Omv accessed via pangolin so not directly exposed to internet. I have the port for direct access to omv closed on the cloud network
fqdn - Pangolin (with security) - omv
If there is a problem (e.g. pangolin container down) then I open the port fix issue then close it..
Services on my home network via pangolin tunnel
fqdn - pang - tunnel - service
I’m just tinkering at the moment. My reverse proxy on my home network works well so just looking at other ways…
What cloud providers do you think I should take a look at?
Omv is on a different port (not 80)
Pangolin/traefik is using ports 80/443 and I think quite hardened given it’s a secure tunnel product.
I did notice ssh was being smashed so I locked the cloud virtual network to only accept connections from my home wan ip.
Thanks. That’s what thought too. It was enabled by default so I left it on to start with.
Changed to promox kernel and/or adding swap seems to have worked.
Definitely viable to run omv like this to provide a nice Ui for Linux in the cloud.
If pangolin works well in my testing, it could be a good alternative to a local reverse proxy (no need for port forwarding on router)
Made a few changes so not completely sure but I think the vm was running out of memory so creating a swapfile has solved it.
I also disabled write-cache plugin as it was running out of space for apt-clean.
I am testing omv in oracle cloud on the minimum free shape - with 1GB ram so this might be related...
Its all working great overall and log is clear/clean but...
When i make a config change that requires apply changes - sometimes it works and sometimes it times out without an error any the system is stuck.
I have to reboot the VM to bring it back to a usable state.
If I look at journal logs I can see high loadavg errors so the system is getting into a state but I need help tracking this down.
Any thoughts or tips to help investigate?
Got it all working. Was not that difficult once I found the way to create a custom debian image in oracle cloud.
OMV running in an always-free Oracle cloud instance/shape using latest deb-trixie.qcow.
Docker and compose running. Pangolin in compose setup using omv in the cloud.
omv and pangolin access via fqdn setup via pangolin.
memory is tight but all running fine.
won't be able to do much with docker.
the ubuntu vm I have been testing is running portainer and pangolin fine.
If I can get omv in a debian vm, I will just need pangolin so I think I can get this working.
Will report back 
thanks. Will give it a try.
The always free amd instance/image/shape only has 1gb ram so maybe this will be a problem...
I have recently been tinkering with the free cloud compute capability available through oracle cloud infrastructure.
I have setup a ubuntu instance using both amd and arm images.
Now I was wanted to see if I could get omv working - for administering docker as I am so used to the UI etc.
So if I can get a debian13 vm in the cloud, could I then install omv?
topo01 sorry but I don’t use sync apps and I’m an apple user for computers and mobile so can’t really help.
I’d just setup opencloud then try the apps and see how you go
Sorry to be that random guy 😂
I have a compose shared folder for compose files and building images only.
I create a config directory in my appdata shared folder for all my dockers. This is where I store conf/configs for all my services.
Does this mean that I can't really use the configs in OMV GUI unless I move my config files from appdata to compose shared folder?
I think these doc links explain free vs. paid for opencloud. It is totally free but you can pay if you want support. So feature-wise there is no difference.
I might build a full stack compose for fun but I won’t use it.
I think you can use all the other stuff for collaboration free. The design is modular and you have to build out the compose with additional services for OpenOffice, full text search etc.
Their compose file approach is clever but complicated and doesn’t fit that well with how I use compose plugin and omv.
All good. I am very impressed with opencloud. So fast and clean.
I have read that they have a mobile and desktop sync app if you need/want that functionality.
Checked and opencloud has amd64 and arm64 images so works on rpi
Tested opencloud on my rpi5. Works fine. Compose example below.
This will get you up and running with a local access opencloud for testing on https://[host_ip]:9200
Suggest you create a new thread for this if you have any issues/questions - this thread is very long!
services:
opencloud:
image: opencloudeu/opencloud-rolling:latest
container_name: opencloud
entrypoint:
- /bin/sh
command: ["-c", "opencloud init || true; opencloud server"]
user: 1000:100 # change to appuser:users but default is 1000:1000
restart: unless-stopped
ports:
- 9200:9200
environment:
# set admin pwd only when first setting up container/config. Can be removed or commented out after.
- IDM_ADMIN_PASSWORD=[admin_pwd]
# - IDM_CREATE_DEMO_USERS=false # default=false so not really needed
- OC_LOG_LEVEL=warn # error warn info debug
- OC_LOG_PRETTY=true
- OC_LOG_COLOR=true
- OC_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD=true # default=true. False allows creation of public links without pwd.
- OC_PASSWORD_POLICY_DISABLED=fasle # default=false. True allows creation any password - no policy set
# opt 1: basic setup without reverse proxy - local access on host ip:port
- OC_INSECURE=true
- PROXY_TLS=true
- PROXY_HTTP_ADDR=0.0.0.0:9200
- OC_URL=https://[host_ip]:9200
# opt 2: reverse proxy setup - assumes that you have a reverse proxy setup and working
# - OC_INSECURE=false # works with true or false so not sure what this is doing. False is default
# - PROXY_TLS=false # do not use SSL between the reverse proxy and OpenCloud
# - PROXY_HTTP_ADDR=0.0.0.0:9200
# - OC_URL=https://[rev_proxy_fqdn]
volumes:
- /etc/localtime:/etc/localtime:ro
- ${{ sf:"appdata" }}/opencloud/data:/var/lib/opencloud
- ${{ sf:"appdata" }}/opencloud/config:/etc/opencloudwritecache has nothing to do with it if it is still clearing on a second reboot.
Thanks and understood. That is what I thought from my testing.
I think this is a more general PiOS / OMV issue - or just something weird with my rpi setups.
I cannot edit a .yaml file using WinSCP unless I am the owner of the appdata folder
I have just remembered something about using winSCP when not using root.
You need to run the connection/session in winSCP with elevated permissions rather than default. the SFTP server command you need is below. This basically runs the SFTP session as su and I think you will be able to edit files using a non-root account assuming the account has sudo and _ssh permissions/groups configured.
I hope this helps you but my key advice to you is to not use the appuser account for sysadmin work. Create a new user account for this stuff.
sudo su -c /usr/lib/openssh/sftp-server
To configure this in winSCP you need to edit the advance settings for the server/connection - see pic below.
and pic below for user permissions/groups in omv
