By default, our "software appliances" are distributed with a self signed TLS cert (ships with a shared self-signed cert, but a unique one is generated on firstboot). As a complete aside, whilst you're using the LXC container, all our appliances are also available in ISO too (if find yourself wanting a "proper" VM anytime).

Anyway, FYI we don't use certbot. When we integrated Let's Encrypt certs we went with dehydrated instead (smaller footprint and leaks less info). By default, it isn't enabled so it won't actually do anything unless you enable it. If you already have enabled it, simply disable the updates (interactively via confconsole, or remove the cron job).

As for the Apache config, that is entirely up to you. One upon a time reverse proxying via vanilla http was the norm, but these days, it's much less common. That is especially the case with server systems such as TurnKey that are designed to be moved about (e.g. a dev server, then shift to a production server, etc). It's the data is what's important, not the server itself.

Having said that, I completely understand wanting to manage the SSL/TLS termination of the "proper" certs on the central public facing reverse proxy. I'm unfamiliar with Caddy, but personally, I'd be inclined to just explicitly trust the self signed cert (or regenerate a cert with a CA key trusted by Caddy). FWIW I always just use Nginx for a reverse proxy, so I can't give you any specific advice on that, but I'd assume that Caddy would support that sort of configuration?

Actually, I just did a quick google and it looks like Caddy has a self generated/signed CA built in! So if you use that to generate keys for your container, then drop them in /etc/ssl/private/cert.pem & /etc/ssl/private/cert.key respectively (& restart Apache) and you should be good! :)

Regardless, if you do want to push ahead and host only via vanilla http, then edit the Apache conf (/etc/apache2/sites-available/concrete.conf) and remove the http => https redirect on login. I.e. remove these lines (currently 8 & 9) from the http (port 80):

    RewriteEngine on
    RewriteRule ^(.*)/login$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

There is more stuff you could trim out if you wanted, but none of it should get in the way so I'll leave that one with you for now. If you want some pointers, please open a new thread.

Hi Jose, your account is good to go. You'll just need to reset your password before you can log in.

Please feel free to start a new thread if you have any questions or feedback for us.

Your account has been approved.

Hi Osman, you are good to go.

Hi Savanna, you're in...

Hi Sven. Welcome to TurnKey.

Hi Mark, please open a new thread in the support forums. Please share as much info as possible about the problem(s) you are encountering.

Hi Robert, welcome to TurnKey.

Apologies on my delayed response, I just found this unfinished draft and thought that I better finish it! FWIW it's a wet and rainy here in Tassie (Tasmania, Australia) today too...

To use TKLBAM, you'll need to sign up to the TurnKey Hub. Please be aware that by default you start a 14 day free trial of our most popular paid plans. If you have no desire to run cloud servers, be sure to cancel the free trial for that (by downgrading the server plan to free). If you forget and get charged, please downgrade ASAP and ask via support for a refund.

Also, please be aware, that migration may not "just work", but TKLBAM can still be a very useful tool to transferring data. If you search about the forums, hopefully you might find some examples of partial aka "staged" restores. Please have a read through the TKLBAM doc page. You'll need to start with initialization, run a backup on your old system, then restore to your new system.

Please open a new thread if you have any questions and/or need a hand.

Also, it's worth noting that the Debian OS (10/Buster) of TurnKey v16.x is supported by Debian LTS until mid 2024. Whilst there may be many open CVEs against included software, I would expect all of them to be relatively minor and/or mitigated against by default config. TBH, some of them are ridiculous! Having said that, keeping your servers up to date is definitely a good idea and I highly recommend that you do it. I'm just saying that you probably shouldn't freak out about CVEs until you've actually looked into them (e.g. lots of software can be configured to do dangerous things - that doesn't necessarily mean that it's "vulnerable" or is "insecure").

Hi Darren, your account has been approved.

And I'm going well thanks... :)

Hi Dave, weclome to TurnKey.

Please note that whilst MineOS is built on top of TurnKey Linux, it's not an official TurnKey Linux appliance provided by us (someone used our tools to make it - which is awesome BTW!). Please feel free to ask questions, but I may not have the answers...

Hi and welcome to TurnKey.

If you have any concerns or questions, please don't hesitate to open a new thread (you'll need to be logged in).

Hi Phillip, welcome to TurnKey!

That sounds like a good plan. If you have any questions and/or feedback/suggestions, please don't hesitate to open a new thread and I'll respond ASAP.

Hi Robert, welcome to TurnKey.

Please feel free to open a new thread if/when you have any questions or feedback for us.

Hi Alexandrre, welcome to TurnKey. Your website user account has been approved. You can now post in our forums if you have any questions, concerns or have any feedback or suggestions for us.

To get a Hub API key, you'll need to sign up the the TurnKey Hub (the user databases of the website and the Hub are separate). If you have any problems with that, please don't hesitate to contact support (via the "in app" support system - or via email - i.e. support AT turnkeylinux.org.

Hi unklecosmo, welcome to TurnKey.

If you want to use TKLBAM (our encrypted, remote backup tool) then you'll need to sign up to the TurnKey Hub.

Hi there Expresso Fan, welcome to TurnKey.

I'm almost certain I know the issue you are referring to. Please have a look at this post.

Hi Andy, welcome to TurnKey Linux. MineOS is based on TurnKey, but isn't developed or maintained by us. We may still be able to assist, but I can't offer any guarantees.

Hi and welcome to TurnKey. I've approved your account.

Please feel free to start a new thread if you have any questions and/or feedback for us.

No doubt, your submission is a solid one! Doesn't leave me with much doubt about your authenticity. Nice work! :)

Welcome aboard.

Hi, I only speak English so I used Google to translate your post.

Unfortunately, I'm not particularly familiar with the Gallery software. It is quite old software and did appear to have died out some time ago. However, it has been revived.

I did find a relevant thread on their old forums that might assist? Otherwise, perhaps try asking on their new forums (google group). It might also be worth checking the (old) docs (apparently they are still relevant).

If you do sign up to the new group and post a support thread, please feel free to cross post a link here.

Olá, eu só falo inglês, então usei o Google para traduzir sua postagem.

Infelizmente, não estou particularmente familiarizado com o software Gallery. É um software bastante antigo e parece ter desaparecido há algum tempo. No entanto, foi revivido.

Eu encontrei um tópico relevante em seus fóruns antigos que pode ajudar? Caso contrário, talvez tente perguntar em seus novos fóruns (grupo do Google). Também pode valer a pena verificar os documentos (antigos) (aparentemente eles ainda são relevantes).

Se você se inscrever no novo grupo e postar um tópico de suporte, sinta-se à vontade para postar um link aqui.

Please don't hesitate to start a new thread if you need support and/or have any questions or feedback for us.

Please don't hesitate to start a new thread if you have any questions, need support and/or have feedback or feature requests for us.

Hi Antoine, welcome to TurnKey.

I'm glad to hear that you find the Gitea appliance useful (I do too! :). I've approved your website account, so please feel free to start a new thread if/when you have any support needs, questions and/or feedback for us.

But to access TKLBAM you'll need to sign up for a TurnKey Hub account. If you are happy self hosting and only intend to use Hub Backups, please be sure to cancel the "Cloud Server" free 14 day trial as soon as you've completed signup (to avoid unexpected charges).

Good luck with it all and please don't hesitate to reach out if/when you have questions or feedback.

Welcome to TurnKey.

I've approved your account, so please feel free to open a new forum thread if you have any questions, problems and/or feedback for us.

Regarding your specific question, I think it might be best for us to move to a new thread as I suspect that there will be some back and forth (and better to have that in a new dedicated thread, rather than here in this thread).

Regardless, to give you a start, I'll share some info. Under the hood, TurnKey is Debian. When we create a new release, we start with a minimalist Debian base and pre-install the required software. Where possible, we use software already packaged in Debian - direct from Debian apt repositories. We also provide a few custom tools that we create and maintain ourselves (and distribute via our own custom apt repo). Beyond that, we install other required software via whatever means is required. Where possible, we follow upstream recommendations, so you should generally be able to follow their upgrade instructions.

So if the current TurnKey appliance you are running provides the appropriate dependencies for the newer version of Nextcloud, then you should be able to just upgrade Nextcloud (on your current server). If the current server does not already provide the required dependencies, then either you'll need to use a newer version as your base (and migrate your existing data) or install the required dependencies on your current server.

When it comes time to update your underlying OS, you can either use TKLBAM (or some other data backup and migration tool) to migrate your existing data to a new TurnKey version of the same server. Or you can use a Debian style "in place" upgrade (to upgrade the OS to a newer Debian version). Technically we don't support the latter, but we will always provide "best effort" support for TurnKey users.

So I suggest that you start a new thread detailing which specific TurnKey version you are running (if unsure, run 'turnkey-version') and exactly what end point you'd like to get to and I can give you all the info I have... :)

Hi Daniel, apologies on slow follow up - but welcome to TurnKey.

Please feel free to start a new thread if you have any problems, questions or feedback.

Welcome to TurnKey James

Your account has been approved, please feel free to start a new thread if you have problems or feedback.

Please feel free to start a new thread on our forums if you have any questions, issues and/or feedback or requests for us.

Regarding our dynamic DNS solution, that requires a TurnKey Hub account. Although it's worth being aware, that under the hood, TurnKey is Debian (v17.x = Debian 11/Bullseye; upcoming v18.x = Debian 12/Bookworm) so there are lots of other options to explore if you wish. Not that I'm trying to talk you out of signing up to the Hub (I think it's pretty awesome), but just to make it clear that you're not "locked" into a TurnKey ecosystem - just because you use TurnKey! :)

Feel free to post in the forums if you have any questions, concerns, problems, feedback or requests.

Good luck with it all and hopefully catch you around here in the future. :)

Welcome to TurnKey. Please do not hesitate to start a new thread if you have questions, support needs and/or feedback for us.

Welcome to TurnKey. Please feel free to start a new thread if/when you have problems, questions or suggestions.

For what it's worth, you can skip the "Hub API key" step if you wish.

If you do want to sign up to the Hub for remote Backups (and/or Cloud Servers), please sign up to the TurnKey Hub (requires AWS account).

Any Hub related questions, please hit me up via Hub support (generally much faster response than here).

Your account has been approved. Please open a new thread if you have any questions, problems or feedback for us.

Welcome to TurnKey. Please feel free to open a new thread if you have any questions or feedback.

Good luck with it all.

Hi Clay. your account is approved. Please feel free to open a new thread if/when you have any questions and/or feedback for us.

To be honest, that's exactly what a spammer would say! :) I'll give you the benefit of the doubt this time though and I've enabled your account.

Please feel free to start a new thread if you have any questions or feedback regarding TurnKey Linux.

Hi ShinobiCat the dogperson. Welcome to TurnKey! :)

Hi George, welcome to TurnKey.

Please feel free to open a new thread if/when you have any questions or feedback.

Welcome to TurnKey Florent and I hope that our appliances are useful for your plans.

Please do not hesitate to start a new forum thread if/when you have questions, need support and/or have feedback for us.

To get an API key, you'll need to sign up for a (separate) TurnKey Hub account. If you have any Hub specific questions, please use the "in app chat" support (via the bottom right corner) and I'll get back to you ASAP (usual response time for Hub support is within one work day, often quicker). Although it's perhaps worth noting that whilst IMO a Hub account is a good thing (surprise surprise! :) it's optional.

Even if you decide that TurnKey won't work for your use case and you move on to investigate other options, I'd be eternally grateful if you could share the pain points.

Hi Sean, Welcome to TurnKey.

Please do not hesitate to open a new thread if you have any questions, problems and/or feedback and suggestions for us.

Good luck with it all and thanks for giving TurnKey a go.

Welcome to TurnKey. Please open a new thread if you have any concerns, questions or feedback.

You're in! :)

Also, from your email address I'm guessing that you might be interested to know that we have a v18.0 Drupal10 appliance in the pipeline - hopefully should make it into our next batch of v18.0 apps (hopefully within the next week).

Apologies for really slow response. It's probably no consolation to you, but I'm currently trying to keep my head down to push out the next major version release ASAP.

TBH, I have no idea why it would be timing out!? Although the default download links are a "round robin", so I suggest retrying. Also, if you haven't already tried, you could go to the mirror directly. If your problems persist, then the only other thing I can suggest is checking one of our other mirrors.

Note that our mirror doesn't use https, so be sure to also download the hash file (you should find it directly below the template that you want) and follow the instructions to verify your download. Proxmox normally does that automatically for you, but if you download manually you'll need to verify yourself. Once you've verified the template is legit, then move it to Proxmox's /var/lib/vz/template/cache/ dir (you can delete the hash file once you've verified it).

I hope that helps. Good luck! :)

Sorry for slow response...

FWIW we do have a Gameserver, which I think (?!?) can install Minecraft. Although regardless of exactly what you do, if you're using TurnKey as a base, please feel free to start a new thread if you have any questions or need a hand with anything. (I can't guarantee a timely response but I'll do my best).

Apologies on the slow response, but welcome to TurnKey.

Please do not hesitate to start a new thread if you have any questions, problems, feedback or really anything interesting and at least vaguely TurnKey related.

Hi Sandro, apologies for slow response.

Your TurnKey website account is approved. However, if you wish to use TKLBAM, you'll want to sign up for a separate TurnKey Hub account. The Hub is our SaaS platform providing both Cloud Servers and remote encrypted Backups. Any questions or concerns, please do not hesitate to reach out to Hub support (there is an "in app chat" or email support AT turnkeylinux.org). Hub support expected response time is within one work day, often quicker.

Approved! :)

(Apologies on delay...)

Your account is enabled Stefano! And greetings from Australia. :)

Apologies too on my slow response.

Re your NFS issues, my guess is that it's an LXC config issue. AFAIK, it should work, but the config is quite specific. We probably should document it. There is an issue on our issue tracker that discusses it to some degree and there are some that have confirmed that it can work.

If you want it to "just work", then it may be easier to just install the server to a "proper" VM (install with the ISO - downloadable from the relevant appliance page).

Alternatively, please read through that thread on GitHub and hopefully that might give you enough hints to get you over the line. It'd be great to document this better for future users, so please do share anything that you discover. If you do do that, it's probably best to start a new thread - or even post in the docs.

Good luck

Hi Plumble, welcome to TurnKey

Hopefully you find something of interest and value. Please do not hesitate to start a new thread if you have any questions, concerns or feedback for us.

Good luck!

Hopefully you've managed to get Mumble working? FYI we're currently working on a new, updated major version release. I'm not sure when an updated Mumble app will be released, but it's on the cards.

In the meantime, please do not hesitate to open a new thread if you have any questions, concerns or feedback.

Hi Salva, your TurnKey website account is now active. Please feel free to post a new thread on our forums if you have any questions, concerns or feedback for us.

To get an API key, you'll need to sign up to our SaaS platform, the TurnKey Hub. That process is automated, but does require an AWS account and a credit card. There are free plans available, but by default you'll start a opt-out free 14 day trial of our most popular paid plans.

If you need any support signing up or using the Hub, please feel free to either post in the forums here, or you can hit me up via Hub support (either use the Hub's "in app" chat functionality or email support AT turnkeylinux.org). Please note that Hub support is only for initial setup and paying subscribers. Support for Hub free users is via the forums.

Hi Wayne, welcome to TurnKey

Hopefully you find something of interest here at TurnKey. Please do not hesitate to start a new thread if you have any questions, concerns or feedback for us.

Good luck.

Hi again Vincent

As discussed elsewhere, your website account is enabled. Please do not hesitate to open a new thread if you have any questions, concerns or feedback.

Hi Mark, your account is approved.

Welcome to TurnKey Chris

Please do not hesitate, issues to start a new thread if/when you have any questions, concerns and/or feedback and feature requests for us.

Your account is approved. Please do not hesitate to start a new thread with any questions, issues or feedback for us.

Hi David, welcome to TurnKey

Your account has been approved. Please feel free to open a new thread if you have any questions, concerns and/or feedback and suggestions for us. Hopefully see you about here on the forums.

Hi Nods. Welcome to TurnKey.

If you have any problems or questions, please feel free to open a new thread. We al;so welcome feedback and suggestions.

Hi Curtis.

Your account has been approved, so please don't hesitate to start a new thread if/when you have any questions, problems and/or feedback for us.

Hi Norbert, welcome to TurnKey

Your website user account has been approved. So please feel free to start a new thread if you have any questions, support needs and/or feedback for us.

Your experience and plans sound really interesting.

If you are interested in developing TurnKey based appliances, then you may be interested in TKLDev - our build tool in a box (it's what we use to develop and build our appliance library). If your end goal is an LXC container, then the process is a little convoluted. That is because by default, it only builds ISOs. We then run the ISO through Buildtasks. We use bt-iso to build the initial ISO and generate the associated metadata, then bt-container builds the LXC container from the ISO.

If you develop anything cool (even if it's not TurnKey based, but especially if it is) please feel free to share (perhaps a thread in "General"?).

Anyway, good luck with it all and hopefully see you about on the forums.

Hi there, welcome to TurnKey

Your website user account has been approved. Please feel free to post in our forums if you have any questions, concerns or feedback for us.

Hi Jing, welcome to TurnKey and my deepest apologies that your message(s) in September went unanswered... That's totally on me and I'm really sorry. FWIW I do recall seeing one of those come through (I don't recall 2 though?), and I recall planning to update the mirrors page with your info. Unfortunately, I got sidetracked and never circled back to finishing that up. Too many plates spinning...

Thanks for your persistence! I've now (finally) updated the mirrors page with your mirror now. Thank you for your contributions to open source in general, and TurnKey in particular! :)

Your website user account has been approved, so please feel free to post a new thread if you have any feedback for us, or any questions, etc. FWIW, in future the best way to get my attention (beyond posting in the forums) is via our support email (support AT turnkeylinux.org).

Take care and hopefully see you about in the future. :)

TBH, I have some concerns about your veracity as a genuine TurnKey user. In the case that I am mistaken, my apologies in advance and welcome to TurnKey.

Your post is eerily similar to another post here which raises my suspicions a little (spammers and spam bots often do that in an effort to fly under the radar). However, I've given you the benefit of the doubt this time and have approved your account. Please be aware that if you post any spam, your IP will be blacklisted, the spam will be removed and your account deleted.

Hi Jan, welcome to TurnKey.

Please do not hesitate to open a new thread if you have any questions or issues. We also welcome feedback (the good, the bad and the ugly) and feature requests (although we have limited cycles so no guarantees that we'll be able to grant your wish, but please ask anyway).

Hopefully see you about.

Hey Markenio - Welcome to TurnKey :)

Thanks for your kind words. Good luck with it all and please do not hesitate to open a new thread if you have any questions, issues or feedback for us.

Hopefully see you about on the forums.

I'm glad to hear that you've been finding our Observium appliance useful.

Well, first up is the mandatory plug for TKLBAM (our custom backup and data migration tool). It's pre-installed in all of our servers and can easily be linked to the TurnKey Hub. If you need any assistance with the TurnKey Hub, please hit me up via the Hub's "in app" support (blue icon towards the bottom right of screen) or the Feedback link (in the top bar), or via support AT turnkeylinux.org (please either send from the same email as your Hub account, or note the email address of your Hub account). TKLBAM can also be used independent of the Hub, but that's a bit more mucking around (ask in a new thread if you want more detail on that).

Beyond TKLBAM, it's worth remembering that TurnKey is Debian under the hood. So any Debian compatible Linux backup tool should also work.

Finally, if you're knowledgeable and keen enough, you can generate your own backup script. Th details of what needs to be backed up can be seen in the Observium docs (note that is explicitly for data migration, but the data it notes equally applies to a backup).

No matter which way you go, I urge you to test your backups before you need them!

Hi Michael, I have enabled your website account. Please feel free to open a new thread if/when you have questions, concerns or feedback for us.

Re your Zoneminder questions, that is because in v17.0 & v17.1 we installed Zoneminder from the Debian repos. Where possible, that is usually the preferable path. Whilst the software version stays the same (as you've noticed), security issues are generally addressed via a backported patch. You don't get the latest version but it should remain secure. However, it seemed that the Debian Security team downgraded support for Zoneminder and it wasn't maintained in the way that we had hoped.

So from v17.2 onwards we install newer Zoneminder direct from the Zoneminder apt repo.

In theory, you should be able to add the repo and update to the newer Zoneminder. However, I'm not 100% sure it will "just work", so please be sure to have a snapshot of your current server before proceeding (backups such as TKLBAM are good for data, but a snapshot of the whole OS is much better for winding back changes like I am about to suggest). So if this is a VM, use whatever tools allow you to take a snapshot of the OS (so you can rollback to where you are if need be). If it's a bare metal install, then Clonezilla is a good tool (to clone your existing install).

Then download the key like this (assuming running as root; if not run 'sudo su -' before starting to open a root shell session):

wget https://zmrepo.zoneminder.com/debian/archive-keyring.gpg
cat archive-keyring.gpg | gpg --dearmor > /usr/share/keyrings/zoneminder.gpg
rm archive-keyring.gpg

Now write the sources.list (still as root):

cat > /etc/apt/sources.list.d/zoneminder.list <<EOF
# ZoneMinder offical apt repo
deb [signed-by=/usr/share/keyrings/zoneminder.gpg] http://zmrepo.zoneminder.com/debian/release-1.36 bullseye/
EOF

Then run this:

apt update
apt install zoneminder

Fingers crossed, it will "just work", if not then please open a new thread and provide as much info as possible about what isn't working, especially including any explicit error messages you see. Copy/pasting text messages (e.g. terminal error messages) is great, although screenshots also work too. If you do go the screenshot route, please be aware that only the first post of a thread can have attachments. Attach your screenshots there and note in the post that they are attached (sorry its a quirk of our site that the attachments aren't displayed - I'll apply a tweak to your post so that they can be seen - if you want to update additional screeshots later, then edit your first post, attach them and again let me know).

Hopefully that gets you there, otherwise as I say, please open a new support thread and we'll go from there.

Apologies for slow response. It seems that I had already approved your account, but didn't actually explicitly reply!?

Anyway, your account has been approved (last week actually).

Unfortunately, I don't speak Portuguese (I'm an English only monoglot), so I had to use Google translate. Hopefully that's an option for you too? I'm fine if you want to post on our forums in Portuguese, but I would really appreciate it if you could include an English translation as well. Google translate seems to work good enough!?

tradução do Google

Desculpas pela resposta lenta. Parece que já aprovei sua conta, mas não respondi explicitamente!?

De qualquer forma, sua conta foi aprovada (na verdade, na semana passada).

Infelizmente, eu não falo português (sou monoglota apenas em inglês), então tive que usar o Google Tradutor. Espero que essa seja uma opção para você também. Tudo bem se você quiser postar em nossos fóruns em português, mas eu realmente apreciaria se você pudesse incluir uma tradução em inglês também. O Google Tradutor parece funcionar bem o suficiente!?

Hi there, as you would have seen, I approved your account.

However, I just noticed that you posted a fraudulent endorsement of your company by us on your user page!

I have now suspended your account, updated your user page to note that it was a fake and fraudulent endorsement. I have also reached out directly to Maniflex Ltd to see whether they were aware of this and directly involved, or whether you are just an unethical SEO scammer.

We do not take kindly to this sort of misrepresentation. How they (you?) react, will determine my next course of action.

Nice work. You're in! :)

Welcome to TurnKey. Please do not hestiate to open a new thread if you have any questions, issues and/or feedback for us.

You mention wanting an API key. To get one of those, you'll need to sign up to the TurnKey Hub. Whilst a significant component of that is "Cloud Servers" (which I'm guessing you probably don't want if you're happy self hosting), but it also supports remote, encrypted "Backups" (that's what the API key step is on firstboot; linking your server to the Hub for remote encrypted backups). If you do sign up to that, please be sure to cancel the free trial of "Cloud Bronze" (assuming you don't plan to run any cloud servers). If you have any questions regarding the Hub, please do not hesitate to access the Hub's "in app" support for any Hub specific questions.

Having said that, whilst I encourage use of TKLBAM (our built in backup tool - which links to the Hub), if your data isn't important (e.g. testing, hobby, etc) or you have an alternate remote backup regime in place, then linking TKLBAM to the Hub is not compulsory. You can skip that step if you wish.

FWIW guest posts usually require approval, so that was at least part of the issue.

Now your account has been approved, hopefully it will be a bit smoother.

Re Wireguard, if you're using the Proxmox, you may already be aware that you need to manually install the 'wireguard-tools' package to make it all work. By a gross oversight by us, it gets removed during the template build process and we didn't realise until we had already started work on the next major release. FWIW the ISO should "just work" and the new (upcoming) v18.0 build should also "just work" OOTB.

Please don't hesitate to start a new thread if you have any further concerns, issues and/or feedback for us. Good luck and perhaps see you about on the forums.