain}/api/v1/auth/login`, { username: username, password: password }).end(function (error, result) {
+        if (error || result.statusCode !== 200) {
+            console.log('Login failed');
+            return getAccessToken(callback);
+        }
+
+        callback(result.body.accessToken);
+    });
+}
+
+console.log(`Login to ${cloudronDomain}`);
+getAccessToken(function (accessToken) {
+    console.log(`Now creating ${COUNT} users...`);
+
+    async.timesLimit(COUNT, 5, function (n, next) {
+        let user = {
+            username: USERNAME_PREFIX + n,
+            password: PASSOWRD_PREFIX + n,
+            email: USERNAME_PREFIX + n + '@' + EMAIL_DOMAIN,
+            displayName: DISPLAYNAME_PREFIX + n
+        };
+
+        superagent.post(`https://${cloudronDomain}/api/v1/users`, user).query({ access_token: accessToken }).end(function (error) {
+            if (error) return next(error);
+
+            process.stdout.write('.');
+
+            next();
+        });
+    }, function (error) {
+        console.log();
+
+        if (error) {
+            console.error(error);
+            process.exit(1);
+        }
+
+        console.log('Done');
+    });
+});

dashboard/scripts/createTimezones.js

@@ -0,0 +1,387 @@
+#!/usr/bin/env node
+
+// This script creates a specific timezones.js to be consumed by the dashboard
+
+var execSync = require('child_process').execSync,
+    fs = require('fs'),
+    path = require('path');
+
+if (process.argv.length !== 3) {
+    console.log('Usage: createTimezones.js <output.js>');
+    process.exit(1);
+}
+
+const destinationFilePath = path.resolve(process.argv[2]);
+console.log('Creating timezone info at:', destinationFilePath);
+
+var ubuntuTimezones = execSync('timedatectl list-timezones --no-pager').toString().split('\n').filter(function (t) { return !!t; });
+
+// from https://github.com/dmfilipenko/timezones.json/blob/master/timezones.json
+var details = [
+    { name: 'UTC', offset: '+00:00' },
+    { name: 'Africa/Abidjan', offset: '+00:00' },
+    { name: 'Africa/Accra', offset: '+00:00' },
+    { name: 'Africa/Algiers', offset: '+01:00' },
+    { name: 'Africa/Bissau', offset: '+00:00' },
+    { name: 'Africa/Cairo', offset: '+02:00' },
+    { name: 'Africa/Casablanca', offset: '+01:00' },
+    { name: 'Africa/Ceuta', offset: '+01:00' },
+    { name: 'Africa/El_Aaiun', offset: '+00:00' },
+    { name: 'Africa/Johannesburg', offset: '+02:00' },
+    { name: 'Africa/Juba', offset: '+03:00' },
+    { name: 'Africa/Khartoum', offset: '+02:00' },
+    { name: 'Africa/Lagos', offset: '+01:00' },
+    { name: 'Africa/Maputo', offset: '+02:00' },
+    { name: 'Africa/Monrovia', offset: '+00:00' },
+    { name: 'Africa/Nairobi', offset: '+03:00' },
+    { name: 'Africa/Ndjamena', offset: '+01:00' },
+    { name: 'Africa/Tripoli', offset: '+02:00' },
+    { name: 'Africa/Tunis', offset: '+01:00' },
+    { name: 'Africa/Windhoek', offset: '+02:00' },
+    { name: 'America/Adak', offset: '−10:00' },
+    { name: 'America/Anchorage', offset: '−09:00' },
+    { name: 'America/Araguaina', offset: '−03:00' },
+    { name: 'America/Argentina/Buenos_Aires', offset: '−03:00' },
+    { name: 'America/Argentina/Catamarca', offset: '−03:00' },
+    { name: 'America/Argentina/Cordoba', offset: '−03:00' },
+    { name: 'America/Argentina/Jujuy', offset: '−03:00' },
+    { name: 'America/Argentina/La_Rioja', offset: '−03:00' },
+    { name: 'America/Argentina/Mendoza', offset: '−03:00' },
+    { name: 'America/Argentina/Rio_Gallegos', offset: '−03:00' },
+    { name: 'America/Argentina/Salta', offset: '−03:00' },
+    { name: 'America/Argentina/San_Juan', offset: '−03:00' },
+    { name: 'America/Argentina/San_Luis', offset: '−03:00' },
+    { name: 'America/Argentina/Tucuman', offset: '−03:00' },
+    { name: 'America/Argentina/Ushuaia', offset: '−03:00' },
+    { name: 'America/Asuncion', offset: '−04:00' },
+    { name: 'America/Atikokan', offset: '−05:00' },
+    { name: 'America/Bahia', offset: '−03:00' },
+    { name: 'America/Bahia_Banderas', offset: '−06:00' },
+    { name: 'America/Barbados', offset: '−04:00' },
+    { name: 'America/Belem', offset: '−03:00' },
+    { name: 'America/Belize', offset: '−06:00' },
+    { name: 'America/Blanc-Sablon', offset: '−04:00' },
+    { name: 'America/Boa_Vista', offset: '−04:00' },
+    { name: 'America/Bogota', offset: '−05:00' },
+    { name: 'America/Boise', offset: '−07:00' },
+    { name: 'America/Cambridge_Bay', offset: '−07:00' },
+    { name: 'America/Campo_Grande', offset: '−04:00' },
+    { name: 'America/Cancun', offset: '−05:00' },
+    { name: 'America/Caracas', offset: '−04:00' },
+    { name: 'America/Cayenne', offset: '−03:00' },
+    { name: 'America/Chicago', offset: '−06:00' },
+    { name: 'America/Chihuahua', offset: '−07:00' },
+    { name: 'America/Costa_Rica', offset: '−06:00' },
+    { name: 'America/Creston', offset: '−07:00' },
+    { name: 'America/Cuiaba', offset: '−04:00' },
+    { name: 'America/Curacao', offset: '−04:00' },
+    { name: 'America/Danmarkshavn', offset: '+00:00' },
+    { name: 'America/Dawson', offset: '−08:00' },
+    { name: 'America/Dawson_Creek', offset: '−07:00' },
+    { name: 'America/Denver', offset: '−07:00' },
+    { name: 'America/Detroit', offset: '−05:00' },
+    { name: 'America/Edmonton', offset: '−07:00' },
+    { name: 'America/Eirunepe', offset: '−05:00' },
+    { name: 'America/El_Salvador', offset: '−06:00' },
+    { name: 'America/Fort_Nelson', offset: '−07:00' },
+    { name: 'America/Fortaleza', offset: '−03:00' },
+    { name: 'America/Glace_Bay', offset: '−04:00' },
+    { name: 'America/Godthab', offset: '−03:00' },
+    { name: 'America/Goose_Bay', offset: '−04:00' },
+    { name: 'America/Grand_Turk', offset: '−05:00' },
+    { name: 'America/Guatemala', offset: '−06:00' },
+    { name: 'America/Guayaquil', offset: '−05:00' },
+    { name: 'America/Guyana', offset: '−04:00' },
+    { name: 'America/Halifax', offset: '−04:00' },
+    { name: 'America/Havana', offset: '−05:00' },
+    { name: 'America/Hermosillo', offset: '−07:00' },
+    { name: 'America/Indiana/Indianapolis', offset: '−05:00' },
+    { name: 'America/Indiana/Knox', offset: '−06:00' },
+    { name: 'America/Indiana/Marengo', offset: '−05:00' },
+    { name: 'America/Indiana/Petersburg', offset: '−05:00' },
+    { name: 'America/Indiana/Tell_City', offset: '−06:00' },
+    { name: 'America/Indiana/Vevay', offset: '−05:00' },
+    { name: 'America/Indiana/Vincennes', offset: '−05:00' },
+    { name: 'America/Indiana/Winamac', offset: '−05:00' },
+    { name: 'America/Inuvik', offset: '−07:00' },
+    { name: 'America/Iqaluit', offset: '−05:00' },
+    { name: 'America/Jamaica', offset: '−05:00' },
+    { name: 'America/Juneau', offset: '−09:00' },
+    { name: 'America/Kentucky/Louisville', offset: '−05:00' },
+    { name: 'America/Kentucky/Monticello', offset: '−05:00' },
+    { name: 'America/La_Paz', offset: '−04:00' },
+    { name: 'America/Lima', offset: '−05:00' },
+    { name: 'America/Los_Angeles', offset: '−08:00' },
+    { name: 'America/Maceio', offset: '−03:00' },
+    { name: 'America/Managua', offset: '−06:00' },
+    { name: 'America/Manaus', offset: '−04:00' },
+    { name: 'America/Martinique', offset: '−04:00' },
+    { name: 'America/Matamoros', offset: '−06:00' },
+    { name: 'America/Mazatlan', offset: '−07:00' },
+    { name: 'America/Menominee', offset: '−06:00' },
+    { name: 'America/Merida', offset: '−06:00' },
+    { name: 'America/Metlakatla', offset: '−09:00' },
+    { name: 'America/Mexico_City', offset: '−06:00' },
+    { name: 'America/Miquelon', offset: '−03:00' },
+    { name: 'America/Moncton', offset: '−04:00' },
+    { name: 'America/Monterrey', offset: '−06:00' },
+    { name: 'America/Montevideo', offset: '−03:00' },
+    { name: 'America/Nassau', offset: '−05:00' },
+    { name: 'America/New_York', offset: '−05:00' },
+    { name: 'America/Nipigon', offset: '−05:00' },
+    { name: 'America/Nome', offset: '−09:00' },
+    { name: 'America/Noronha', offset: '−02:00' },
+    { name: 'America/North_Dakota/Beulah', offset: '−06:00' },
+    { name: 'America/North_Dakota/Center', offset: '−06:00' },
+    { name: 'America/North_Dakota/New_Salem', offset: '−06:00' },
+    { name: 'America/Ojinaga', offset: '−07:00' },
+    { name: 'America/Panama', offset: '−05:00' },
+    { name: 'America/Pangnirtung', offset: '−05:00' },
+    { name: 'America/Paramaribo', offset: '−03:00' },
+    { name: 'America/Phoenix', offset: '−07:00' },
+    { name: 'America/Port_of_Spain', offset: '−04:00' },
+    { name: 'America/Port-au-Prince', offset: '−05:00' },
+    { name: 'America/Porto_Velho', offset: '−04:00' },
+    { name: 'America/Puerto_Rico', offset: '−04:00' },
+    { name: 'America/Punta_Arenas', offset: '−03:00' },
+    { name: 'America/Rainy_River', offset: '−06:00' },
+    { name: 'America/Rankin_Inlet', offset: '−06:00' },
+    { name: 'America/Recife', offset: '−03:00' },
+    { name: 'America/Regina', offset: '−06:00' },
+    { name: 'America/Resolute', offset: '−06:00' },
+    { name: 'America/Rio_Branco', offset: '−05:00' },
+    { name: 'America/Santarem', offset: '−03:00' },
+    { name: 'America/Santiago', offset: '−04:00' },
+    { name: 'America/Santo_Domingo', offset: '−04:00' },
+    { name: 'America/Sao_Paulo', offset: '−03:00' },
+    { name: 'America/Scoresbysund', offset: '−01:00' },
+    { name: 'America/Sitka', offset: '−09:00' },
+    { name: 'America/St_Johns', offset: '−03:30' },
+    { name: 'America/Swift_Current', offset: '−06:00' },
+    { name: 'America/Tegucigalpa', offset: '−06:00' },
+    { name: 'America/Thule', offset: '−04:00' },
+    { name: 'America/Thunder_Bay', offset: '−05:00' },
+    { name: 'America/Tijuana', offset: '−08:00' },
+    { name: 'America/Toronto', offset: '−05:00' },
+    { name: 'America/Vancouver', offset: '−08:00' },
+    { name: 'America/Whitehorse', offset: '−08:00' },
+    { name: 'America/Winnipeg', offset: '−06:00' },
+    { name: 'America/Yakutat', offset: '−09:00' },
+    { name: 'America/Yellowknife', offset: '−07:00' },
+    { name: 'Antarctica/Casey', offset: '+11:00' },
+    { name: 'Antarctica/Davis', offset: '+07:00' },
+    { name: 'Antarctica/DumontDUrville', offset: '+10:00' },
+    { name: 'Antarctica/Macquarie', offset: '+11:00' },
+    { name: 'Antarctica/Mawson', offset: '+05:00' },
+    { name: 'Antarctica/Palmer', offset: '−03:00' },
+    { name: 'Antarctica/Rothera', offset: '−03:00' },
+    { name: 'Antarctica/Syowa', offset: '+03:00' },
+    { name: 'Antarctica/Troll', offset: '+00:00' },
+    { name: 'Antarctica/Vostok', offset: '+06:00' },
+    { name: 'Asia/Almaty', offset: '+06:00' },
+    { name: 'Asia/Amman', offset: '+02:00' },
+    { name: 'Asia/Anadyr', offset: '+12:00' },
+    { name: 'Asia/Aqtau', offset: '+05:00' },
+    { name: 'Asia/Aqtobe', offset: '+05:00' },
+    { name: 'Asia/Ashgabat', offset: '+05:00' },
+    { name: 'Asia/Atyrau', offset: '+05:00' },
+    { name: 'Asia/Baghdad', offset: '+03:00' },
+    { name: 'Asia/Baku', offset: '+04:00' },
+    { name: 'Asia/Bangkok', offset: '+07:00' },
+    { name: 'Asia/Barnaul', offset: '+07:00' },
+    { name: 'Asia/Beirut', offset: '+02:00' },
+    { name: 'Asia/Bishkek', offset: '+06:00' },
+    { name: 'Asia/Brunei', offset: '+08:00' },
+    { name: 'Asia/Chita', offset: '+09:00' },
+    { name: 'Asia/Choibalsan', offset: '+08:00' },
+    { name: 'Asia/Colombo', offset: '+05:30' },
+    { name: 'Asia/Damascus', offset: '+02:00' },
+    { name: 'Asia/Dhaka', offset: '+06:00' },
+    { name: 'Asia/Dili', offset: '+09:00' },
+    { name: 'Asia/Dubai', offset: '+04:00' },
+    { name: 'Asia/Dushanbe', offset: '+05:00' },
+    { name: 'Asia/Famagusta', offset: '+02:00' },
+    { name: 'Asia/Gaza', offset: '+02:00' },
+    { name: 'Asia/Hebron', offset: '+02:00' },
+    { name: 'Asia/Ho_Chi_Minh', offset: '+07:00' },
+    { name: 'Asia/Hong_Kong', offset: '+08:00' },
+    { name: 'Asia/Hovd', offset: '+07:00' },
+    { name: 'Asia/Irkutsk', offset: '+08:00' },
+    { name: 'Asia/Jakarta', offset: '+07:00' },
+    { name: 'Asia/Jayapura', offset: '+09:00' },
+    { name: 'Asia/Jerusalem', offset: '+02:00' },
+    { name: 'Asia/Kabul', offset: '+04:30' },
+    { name: 'Asia/Kamchatka', offset: '+12:00' },
+    { name: 'Asia/Karachi', offset: '+05:00' },
+    { name: 'Asia/Kathmandu', offset: '+05:45' },
+    { name: 'Asia/Khandyga', offset: '+09:00' },
+    { name: 'Asia/Kolkata', offset: '+05:30' },
+    { name: 'Asia/Krasnoyarsk', offset: '+07:00' },
+    { name: 'Asia/Kuala_Lumpur', offset: '+08:00' },
+    { name: 'Asia/Kuching', offset: '+08:00' },
+    { name: 'Asia/Macau', offset: '+08:00' },
+    { name: 'Asia/Magadan', offset: '+11:00' },
+    { name: 'Asia/Makassar', offset: '+08:00' },
+    { name: 'Asia/Manila', offset: '+08:00' },
+    { name: 'Asia/Novokuznetsk', offset: '+07:00' },
+    { name: 'Asia/Novosibirsk', offset: '+07:00' },
+    { name: 'Asia/Omsk', offset: '+06:00' },
+    { name: 'Asia/Oral', offset: '+05:00' },
+    { name: 'Asia/Pontianak', offset: '+07:00' },
+    { name: 'Asia/Pyongyang', offset: '+09:00' },
+    { name: 'Asia/Qatar', offset: '+03:00' },
+    { name: 'Asia/Qyzylorda', offset: '+05:00' },
+    { name: 'Asia/Riyadh', offset: '+03:00' },
+    { name: 'Asia/Sakhalin', offset: '+11:00' },
+    { name: 'Asia/Samarkand', offset: '+05:00' },
+    { name: 'Asia/Seoul', offset: '+09:00' },
+    { name: 'Asia/Shanghai', offset: '+08:00' },
+    { name: 'Asia/Singapore', offset: '+08:00' },
+    { name: 'Asia/Srednekolymsk', offset: '+11:00' },
+    { name: 'Asia/Taipei', offset: '+08:00' },
+    { name: 'Asia/Tashkent', offset: '+05:00' },
+    { name: 'Asia/Tbilisi', offset: '+04:00' },
+    { name: 'Asia/Tehran', offset: '+03:30' },
+    { name: 'Asia/Thimphu', offset: '+06:00' },
+    { name: 'Asia/Tokyo', offset: '+09:00' },
+    { name: 'Asia/Tomsk', offset: '+07:00' },
+    { name: 'Asia/Ulaanbaatar', offset: '+08:00' },
+    { name: 'Asia/Urumqi', offset: '+06:00' },
+    { name: 'Asia/Ust-Nera', offset: '+10:00' },
+    { name: 'Asia/Vladivostok', offset: '+10:00' },
+    { name: 'Asia/Yakutsk', offset: '+09:00' },
+    { name: 'Asia/Yangon', offset: '+06:30' },
+    { name: 'Asia/Yekaterinburg', offset: '+05:00' },
+    { name: 'Asia/Yerevan', offset: '+04:00' },
+    { name: 'Atlantic/Azores', offset: '−01:00' },
+    { name: 'Atlantic/Bermuda', offset: '−04:00' },
+    { name: 'Atlantic/Canary', offset: '+00:00' },
+    { name: 'Atlantic/Cape_Verde', offset: '−01:00' },
+    { name: 'Atlantic/Faroe', offset: '+00:00' },
+    { name: 'Atlantic/Madeira', offset: '+00:00' },
+    { name: 'Atlantic/Reykjavik', offset: '+00:00' },
+    { name: 'Atlantic/South_Georgia', offset: '−02:00' },
+    { name: 'Atlantic/Stanley', offset: '−03:00' },
+    { name: 'Australia/Adelaide', offset: '+09:30' },
+    { name: 'Australia/Brisbane', offset: '+10:00' },
+    { name: 'Australia/Broken_Hill', offset: '+09:30' },
+    { name: 'Australia/Currie', offset: '+10:00' },
+    { name: 'Australia/Darwin', offset: '+09:30' },
+    { name: 'Australia/Eucla', offset: '+08:45' },
+    { name: 'Australia/Hobart', offset: '+10:00' },
+    { name: 'Australia/Lindeman', offset: '+10:00' },
+    { name: 'Australia/Lord_Howe', offset: '+10:30' },
+    { name: 'Australia/Melbourne', offset: '+10:00' },
+    { name: 'Australia/Perth', offset: '+08:00' },
+    { name: 'Australia/Sydney', offset: '+10:00' },
+    { name: 'Europe/Amsterdam', offset: '+01:00' },
+    { name: 'Europe/Andorra', offset: '+01:00' },
+    { name: 'Europe/Astrakhan', offset: '+04:00' },
+    { name: 'Europe/Athens', offset: '+02:00' },
+    { name: 'Europe/Belgrade', offset: '+01:00' },
+    { name: 'Europe/Berlin', offset: '+01:00' },
+    { name: 'Europe/Brussels', offset: '+01:00' },
+    { name: 'Europe/Bucharest', offset: '+02:00' },
+    { name: 'Europe/Budapest', offset: '+01:00' },
+    { name: 'Europe/Chisinau', offset: '+02:00' },
+    { name: 'Europe/Copenhagen', offset: '+01:00' },
+    { name: 'Europe/Dublin', offset: '+00:00' },
+    { name: 'Europe/Gibraltar', offset: '+01:00' },
+    { name: 'Europe/Helsinki', offset: '+02:00' },
+    { name: 'Europe/Istanbul', offset: '+03:00' },
+    { name: 'Europe/Kaliningrad', offset: '+02:00' },
+    { name: 'Europe/Kiev', offset: '+02:00' },
+    { name: 'Europe/Kirov', offset: '+03:00' },
+    { name: 'Europe/Lisbon', offset: '+00:00' },
+    { name: 'Europe/London', offset: '+00:00' },
+    { name: 'Europe/Luxembourg', offset: '+01:00' },
+    { name: 'Europe/Madrid', offset: '+01:00' },
+    { name: 'Europe/Malta', offset: '+01:00' },
+    { name: 'Europe/Minsk', offset: '+03:00' },
+    { name: 'Europe/Monaco', offset: '+01:00' },
+    { name: 'Europe/Moscow', offset: '+03:00' },
+    { name: 'Asia/Nicosia', offset: '+02:00' },
+    { name: 'Europe/Oslo', offset: '+01:00' },
+    { name: 'Europe/Paris', offset: '+01:00' },
+    { name: 'Europe/Prague', offset: '+01:00' },
+    { name: 'Europe/Riga', offset: '+02:00' },
+    { name: 'Europe/Rome', offset: '+01:00' },
+    { name: 'Europe/Samara', offset: '+04:00' },
+    { name: 'Europe/Saratov', offset: '+04:00' },
+    { name: 'Europe/Simferopol', offset: '+03:00' },
+    { name: 'Europe/Sofia', offset: '+02:00' },
+    { name: 'Europe/Stockholm', offset: '+01:00' },
+    { name: 'Europe/Tallinn', offset: '+02:00' },
+    { name: 'Europe/Tirane', offset: '+01:00' },
+    { name: 'Europe/Ulyanovsk', offset: '+04:00' },
+    { name: 'Europe/Uzhgorod', offset: '+02:00' },
+    { name: 'Europe/Vienna', offset: '+01:00' },
+    { name: 'Europe/Vilnius', offset: '+02:00' },
+    { name: 'Europe/Volgograd', offset: '+04:00' },
+    { name: 'Europe/Warsaw', offset: '+01:00' },
+    { name: 'Europe/Zaporozhye', offset: '+02:00' },
+    { name: 'Europe/Zurich', offset: '+01:00' },
+    { name: 'Indian/Chagos', offset: '+06:00' },
+    { name: 'Indian/Christmas', offset: '+07:00' },
+    { name: 'Indian/Cocos', offset: '+06:30' },
+    { name: 'Indian/Kerguelen', offset: '+05:00' },
+    { name: 'Indian/Mahe', offset: '+04:00' },
+    { name: 'Indian/Maldives', offset: '+05:00' },
+    { name: 'Indian/Mauritius', offset: '+04:00' },
+    { name: 'Indian/Reunion', offset: '+04:00' },
+    { name: 'Pacific/Apia', offset: '+13:00' },
+    { name: 'Pacific/Auckland', offset: '+12:00' },
+    { name: 'Pacific/Bougainville', offset: '+11:00' },
+    { name: 'Pacific/Chatham', offset: '+12:45' },
+    { name: 'Pacific/Chuuk', offset: '+10:00' },
+    { name: 'Pacific/Easter', offset: '−06:00' },
+    { name: 'Pacific/Efate', offset: '+11:00' },
+    { name: 'Pacific/Enderbury', offset: '+13:00' },
+    { name: 'Pacific/Fakaofo', offset: '+13:00' },
+    { name: 'Pacific/Fiji', offset: '+12:00' },
+    { name: 'Pacific/Funafuti', offset: '+12:00' },
+    { name: 'Pacific/Galapagos', offset: '−06:00' },
+    { name: 'Pacific/Gambier', offset: '−09:00' },
+    { name: 'Pacific/Guadalcanal', offset: '+11:00' },
+    { name: 'Pacific/Guam', offset: '+10:00' },
+    { name: 'Pacific/Honolulu', offset: '−10:00' },
+    { name: 'Pacific/Kiritimati', offset: '+14:00' },
+    { name: 'Pacific/Kosrae', offset: '+11:00' },
+    { name: 'Pacific/Kwajalein', offset: '+12:00' },
+    { name: 'Pacific/Majuro', offset: '+12:00' },
+    { name: 'Pacific/Marquesas', offset: '−09:30' },
+    { name: 'Pacific/Nauru', offset: '+12:00' },
+    { name: 'Pacific/Niue', offset: '−11:00' },
+    { name: 'Pacific/Norfolk', offset: '+11:00' },
+    { name: 'Pacific/Noumea', offset: '+11:00' },
+    { name: 'Pacific/Pago_Pago', offset: '−11:00' },
+    { name: 'Pacific/Palau', offset: '+09:00' },
+    { name: 'Pacific/Pitcairn', offset: '−08:00' },
+    { name: 'Pacific/Pohnpei', offset: '+11:00' },
+    { name: 'Pacific/Port_Moresby', offset: '+10:00' },
+    { name: 'Pacific/Rarotonga', offset: '−10:00' },
+    { name: 'Pacific/Tahiti', offset: '−10:00' },
+    { name: 'Pacific/Tarawa', offset: '+12:00' },
+    { name: 'Pacific/Tongatapu', offset: '+13:00' },
+    { name: 'Pacific/Wake', offset: '+12:00' },
+    { name: 'Pacific/Wallis', offset: '+12:00' },
+];
+
+var timezones = ubuntuTimezones.map(function (t) {
+    var detail = details.find(function (d) {
+        return d.name === t;
+    });
+
+    if (!detail) return null;
+
+    return {
+        id: t,
+        display: `${t} (UTC${detail.offset})`
+    }
+}).filter(function (t) { return !!t; });
+
+var output = `(function () { window.timezones = ${JSON.stringify(timezones)}; })();\n`;
+
+fs.writeFileSync(destinationFilePath, output, 'utf-8');
+
+console.log('Done');

dashboard/scripts/delUsers.js

@@ -0,0 +1,69 @@
+#!/usr/bin/env node
+
+// This script deletes many users to test the UI for such a case
+
+// WARNING keep those in sync with addUsers.js
+const USERNAME_PREFIX = 'manyuser';
+
+var async = require('async'),
+    readlineSync = require('readline-sync'),
+    superagent = require('superagent');
+
+if (process.argv.length !== 3) {
+    console.log('Usage: ./delUsers.js <cloudronDomain>');
+    process.exit(1);
+}
+
+const cloudronDomain = process.argv[2];
+
+function getAccessToken(callback) {
+    let username = readlineSync.question('Username: ', {});
+    let password = readlineSync.question('Password: ', { noEchoBack: true });
+
+    superagent.post(`https://${cloudronDomain}/api/v1/auth/login`, { username: username, password: password }).end(function (error, result) {
+        if (error || result.statusCode !== 200) {
+            console.log('Login failed');
+            return getAccessToken(callback);
+        }
+
+        callback(result.body.accessToken);
+    });
+}
+
+console.log(`Login to ${cloudronDomain}`);
+getAccessToken(function (accessToken) {
+    console.log('Listing users...');
+
+    superagent.get(`https://${cloudronDomain}/api/v1/users`).query({ access_token: accessToken, per_page: 1000 }).end(function (error, result) {
+            if (error) {
+                console.error(error);
+                process.exit(1);
+            }
+
+            console.log(`Found ${result.body.users.length} users`);
+            let matchingUsers = result.body.users.filter(function (u) { return u.username.indexOf(USERNAME_PREFIX) === 0; });
+            console.log(`Found ${matchingUsers.length} users with matching prefix`);
+
+            console.log('Deleting users...');
+
+            async.eachLimit(matchingUsers, 5, function (user, next) {
+                superagent.del(`https://${cloudronDomain}/api/v1/users/${user.id}`).query({ access_token: accessToken }).end(function (error) {
+                    if (error) return next(error);
+
+                    process.stdout.write('.');
+
+                    next();
+                });
+            }, function (error) {
+                console.log();
+
+                if (error) {
+                    console.error(error);
+                    process.exit(1);
+                }
+
+                console.log('Done');
+            });
+        });
+
+});

dashboard/scripts/package-lock.json

@@ -0,0 +1,163 @@
+{
+  "name": "scripts",
+  "version": "1.0.0",
+  "lockfileVersion": 1,
+  "requires": true,
+  "dependencies": {
+    "async": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.1.0.tgz",
+      "integrity": "sha512-4vx/aaY6j/j3Lw3fbCHNWP0pPaTCew3F6F3hYyl/tHs/ndmV1q7NW9T5yuJ2XAGwdQrP+6Wu20x06U4APo/iQQ=="
+    },
+    "asynckit": {
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
+      "integrity": "sha1-x57Zf380y48robyXkLzDZkdLS3k="
+    },
+    "combined-stream": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
+      "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
+      "requires": {
+        "delayed-stream": "~1.0.0"
+      }
+    },
+    "component-emitter": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.0.tgz",
+      "integrity": "sha512-Rd3se6QB+sO1TwqZjscQrurpEPIfO0/yYnSin6Q/rD3mOutHvUrCAhJub3r90uNb+SESBuE0QYoB90YdfatsRg=="
+    },
+    "cookiejar": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/cookiejar/-/cookiejar-2.1.2.tgz",
+      "integrity": "sha512-Mw+adcfzPxcPeI+0WlvRrr/3lGVO0bD75SxX6811cxSh1Wbxx7xZBGK1eVtDf6si8rg2lhnUjsVLMFMfbRIuwA=="
+    },
+    "debug": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz",
+      "integrity": "sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==",
+      "requires": {
+        "ms": "^2.1.1"
+      }
+    },
+    "delayed-stream": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
+      "integrity": "sha1-3zrhmayt+31ECqrgsp4icrJOxhk="
+    },
+    "fast-safe-stringify": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/fast-safe-stringify/-/fast-safe-stringify-2.0.7.tgz",
+      "integrity": "sha512-Utm6CdzT+6xsDk2m8S6uL8VHxNwI6Jub+e9NYTcAms28T84pTa25GJQV9j0CY0N1rM8hK4x6grpF2BQf+2qwVA=="
+    },
+    "form-data": {
+      "version": "2.5.1",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-2.5.1.tgz",
+      "integrity": "sha512-m21N3WOmEEURgk6B9GLOE4RuWOFf28Lhh9qGYeNlGq4VDXUlJy2th2slBNU8Gp8EzloYZOibZJ7t5ecIrFSjVA==",
+      "requires": {
+        "asynckit": "^0.4.0",
+        "combined-stream": "^1.0.6",
+        "mime-types": "^2.1.12"
+      }
+    },
+    "formidable": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/formidable/-/formidable-1.2.1.tgz",
+      "integrity": "sha512-Fs9VRguL0gqGHkXS5GQiMCr1VhZBxz0JnJs4JmMp/2jL18Fmbzvv7vOFRU+U8TBkHEE/CX1qDXzJplVULgsLeg=="
+    },
+    "inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="
+    },
+    "methods": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
+      "integrity": "sha1-VSmk1nZUE07cxSZmVoNbD4Ua/O4="
+    },
+    "mime": {
+      "version": "2.4.4",
+      "resolved": "https://registry.npmjs.org/mime/-/mime-2.4.4.tgz",
+      "integrity": "sha512-LRxmNwziLPT828z+4YkNzloCFC2YM4wrB99k+AV5ZbEyfGNWfG8SO1FUXLmLDBSo89NrJZ4DIWeLjy1CHGhMGA=="
+    },
+    "mime-db": {
+      "version": "1.40.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.40.0.tgz",
+      "integrity": "sha512-jYdeOMPy9vnxEqFRRo6ZvTZ8d9oPb+k18PKoYNYUe2stVEBPPwsln/qWzdbmaIvnhZ9v2P+CuecK+fpUfsV2mA=="
+    },
+    "mime-types": {
+      "version": "2.1.24",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.24.tgz",
+      "integrity": "sha512-WaFHS3MCl5fapm3oLxU4eYDw77IQM2ACcxQ9RIxfaC3ooc6PFuBMGZZsYpvoXS5D5QTWPieo1jjLdAm3TBP3cQ==",
+      "requires": {
+        "mime-db": "1.40.0"
+      }
+    },
+    "ms": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
+      "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
+    },
+    "qs": {
+      "version": "6.9.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.9.0.tgz",
+      "integrity": "sha512-27RP4UotQORTpmNQDX8BHPukOnBP3p1uUJY5UnDhaJB+rMt9iMsok724XL+UHU23bEFOHRMQ2ZhI99qOWUMGFA=="
+    },
+    "readable-stream": {
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.4.0.tgz",
+      "integrity": "sha512-jItXPLmrSR8jmTRmRWJXCnGJsfy85mB3Wd/uINMXA65yrnFo0cPClFIUWzo2najVNSl+mx7/4W8ttlLWJe99pQ==",
+      "requires": {
+        "inherits": "^2.0.3",
+        "string_decoder": "^1.1.1",
+        "util-deprecate": "^1.0.1"
+      }
+    },
+    "readline-sync": {
+      "version": "1.4.10",
+      "resolved": "https://registry.npmjs.org/readline-sync/-/readline-sync-1.4.10.tgz",
+      "integrity": "sha512-gNva8/6UAe8QYepIQH/jQ2qn91Qj0B9sYjMBBs3QOB8F2CXcKgLxQaJRP76sWVRQt+QU+8fAkCbCvjjMFu7Ycw=="
+    },
+    "safe-buffer": {
+      "version": "5.2.0",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.0.tgz",
+      "integrity": "sha512-fZEwUGbVl7kouZs1jCdMLdt95hdIv0ZeHg6L7qPeciMZhZ+/gdesW4wgTARkrFWEpspjEATAzUGPG8N2jJiwbg=="
+    },
+    "semver": {
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz",
+      "integrity": "sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw=="
+    },
+    "string_decoder": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",
+      "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==",
+      "requires": {
+        "safe-buffer": "~5.2.0"
+      }
+    },
+    "superagent": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/superagent/-/superagent-5.1.0.tgz",
+      "integrity": "sha512-7V6JVx5N+eTL1MMqRBX0v0bG04UjrjAvvZJTF/VDH/SH2GjSLqlrcYepFlpTrXpm37aSY6h3GGVWGxXl/98TKA==",
+      "requires": {
+        "component-emitter": "^1.3.0",
+        "cookiejar": "^2.1.2",
+        "debug": "^4.1.1",
+        "fast-safe-stringify": "^2.0.6",
+        "form-data": "^2.3.3",
+        "formidable": "^1.2.1",
+        "methods": "^1.1.2",
+        "mime": "^2.4.4",
+        "qs": "^6.7.0",
+        "readable-stream": "^3.4.0",
+        "semver": "^6.1.1"
+      }
+    },
+    "util-deprecate": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
+      "integrity": "sha1-RQ1Nyfpw3nMnYvvS1KKJgUGaDM8="
+    }
+  }
+}

dashboard/scripts/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "scripts",
+  "version": "1.0.0",
+  "description": "",
+  "main": "manyUsers.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "",
+  "license": "ISC",
+  "dependencies": {
+    "async": "^3.1.0",
+    "readline-sync": "^1.4.10",
+    "superagent": "^5.1.0"
+  }
+}

dashboard/src/3rdparty/angular-ui-notification.css

@@ -0,0 +1,85 @@
+/**
+ * angular-ui-notification - Angular.js service providing simple notifications using Bootstrap 3 styles with css transitions for animating
+ * @author Alex_Crack
+ * @version v0.3.6
+ * @link https://github.com/alexcrack/angular-ui-notification
+ * @license MIT
+ */
+.ui-notification
+{
+    position: fixed;
+    z-index: 9999;
+
+    width: 300px;
+
+    -webkit-transition: all ease .5s;
+         -o-transition: all ease .5s;
+            transition: all ease .5s;
+
+    color: #fff;
+    border-radius: 0;
+    background: #337ab7;
+    box-shadow: 5px 5px 10px rgba(0, 0, 0, .3);
+}
+.ui-notification.clickable
+{
+    cursor: pointer;
+}
+.ui-notification.clickable:hover
+{
+    opacity: .7;
+}
+.ui-notification.killed
+{
+    -webkit-transition: opacity ease 1s;
+         -o-transition: opacity ease 1s;
+            transition: opacity ease 1s;
+
+    opacity: 0;
+}
+.ui-notification > h3
+{
+    font-size: 14px;
+    font-weight: bold;
+
+    display: block;
+
+    margin: 10px 10px 0 10px;
+    padding: 0 0 5px 0;
+
+    text-align: left;
+
+    border-bottom: 1px solid rgba(255, 255, 255, .3);
+}
+.ui-notification a
+{
+    color: #fff;
+}
+.ui-notification a:hover
+{
+    text-decoration: underline;
+}
+.ui-notification > .message
+{
+    margin: 10px 10px 10px 10px;
+}
+.ui-notification.warning
+{
+    color: #fff;
+    background: #f0ad4e;
+}
+.ui-notification.error
+{
+    color: #fff;
+    background: #d9534f;
+}
+.ui-notification.success
+{
+    color: #fff;
+    background: #5cb85c;
+}
+.ui-notification.info
+{
+    color: #fff;
+    background: #5bc0de;
+}

dashboard/src/3rdparty/js/angular-bootstrap-multiselect.js

@@ -1,5 +1,12 @@
 "use strict";
 
+// -------------------------------
+// WARNING
+// -------------------------------
+// This file is taken from https://github.com/sebastianha/angular-bootstrap-multiselect
+// There are local modifications like support for translation
+// -------------------------------
+
 angular.module("ui.multiselect", ["multiselect.tpl.html"])
 	//from bootstrap-ui typeahead parser
 	.factory("optionParser", ["$parse", function($parse) {
@@ -23,7 +30,7 @@ angular.module("ui.multiselect", ["multiselect.tpl.html"])
 			}
 		};
 	}])
-	.directive("multiselect", ["$parse", "$document", "$compile", "$interpolate", "optionParser", function($parse, $document, $compile, $interpolate, optionParser) {
+	.directive("multiselect", ["$parse", "$document", "$compile", "$interpolate", "$translate", "optionParser", function($parse, $document, $compile, $interpolate, $translate, optionParser) {
 		return {
 			restrict: "E",
 			require : "ngModel",
@@ -154,7 +161,7 @@ angular.module("ui.multiselect", ["multiselect.tpl.html"])
 
 				function getHeaderText() {
 					if(isEmpty(modelCtrl.$modelValue)) {
-						scope.header = attrs.msHeader || "Select";
+						scope.header = attrs.msHeader || $translate.instant('main.multiselect.select');
 						return scope.header;
 					}
 
@@ -162,7 +169,7 @@ angular.module("ui.multiselect", ["multiselect.tpl.html"])
 						if(attrs.msSelected) {
 							scope.header = $interpolate(attrs.msSelected)(scope);
 						} else {
-							scope.header = modelCtrl.$modelValue.length + " " + "selected";
+							scope.header = $translate.instant('main.multiselect.selected', { n: modelCtrl.$modelValue.length });
 						}
 					} else {
 						var local = {};
@@ -342,7 +349,7 @@ angular.module("multiselect.tpl.html", []).run(["$templateCache", function($temp
 			"    <div ng-style=\"maxWidth\" style=\"padding-right: 13px; overflow: hidden; text-overflow: ellipsis;\">{{header}}</div><span class=\"caret\" style=\"position:absolute;right:10px;top:14px;\"></span>\n" +
 			"  </button>\n" +
 			"  <ul class=\"dropdown-menu\" style=\"margin-bottom:30px;padding-left:5px;padding-right:5px;\" ng-style=\"ulStyle\">\n" +
-			"    <input ng-show=\"items.length > filterAfterRows\" ng-model=\"filter\" style=\"padding: 0px 3px;margin-right: 15px; margin-bottom: 4px;\" placeholder=\"Type to filter options\">" +
+			"    <input ng-show=\"items.length > filterAfterRows\" ng-model=\"filter\" style=\"padding: 0px 3px; margin-bottom: 4px;\" placeholder=\"{{ 'main.multiselect.filterPlaceholder' | tr }}\">" +
 			"    <li data-stopPropagation=\"true\" ng-repeat=\"i in items | filter:filter\" ng-class=\"{'dropdown-header': i.header, 'divider': i.divider}\">\n" +
 			"      <a ng-if=\"!i.header && !i.divider\" ng-click=\"select($event, i)\" style=\"padding:3px 10px;cursor:pointer;\">\n" +
 			"        <i class=\"fa\" ng-class=\"{'fa-check': i.checked, 'empty': !i.checked}\"></i> {{i.label}}" +

dashboard/src/3rdparty/js/angular-cookies.min.js

@@ -0,0 +1,9 @@
+/*
+ AngularJS v1.5.8
+ (c) 2010-2016 Google, Inc. http://angularjs.org
+ License: MIT
+*/
+(function(n,c){'use strict';function l(b,a,g){var d=g.baseHref(),k=b[0];return function(b,e,f){var g,h;f=f||{};h=f.expires;g=c.isDefined(f.path)?f.path:d;c.isUndefined(e)&&(h="Thu, 01 Jan 1970 00:00:00 GMT",e="");c.isString(h)&&(h=new Date(h));e=encodeURIComponent(b)+"="+encodeURIComponent(e);e=e+(g?";path="+g:"")+(f.domain?";domain="+f.domain:"");e+=h?";expires="+h.toUTCString():"";e+=f.secure?";secure":"";f=e.length+1;4096<f&&a.warn("Cookie '"+b+"' possibly not set or overflowed because it was too large ("+
+f+" > 4096 bytes)!");k.cookie=e}}c.module("ngCookies",["ng"]).provider("$cookies",[function(){var b=this.defaults={};this.$get=["$$cookieReader","$$cookieWriter",function(a,g){return{get:function(d){return a()[d]},getObject:function(d){return(d=this.get(d))?c.fromJson(d):d},getAll:function(){return a()},put:function(d,a,m){g(d,a,m?c.extend({},b,m):b)},putObject:function(d,b,a){this.put(d,c.toJson(b),a)},remove:function(a,k){g(a,void 0,k?c.extend({},b,k):b)}}}]}]);c.module("ngCookies").factory("$cookieStore",
+["$cookies",function(b){return{get:function(a){return b.getObject(a)},put:function(a,c){b.putObject(a,c)},remove:function(a){b.remove(a)}}}]);l.$inject=["$document","$log","$browser"];c.module("ngCookies").provider("$$cookieWriter",function(){this.$get=l})})(window,window.angular);
+//# sourceMappingURL=angular-cookies.min.js.map

dashboard/src/3rdparty/js/angular-translate-loader-static-files.min.js

@@ -0,0 +1,6 @@
+/*!
+ * angular-translate - v2.18.3 - 2020-07-08
+ * 
+ * Copyright (c) 2020 The angular-translate team, Pascal Precht; Licensed MIT
+ */
+!function(e,i){"function"==typeof define&&define.amd?define([],function(){return i()}):"object"==typeof module&&module.exports?module.exports=i():i()}(0,function(){function e(n,a){"use strict";return function(r){if(!(r&&(angular.isArray(r.files)||angular.isString(r.prefix)&&angular.isString(r.suffix))))throw new Error("Couldn't load static files, no files and prefix or suffix specified!");r.files||(r.files=[{prefix:r.prefix,suffix:r.suffix}]);for(var e=function(e){if(!e||!angular.isString(e.prefix)||!angular.isString(e.suffix))throw new Error("Couldn't load static file, no prefix or suffix specified!");var i=[e.prefix,r.key,e.suffix].join("");return angular.isObject(r.fileMap)&&r.fileMap[i]&&(i=r.fileMap[i]),a(angular.extend({url:i,method:"GET"},r.$http)).then(function(e){return e.data},function(){return n.reject(r.key)})},i=[],t=r.files.length,f=0;f<t;f++)i.push(e({prefix:r.files[f].prefix,key:r.key,suffix:r.files[f].suffix}));return n.all(i).then(function(e){for(var i=e.length,r={},t=0;t<i;t++)for(var f in e[t])r[f]=e[t][f];return r})}}return e.$inject=["$q","$http"],angular.module("pascalprecht.translate").factory("$translateStaticFilesLoader",e),e.displayName="$translateStaticFilesLoader","pascalprecht.translate"});

dashboard/src/3rdparty/js/angular-translate-storage-cookie.min.js

@@ -0,0 +1,6 @@
+/*!
+ * angular-translate - v2.18.3 - 2020-07-08
+ * 
+ * Copyright (c) 2020 The angular-translate team, Pascal Precht; Licensed MIT
+ */
+!function(t,e){"function"==typeof define&&define.amd?define([],function(){return e()}):"object"==typeof module&&module.exports?module.exports=e():e()}(0,function(){function t(t){"use strict";var n;if(1===angular.version.major&&4<=angular.version.minor){var o=t.get("$cookies");n={get:function(t){return o.get(t)},put:function(t,e){o.put(t,e)}}}else{var r=t.get("$cookieStore");n={get:function(t){return r.get(t)},put:function(t,e){r.put(t,e)}}}return{get:function(t){return n.get(t)},set:function(t,e){n.put(t,e)},put:function(t,e){n.put(t,e)}}}return t.$inject=["$injector"],angular.module("pascalprecht.translate").factory("$translateCookieStorage",t),t.displayName="$translateCookieStorage","pascalprecht.translate"});

dashboard/src/3rdparty/js/angular-translate-storage-local.min.js

@@ -0,0 +1,6 @@
+/*!
+ * angular-translate - v2.18.3 - 2020-07-08
+ * 
+ * Copyright (c) 2020 The angular-translate team, Pascal Precht; Licensed MIT
+ */
+!function(t,e){"function"==typeof define&&define.amd?define([],function(){return e()}):"object"==typeof module&&module.exports?module.exports=e():e()}(0,function(){function t(a,t){"use strict";var o,e={get:function(t){return o||(o=a.localStorage.getItem(t)),o},set:function(t,e){o=e,a.localStorage.setItem(t,e)},put:function(t,e){o=e,a.localStorage.setItem(t,e)}},r="localStorage"in a;if(r){var n="pascalprecht.translate.storageTest";try{r=null!==a.localStorage&&(a.localStorage.setItem(n,"foo"),a.localStorage.removeItem(n),!0)}catch(t){r=!1}}return r?e:t}return t.$inject=["$window","$translateCookieStorage"],angular.module("pascalprecht.translate").factory("$translateLocalStorage",t),t.displayName="$translateLocalStorageFactory","pascalprecht.translate"});

dashboard/src/3rdparty/js/angular-ui-notification.js

@@ -0,0 +1,271 @@
+/**
+ * angular-ui-notification - Angular.js service providing simple notifications using Bootstrap 3 styles with css transitions for animating
+ * @author Alex_Crack
+ * @version v0.3.6
+ * @link https://github.com/alexcrack/angular-ui-notification
+ * @license MIT
+ */
+angular.module('ui-notification', []);
+
+angular.module('ui-notification').provider('Notification', function () {
+
+  this.options = {
+    delay: 5000,
+    startTop: 10,
+    startRight: 10,
+    verticalSpacing: 10,
+    horizontalSpacing: 10,
+    positionX: 'right',
+    positionY: 'top',
+    replaceMessage: false,
+    templateUrl: 'angular-ui-notification.html',
+    onClose: undefined,
+    onClick: undefined,
+    closeOnClick: true,
+    maxCount: 0, // 0 - Infinite
+    container: 'body',
+    priority: 10
+  };
+
+  this.setOptions = function (options) {
+    if (!angular.isObject(options)) throw new Error("Options should be an object!");
+    this.options = angular.extend({}, this.options, options);
+  };
+
+  this.$get = ["$timeout", "$http", "$compile", "$templateCache", "$rootScope", "$injector", "$sce", "$q", "$window", function ($timeout, $http, $compile, $templateCache, $rootScope, $injector, $sce, $q, $window) {
+    var options = this.options;
+
+    var startTop = options.startTop;
+    var startRight = options.startRight;
+    var verticalSpacing = options.verticalSpacing;
+    var horizontalSpacing = options.horizontalSpacing;
+    var delay = options.delay;
+
+    var messageElements = [];
+    var isResizeBound = false;
+
+    var notify = function (args, t) {
+      var deferred = $q.defer();
+
+      if (typeof args !== 'object' || args === null) {
+        args = {message: args};
+      }
+
+      args.scope = args.scope ? args.scope : $rootScope;
+      args.template = args.templateUrl ? args.templateUrl : options.templateUrl;
+      args.delay = !angular.isUndefined(args.delay) ? args.delay : delay;
+      args.type = t || args.type || options.type || '';
+      args.positionY = args.positionY ? args.positionY : options.positionY;
+      args.positionX = args.positionX ? args.positionX : options.positionX;
+      args.replaceMessage = args.replaceMessage ? args.replaceMessage : options.replaceMessage;
+      args.onClose = args.onClose ? args.onClose : options.onClose;
+      args.onClick = args.onClick ? args.onClick : options.onClick;
+      args.closeOnClick = (args.closeOnClick !== null && args.closeOnClick !== undefined) ? args.closeOnClick : options.closeOnClick;
+      args.container = args.container ? args.container : options.container;
+      args.priority = args.priority ? args.priority : options.priority;
+
+      var template = $templateCache.get(args.template);
+
+      if (template) {
+        processNotificationTemplate(template);
+      } else {
+        // load it via $http only if it isn't default template and template isn't exist in template cache
+        // cache:true means cache it for later access.
+        $http.get(args.template, {cache: true})
+          .then(function (response) {
+            processNotificationTemplate(response.data);
+          })
+          .catch(function (data) {
+            throw new Error('Template (' + args.template + ') could not be loaded. ' + data);
+          });
+      }
+
+
+      function processNotificationTemplate(template) {
+
+        var scope = args.scope.$new();
+        scope.message = $sce.trustAsHtml(args.message);
+        scope.title = $sce.trustAsHtml(args.title);
+        scope.t = args.type.substr(0, 1);
+        scope.delay = args.delay;
+        scope.onClose = args.onClose;
+        scope.onClick = args.onClick;
+
+        var priorityCompareTop = function (a, b) {
+          return a._priority - b._priority;
+        };
+
+        var priorityCompareBtm = function (a, b) {
+          return b._priority - a._priority;
+        };
+
+        var reposite = function () {
+          var j = 0;
+          var k = 0;
+          var lastTop = startTop;
+          var lastRight = startRight;
+          var lastPosition = [];
+
+          if (args.positionY === 'top') {
+            messageElements.sort(priorityCompareTop);
+          } else if (args.positionY === 'bottom') {
+            messageElements.sort(priorityCompareBtm);
+          }
+
+          for (var i = messageElements.length - 1; i >= 0; i--) {
+            var element = messageElements[i];
+            if (args.replaceMessage && i < messageElements.length - 1) {
+              element.addClass('killed');
+              continue;
+            }
+            var elHeight = parseInt(element[0].offsetHeight);
+            var elWidth = parseInt(element[0].offsetWidth);
+            var position = lastPosition[element._positionY + element._positionX];
+
+            if ((top + elHeight) > window.innerHeight) {
+              position = startTop;
+              k++;
+              j = 0;
+            }
+
+            var top = (lastTop = position ? (j === 0 ? position : position + verticalSpacing) : startTop);
+            var right = lastRight + (k * (horizontalSpacing + elWidth));
+
+            element.css(element._positionY, top + 'px');
+            if (element._positionX === 'center') {
+              element.css('left', parseInt(window.innerWidth / 2 - elWidth / 2) + 'px');
+            } else {
+              element.css(element._positionX, right + 'px');
+            }
+
+            lastPosition[element._positionY + element._positionX] = top + elHeight;
+
+            if (options.maxCount > 0 && messageElements.length > options.maxCount && i === 0) {
+              element.scope().kill(true);
+            }
+
+            j++;
+          }
+        };
+
+        var templateElement = $compile(template)(scope);
+        templateElement._positionY = args.positionY;
+        templateElement._positionX = args.positionX;
+        templateElement._priority = args.priority;
+        templateElement.addClass(args.type);
+
+        var closeEvent = function (e) {
+          e = e.originalEvent || e;
+          if (e.type === 'click' || e.propertyName === 'opacity' && e.elapsedTime >= 1) {
+
+            if (scope.onClose) {
+              scope.$apply(scope.onClose(templateElement));
+            }
+
+            if (e.type === 'click')
+              if (scope.onClick) {
+                scope.$apply(scope.onClick(templateElement));
+              }
+
+            templateElement.remove();
+            messageElements.splice(messageElements.indexOf(templateElement), 1);
+            scope.$destroy();
+            reposite();
+          }
+        };
+
+        if (args.closeOnClick) {
+          templateElement.addClass('clickable');
+          templateElement.bind('click', closeEvent);
+        }
+
+        templateElement.bind('webkitTransitionEnd oTransitionEnd otransitionend transitionend msTransitionEnd', closeEvent);
+
+        if (angular.isNumber(args.delay)) {
+          $timeout(function () {
+            templateElement.addClass('killed');
+          }, args.delay);
+        }
+
+        setCssTransitions('none');
+
+        angular.element(document.querySelector(args.container)).append(templateElement);
+        var offset = -(parseInt(templateElement[0].offsetHeight) + 50);
+        templateElement.css(templateElement._positionY, offset + "px");
+        messageElements.push(templateElement);
+
+        if (args.positionX == 'center') {
+          var elWidth = parseInt(templateElement[0].offsetWidth);
+          templateElement.css('left', parseInt(window.innerWidth / 2 - elWidth / 2) + 'px');
+        }
+
+        $timeout(function () {
+          setCssTransitions('');
+        });
+
+        function setCssTransitions(value) {
+          ['-webkit-transition', '-o-transition', 'transition'].forEach(function (prefix) {
+            templateElement.css(prefix, value);
+          });
+        }
+
+        scope._templateElement = templateElement;
+
+        scope.kill = function (isHard) {
+          if (isHard) {
+            if (scope.onClose) {
+              scope.$apply(scope.onClose(scope._templateElement));
+            }
+
+            messageElements.splice(messageElements.indexOf(scope._templateElement), 1);
+            scope._templateElement.remove();
+            scope.$destroy();
+            $timeout(reposite);
+          } else {
+            scope._templateElement.addClass('killed');
+          }
+        };
+
+        $timeout(reposite);
+
+        if (!isResizeBound) {
+          angular.element($window).bind('resize', function (e) {
+            $timeout(reposite);
+          });
+          isResizeBound = true;
+        }
+
+        deferred.resolve(scope);
+
+      }
+
+      return deferred.promise;
+    };
+
+    notify.primary = function (args) {
+      return this(args, 'primary');
+    };
+    notify.error = function (args) {
+      return this(args, 'error');
+    };
+    notify.success = function (args) {
+      return this(args, 'success');
+    };
+    notify.info = function (args) {
+      return this(args, 'info');
+    };
+    notify.warning = function (args) {
+      return this(args, 'warning');
+    };
+
+    notify.clearAll = function () {
+      angular.forEach(messageElements, function (element) {
+        element.addClass('killed');
+      });
+    };
+
+    return notify;
+  }];
+});
+
+angular.module("ui-notification").run(["$templateCache", function($templateCache) {$templateCache.put("angular-ui-notification.html","<div class=\"ui-notification\"><h3 ng-show=\"title\" ng-bind-html=\"title\"></h3><div class=\"message\" ng-bind-html=\"message\"></div></div>");}]);

dashboard/src/3rdparty/js/password-reveal.js

@@ -0,0 +1,32 @@
+// Custom library to add password show/hide icons to input element with `password-reveal` attribute
+// util.js has the angular version, this is for plain js
+
+window.addEventListener('load', function () {
+    var svgEye = '<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="eye" class="svg-inline--fa fa-eye fa-w-18" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path fill="currentColor" d="M572.52 241.4C518.29 135.59 410.93 64 288 64S57.68 135.64 3.48 241.41a32.35 32.35 0 0 0 0 29.19C57.71 376.41 165.07 448 288 448s230.32-71.64 284.52-177.41a32.35 32.35 0 0 0 0-29.19zM288 400a144 144 0 1 1 144-144 143.93 143.93 0 0 1-144 144zm0-240a95.31 95.31 0 0 0-25.31 3.79 47.85 47.85 0 0 1-66.9 66.9A95.78 95.78 0 1 0 288 160z"></path></svg>';
+    var svgEyeSlash = '<svg aria-hidden="true" focusable="false" data-prefix="fas" data-icon="eye-slash" class="svg-inline--fa fa-eye-slash fa-w-20" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 512"><path fill="currentColor" d="M320 400c-75.85 0-137.25-58.71-142.9-133.11L72.2 185.82c-13.79 17.3-26.48 35.59-36.72 55.59a32.35 32.35 0 0 0 0 29.19C89.71 376.41 197.07 448 320 448c26.91 0 52.87-4 77.89-10.46L346 397.39a144.13 144.13 0 0 1-26 2.61zm313.82 58.1l-110.55-85.44a331.25 331.25 0 0 0 81.25-102.07 32.35 32.35 0 0 0 0-29.19C550.29 135.59 442.93 64 320 64a308.15 308.15 0 0 0-147.32 37.7L45.46 3.37A16 16 0 0 0 23 6.18L3.37 31.45A16 16 0 0 0 6.18 53.9l588.36 454.73a16 16 0 0 0 22.46-2.81l19.64-25.27a16 16 0 0 0-2.82-22.45zm-183.72-142l-39.3-30.38A94.75 94.75 0 0 0 416 256a94.76 94.76 0 0 0-121.31-92.21A47.65 47.65 0 0 1 304 192a46.64 46.64 0 0 1-1.54 10l-73.61-56.89A142.31 142.31 0 0 1 320 112a143.92 143.92 0 0 1 144 144c0 21.63-5.29 41.79-13.9 60.11z"></path></svg>';
+
+    document.querySelectorAll('[password-reveal]').forEach(function (element) {
+        var eye = document.createElement('i');
+        eye.innerHTML = svgEyeSlash;
+        eye.style.width = '18px';
+        eye.style.height = '18px';
+        eye.style.position = 'relative';
+        eye.style.float = 'right';
+        eye.style.marginTop = '-24px';
+        eye.style.marginRight = '10px';
+        eye.style.cursor = 'pointer';
+
+        eye.addEventListener('click', function () {
+            if (element.type === 'password') {
+                element.type = 'text';
+                eye.innerHTML = svgEye;
+            } else {
+                element.type = 'password';
+                eye.innerHTML = svgEyeSlash;
+            }
+        });
+
+        element.parentNode.style.position = 'relative';
+        element.parentNode.insertBefore(eye, element.nextSibling);
+    });
+});

dashboard/src/appstatus.html

@@ -4,7 +4,8 @@
     <meta charset="utf-8" />
     <meta name="viewport" content="user-scalable=no, initial-scale=1, maximum-scale=1, minimum-scale=1, width=device-width, height=device-height" />
 
-    <title> Cloudron App Error </title>
+    <title>Cloudron App Error</title>
+    <meta name="description" content="Cloudron App Error">
 
     <!-- Use static style as we can't include local stylesheets -->
     <style>
@@ -22,6 +23,8 @@
             height: 100%;
             width: 100%;
             text-align: center;
+            font-family: Roboto, Helvetica, Arial, sans-serif;
+            line-height: 1.846;
         }
 
         .content {
@@ -37,38 +40,43 @@
             bottom: 0;
             width: 100%;
             color: #555;
-            font-size: 14px;
+            font-size: 12px;
+            text-align: center;
             padding: 5px;
             z-index: 1000;
             position: fixed;
+            opacity: .5;
+            transition: all .25s;
         }
 
-        footer a {
-            color: #62bdfc;
-            padding: 10px;
+        footer:hover {
+            opacity: 1;
+        }
+
+        a {
+            color: #2196f3;
             text-decoration: none;
+            background-color: transparent;
         }
 
-        h1, h2, p {
-            margin: 10px;
+        a:hover {
+            color: #0a6ebd;
+            text-decoration: underline;
         }
 
-    </style>
+        </style>
 
 </head>
 
 <body>
 
 <div class="content">
-    <h1>&#128577;</h1>
-    <h2>Something has gone wrong</h2>
-    <p>This app is currently not responding. Try refreshing the page.</p>
+    <h1>&#x231B;</h1>
+    <p>This app is currently not responding. Please try refreshing the page in a few minutes.</p>
 </div>
 
-<footer class="text-center">
+<footer>
     <span class="text-muted"><a href="https://cloudron.io" target="_blank">Cloudron</a></span>
-    <span class="text-muted"><a href="https://twitter.com/cloudron_io" target="_blank">Twitter</a></span>
-    <span class="text-muted"><a href="https://chat.cloudron.io" target="_blank">Chat <i class="fa fa-comments"></i></a></span>
 </footer>
 
 </body>

dashboard/src/authcallback.html

@@ -0,0 +1,11 @@
+<script>
+
+var tmp = window.location.hash.slice(1).split('&');
+
+tmp.forEach(function (pair) {
+    if (pair.indexOf('access_token=') === 0) localStorage.token = pair.split('=')[1];
+});
+
+window.location.href = '/';
+
+</script>

dashboard/src/img/appicon_fallback.svg

@@ -0,0 +1,102 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   xmlns:dc="http://purl.org/dc/elements/1.1/"
+   xmlns:cc="http://creativecommons.org/ns#"
+   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+   xmlns:svg="http://www.w3.org/2000/svg"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   width="546.13336"
+   height="546.13336"
+   viewBox="0 0 512.00001 512.00001"
+   id="svg4519"
+   version="1.1"
+   inkscape:version="0.92.2 2405546, 2018-03-11"
+   sodipodi:docname="appicon_fallback.svg"
+   inkscape:export-filename="/home/nebulon/projects/yellowtent/dashboard/src/img/appicon_fallback.png"
+   inkscape:export-xdpi="90"
+   inkscape:export-ydpi="90">
+  <defs
+     id="defs4521" />
+  <sodipodi:namedview
+     id="base"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:pageopacity="0.0"
+     inkscape:pageshadow="2"
+     inkscape:zoom="0.7"
+     inkscape:cx="89.894291"
+     inkscape:cy="162.5294"
+     inkscape:document-units="px"
+     inkscape:current-layer="g4496"
+     showgrid="false"
+     units="px"
+     inkscape:window-width="2880"
+     inkscape:window-height="1565"
+     inkscape:window-x="0"
+     inkscape:window-y="55"
+     inkscape:window-maximized="1" />
+  <metadata
+     id="metadata4524">
+    <rdf:RDF>
+      <cc:Work
+         rdf:about="">
+        <dc:format>image/svg+xml</dc:format>
+        <dc:type
+           rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+        <dc:title></dc:title>
+      </cc:Work>
+    </rdf:RDF>
+  </metadata>
+  <g
+     inkscape:label="Layer 1"
+     inkscape:groupmode="layer"
+     id="layer1"
+     transform="translate(0,-540.36216)">
+    <g
+       id="g4467"
+       transform="matrix(20.50952,0,0,20.859456,-526.58031,-94.042799)">
+      <g
+         inkscape:export-ydpi="67.349998"
+         inkscape:export-xdpi="67.349998"
+         transform="matrix(0.59473169,0,0,0.59473169,31.04719,102.48374)"
+         id="g4382">
+        <g
+           id="g4496">
+          <path
+             sodipodi:type="star"
+             style="opacity:1;fill:#03a9f4;fill-opacity:1;stroke:none;stroke-width:1.10000002;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+             id="path4162"
+             sodipodi:sides="6"
+             sodipodi:cx="12.46875"
+             sodipodi:cy="-99.893143"
+             sodipodi:r1="19.266006"
+             sodipodi:r2="16.307295"
+             sodipodi:arg1="-0.52224059"
+             sodipodi:arg2="0.0013581913"
+             inkscape:flatsided="true"
+             inkscape:rounded="0.12490573"
+             inkscape:randomized="0"
+             d="m 29.166669,-109.50348 c 1.200386,2.08567 1.17988,17.183595 -0.02617,19.265993 -1.206046,2.082397 -14.291486,9.613601 -16.697919,9.610333 -2.406432,-0.0033 -15.4713664,-7.56999 -16.671752,-9.655655 -1.2003857,-2.085666 -1.1798799,-17.183591 0.026167,-19.265991 1.2060467,-2.0824 14.2914862,-9.6136 16.6979192,-9.61033 2.406432,0.003 15.471366,7.56999 16.671752,9.65565 z"
+             transform="rotate(-30,10.993604,-99.259973)"
+             inkscape:export-xdpi="67.349998"
+             inkscape:export-ydpi="67.349998" />
+          <rect
+             inkscape:transform-center-x="0.66390665"
+             ry="3.9522502"
+             y="-107.69034"
+             x="4.8100815"
+             height="14.288903"
+             width="14.288903"
+             id="rect4168-1-1"
+             style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none;stroke-width:3.75875854;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1"
+             inkscape:transform-center-y="3.7035412e-06" />
+        </g>
+      </g>
+    </g>
+  </g>
+</svg>

dashboard/src/img/avatar-default-symbolic.svg

@@ -0,0 +1,133 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   xmlns:dc="http://purl.org/dc/elements/1.1/"
+   xmlns:cc="http://creativecommons.org/ns#"
+   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+   xmlns:svg="http://www.w3.org/2000/svg"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   width="16"
+   height="16"
+   id="svg2"
+   sodipodi:version="0.32"
+   inkscape:version="0.91 r13725"
+   version="1.0"
+   sodipodi:docname="avatar-default-symbolic.svg"
+   inkscape:output_extension="org.inkscape.output.svg.inkscape">
+  <defs
+     id="defs4" />
+  <sodipodi:namedview
+     id="base"
+     pagecolor="#ffffff"
+     bordercolor="#e7e7e7"
+     borderopacity="1"
+     inkscape:pageopacity="0.0"
+     inkscape:pageshadow="2"
+     inkscape:zoom="11.964497"
+     inkscape:cx="6.5536056"
+     inkscape:cy="-0.025360958"
+     inkscape:document-units="px"
+     inkscape:current-layer="layer1"
+     showgrid="true"
+     inkscape:showpageshadow="false"
+     showguides="true"
+     inkscape:guide-bbox="true"
+     inkscape:window-width="1920"
+     inkscape:window-height="1030"
+     inkscape:window-x="0"
+     inkscape:window-y="25"
+     inkscape:window-maximized="1"
+     inkscape:snap-global="true">
+    <sodipodi:guide
+       orientation="1,0"
+       position="0,112"
+       id="guide2383" />
+    <sodipodi:guide
+       orientation="0,1"
+       position="78.156291,0"
+       id="guide2389" />
+    <inkscape:grid
+       type="xygrid"
+       id="grid3672"
+       visible="true"
+       enabled="true" />
+    <sodipodi:guide
+       orientation="1,0"
+       position="22.008699,4.1542523"
+       id="guide2950" />
+    <sodipodi:guide
+       orientation="0,1"
+       position="11.22532,22.008699"
+       id="guide2952" />
+  </sodipodi:namedview>
+  <metadata
+     id="metadata7">
+    <rdf:RDF>
+      <cc:Work
+         rdf:about="">
+        <dc:format>image/svg+xml</dc:format>
+        <dc:type
+           rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+        <dc:title />
+      </cc:Work>
+    </rdf:RDF>
+  </metadata>
+  <g
+     inkscape:label="Calque 1"
+     inkscape:groupmode="layer"
+     id="layer1">
+    <path
+       inkscape:connector-curvature="0"
+       sodipodi:nodetypes="ccccsccccc"
+       style="fill:#000000;fill-opacity:1;stroke:none"
+       id="path3935"
+       d="m -13.771529,5.9050966 c 0.181174,0.8569201 0.2823,1.5051186 0.135325,2.3620387 -1.145861,0.9506717 -4.076448,1.3778558 -4.072056,2.3620387 l -0.393673,2.558875 c 0,0.978388 2.731928,1.771529 6.101933,1.771529 3.370005,0 6.101933,-0.793141 6.101933,-1.771529 L -6.29174,10.629174 c -0.0047,-0.8423279 -2.952548,-1.377856 -4.084358,-2.3620387 -0.09668,-0.7953524 -0.01972,-1.5666863 0.147627,-2.3620387 l -3.543058,0 z" />
+    <path
+       transform="matrix(0.34209356,0,0,0.34209356,-8.638748,-12.26548)"
+       d="m -9.75,73.09375 c -3.766412,0.121068 -7.468069,1.386362 -11.40625,3.25 a 1.25331,1.25331 0 0 0 -0.6875,1.4375 l 0.625,2.53125 a 1.25331,1.25331 0 0 0 0.78125,0.84375 c 0.161757,0.06256 0.275429,0.183794 0.71875,0.3125 2.335298,0.677989 5.907957,1.15625 9.90625,1.15625 3.9982931,0 7.5709518,-0.478261 9.90625,-1.15625 0.44332111,-0.128707 0.55699247,-0.24994 0.71875,-0.3125 a 1.25331,1.25331 0 0 0 0.78125,-0.8125 L 2.25,78.03125 a 1.25331,1.25331 0 0 0 -0.53125,-1.375 C -2.2051532,74.042333 -5.9835879,72.972682 -9.75,73.09375 z"
+       id="path3937"
+       style="fill:#000000;fill-opacity:1;stroke:none"
+       inkscape:original="M -9.71875 74.34375 C -13.230599 74.456635 -16.76467 75.641953 -20.625 77.46875 L -20 80 C -19.731211 80.103955 -19.729288 80.147142 -19.375 80.25 C -17.218663 80.876033 -13.703662 81.375 -9.8125 81.375 C -5.9213382 81.375 -2.4063369 80.876033 -0.25 80.25 C 0.10428761 80.147142 0.10621054 80.103955 0.375 80 L 1.03125 77.6875 C -2.7172738 75.190412 -6.2069011 74.230865 -9.71875 74.34375 z "
+       inkscape:radius="1.2531847"
+       sodipodi:type="inkscape:offset" />
+    <rect
+       transform="matrix(0.9205234,-0.39068744,0.39068744,0.9205234,0,0)"
+       ry="1.1810193"
+       rx="1.1810193"
+       y="-2.754653"
+       x="-15.569602"
+       height="2.1871843"
+       width="1.0935922"
+       id="rect3939"
+       style="fill:#000000;fill-opacity:1;stroke:none" />
+    <rect
+       style="fill:#000000;fill-opacity:1;stroke:none"
+       id="rect3941"
+       width="1.0935922"
+       height="2.1871843"
+       x="6.5567312"
+       y="6.6361833"
+       rx="1.1810193"
+       ry="1.1810193"
+       transform="matrix(-0.9205234,-0.39068744,-0.39068744,0.9205234,0,0)" />
+    <path
+       inkscape:connector-curvature="0"
+       sodipodi:nodetypes="cccccccc"
+       style="fill:#000000;fill-opacity:1;stroke:none"
+       id="path3943"
+       d="m -12,0 c -1.630647,0 -2.952548,1.2337743 -2.952548,2.7557118 0.01278,0.5632387 0.06085,1.232346 0.393673,2.7557117 0.196837,0.5905097 1.558851,2.1652021 1.574692,2.3620387 0.381733,0.1968365 1.771529,0.1968365 2.165203,0 0,-0.1968366 1.181019,-1.771529 1.377855,-2.3620387 C -9.066594,3.9281919 -9.06754,3.3462214 -9.047452,2.7557118 -9.047452,1.2337743 -10.369352,0 -12,0 z" />
+    <path
+       id="path3157"
+       d="m 38,0 c -1.630647,0 -2.9375,1.2280625 -2.9375,2.75 0.0037,0.1620664 0.01579,0.3963239 0.03125,0.59375 -0.27885,0.118349 -0.299198,0.6610508 -0.0625,1.21875 0.09386,0.2211566 0.213411,0.3909677 0.34375,0.53125 0.03167,0.1567366 0.02336,0.2271022 0.0625,0.40625 0.196837,0.5905097 1.577909,2.1781634 1.59375,2.375 0.381733,0.1968365 1.762576,0.1968365 2.15625,0 0,-0.1968366 1.178164,-1.7844903 1.375,-2.375 C 40.60622,5.3151913 40.62213,5.1903792 40.65625,5.03125 40.764832,4.8997227 40.857512,4.7509639 40.9375,4.5625 41.162363,4.0326858 41.147829,3.5269131 40.90625,3.375 40.920493,3.1615298 40.931227,2.9343906 40.9375,2.75 40.9375,1.2280625 39.630648,0 38,0 z m -1.78125,8.40625 c -1.233461,0.8706787 -3.941711,1.2750309 -3.9375,2.21875 l -0.375,2.5625 c 0,0.519013 0.775005,0.988493 2,1.3125 l 0.1875,0.71875 A 0.42874928,0.42874928 0 0 0 34.375,15.5 c 0.05534,0.0214 0.09834,0.04972 0.25,0.09375 C 35.42389,15.825686 36.63221,16 38,16 39.36779,16 40.60736,15.825686 41.40625,15.59375 41.557907,15.54972 41.569664,15.5214 41.625,15.5 a 0.42874928,0.42874928 0 0 0 0.28125,-0.28125 L 42.125,14.5 c 1.208619,-0.323691 1.96875,-0.797472 1.96875,-1.3125 l -0.375,-2.5625 C 43.714419,9.848863 41.21753,9.3437322 39.9375,8.5 A 0.97584188,0.97584188 0 0 1 39.625,8.75 C 39.020006,9.0524961 38.608286,9 38.09375,9 37.836482,9 37.587947,9.0004922 37.34375,8.96875 37.099553,8.937008 36.902156,8.909026 36.59375,8.75 a 0.97584188,0.97584188 0 0 1 -0.375,-0.34375 z"
+       style="fill:#bebebe;fill-opacity:1;stroke:none"
+       inkscape:connector-curvature="0" />
+    <path
+       style="fill:#bebebe;fill-opacity:1;stroke:none"
+       d="m 8,0.7783785 c -2.256463,0 -4.0648649,1.699373 -4.0648649,3.8054054 0.00509,0.2242649 0.021845,0.5484266 0.043244,0.8216216 -0.3858679,0.1637694 -0.4140257,0.9147514 -0.086487,1.6864865 0.1298861,0.3060329 0.295314,0.5410147 0.4756757,0.7351351 0.043823,0.2168896 0.032325,0.3142604 0.086486,0.5621622 0.1511376,0.4534118 0.7470076,1.3420395 1.2972972,2.0756757 0.05396,0.563421 0.109936,1.132004 0,1.772973 -1.5856236,1.315524 -5.67094212,1.881347 -5.66486451,3.243243 L 0,16 16,16 15.91351,15.481081 c -0.0065,-1.1656 -4.098682,-1.881347 -5.664862,-3.243243 -0.06337,-0.521335 -0.07545,-1.043272 -0.04324,-1.556757 0.501434,-0.7738141 1.172201,-1.7868737 1.34054,-2.2918917 0.0605,-0.2557354 0.08252,-0.4284482 0.129729,-0.6486487 0.150255,-0.1820053 0.278504,-0.3878554 0.38919,-0.6486486 0.311162,-0.7331483 0.291049,-1.4330284 -0.04324,-1.6432432 0.01971,-0.2953966 0.03456,-0.6097082 0.04324,-0.8648649 0,-2.1060324 -1.8084,-3.8054054 -4.064865,-3.8054054 z"
+       id="path3159"
+       inkscape:connector-curvature="0" />
+  </g>
+</svg>

dashboard/src/img/background-image-placeholder.svg

@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   viewBox="0 0 568 400"
+   version="1.1"
+   id="svg4"
+   sodipodi:docname="background-image-placeholder.svg"
+   inkscape:version="1.2 (dc2aedaf03, 2022-05-15)"
+   width="568"
+   height="400"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg">
+  <defs
+     id="defs8" />
+  <sodipodi:namedview
+     id="namedview6"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     showgrid="false"
+     inkscape:zoom="1.0029297"
+     inkscape:cx="109.18014"
+     inkscape:cy="337.01266"
+     inkscape:window-width="1920"
+     inkscape:window-height="1048"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg4" />
+  <!-- Font Awesome Pro 5.15.4 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license (Commercial License) -->
+  <path
+     d="m 374.10635,275.08863 v 7.50887 c 0,12.44125 -10.08533,22.52659 -22.52659,22.52659 H 171.36704 c -12.44124,0 -22.52658,-10.08534 -22.52658,-22.52659 V 162.45567 c 0,-12.44124 10.08534,-22.52659 22.52658,-22.52659 h 7.50887 v 22.52659 h -4.69305 a 2.8158239,2.8158239 0 0 0 -2.81582,2.81583 v 114.51018 a 2.8158239,2.8158239 0 0 0 2.81582,2.81582 h 174.58109 a 2.8158239,2.8158239 0 0 0 2.81581,-2.81582 v -4.69305 z M 393.81713,117.4025 H 219.23606 a 2.8158239,2.8158239 0 0 0 -2.81582,2.81582 v 114.51017 a 2.8158239,2.8158239 0 0 0 2.81582,2.81582 h 174.58107 a 2.8158239,2.8158239 0 0 0 2.81581,-2.81582 V 120.21832 a 2.8158239,2.8158239 0 0 0 -2.81581,-2.81582 z m 2.81581,-22.52659 c 12.44126,0 22.5266,10.08534 22.5266,22.52659 v 120.14181 c 0,12.44125 -10.08535,22.5266 -22.5266,22.5266 h -180.2127 c -12.44125,0 -22.5266,-10.08535 -22.5266,-22.5266 V 117.4025 c 0,-12.44125 10.08535,-22.52659 22.5266,-22.52659 z m -123.89623,52.56204 c 0,10.3674 -8.40478,18.77216 -18.77216,18.77216 -10.3674,0 -18.77217,-8.40476 -18.77217,-18.77216 0,-10.3674 8.40477,-18.77216 18.77217,-18.77216 10.3674,0 18.77216,8.40476 18.77216,18.77216 z m -33.78989,45.05318 18.54454,-18.54455 c 2.19916,-2.19915 5.76494,-2.19915 7.96456,0 L 284,192.49113 l 48.58001,-48.58 c 2.19916,-2.19916 5.76493,-2.19916 7.96456,0 l 33.5618,33.56227 v 37.54432 H 238.94683 Z"
+     id="path2"
+     style="fill:#999999;stroke-width:0.469304" />
+</svg>