{
    "stable": true,
    "versions": {
        "0.0.2": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.2",
                "upstreamVersion": "0.77.1",
                "healthCheckPath": "/",
                "httpPort": 3000,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.77.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.2"
            },
            "creationDate": "Thu, 10 Sep 2026 15:24:52 GMT",
            "ts": "Thu, 10 Sep 2026 15:24:52 GMT",
            "publishState": "published"
        },
        "0.0.3": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.3",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 3000,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.3"
            },
            "creationDate": "Thu, 10 Sep 2026 15:37:08 GMT",
            "ts": "Thu, 10 Sep 2026 15:37:08 GMT",
            "publishState": "published"
        },
        "0.0.4": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.4",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 3000,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.4"
            },
            "creationDate": "Thu, 10 Sep 2026 15:57:32 GMT",
            "ts": "Thu, 10 Sep 2026 15:57:32 GMT",
            "publishState": "published"
        },
        "0.0.5": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.5",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 3000,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.5"
            },
            "creationDate": "Thu, 10 Sep 2026 16:06:47 GMT",
            "ts": "Thu, 10 Sep 2026 16:06:47 GMT",
            "publishState": "published"
        },
        "0.0.6": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.6",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.6"
            },
            "creationDate": "Thu, 10 Sep 2026 16:28:38 GMT",
            "ts": "Thu, 10 Sep 2026 16:28:38 GMT",
            "publishState": "published"
        },
        "0.0.7": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.7",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.7"
            },
            "creationDate": "Thu, 10 Sep 2026 16:37:58 GMT",
            "ts": "Thu, 10 Sep 2026 16:37:58 GMT",
            "publishState": "published"
        },
        "0.0.8": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.8",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.8"
            },
            "creationDate": "Thu, 10 Sep 2026 16:45:57 GMT",
            "ts": "Thu, 10 Sep 2026 16:45:57 GMT",
            "publishState": "published"
        },
        "0.0.9": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.9",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.9"
            },
            "creationDate": "Thu, 10 Sep 2026 16:50:12 GMT",
            "ts": "Thu, 10 Sep 2026 16:50:12 GMT",
            "publishState": "published"
        },
        "0.0.10": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.10",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.10"
            },
            "creationDate": "Thu, 10 Sep 2026 16:59:32 GMT",
            "ts": "Thu, 10 Sep 2026 16:59:32 GMT",
            "publishState": "published"
        },
        "0.0.11": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.11",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.11"
            },
            "creationDate": "Thu, 10 Sep 2026 17:12:03 GMT",
            "ts": "Thu, 10 Sep 2026 17:12:03 GMT",
            "publishState": "published"
        },
        "0.0.12": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.12",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.12"
            },
            "creationDate": "Thu, 10 Sep 2026 17:16:39 GMT",
            "ts": "Thu, 10 Sep 2026 17:16:39 GMT",
            "publishState": "published"
        },
        "0.0.13": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.13",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.13"
            },
            "creationDate": "Thu, 10 Sep 2026 17:21:20 GMT",
            "ts": "Thu, 10 Sep 2026 17:21:20 GMT",
            "publishState": "published"
        },
        "0.0.14": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.14",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.14"
            },
            "creationDate": "Thu, 10 Sep 2026 17:28:18 GMT",
            "ts": "Thu, 10 Sep 2026 17:28:18 GMT",
            "publishState": "published"
        },
        "0.0.15": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.15",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.15"
            },
            "creationDate": "Thu, 10 Sep 2026 17:36:26 GMT",
            "ts": "Thu, 10 Sep 2026 17:36:26 GMT",
            "publishState": "published"
        },
        "0.0.16": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.16",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.16"
            },
            "creationDate": "Thu, 10 Sep 2026 17:39:39 GMT",
            "ts": "Thu, 10 Sep 2026 17:39:39 GMT",
            "publishState": "published"
        },
        "0.0.17": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.17",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.17"
            },
            "creationDate": "Thu, 10 Sep 2026 17:43:41 GMT",
            "ts": "Thu, 10 Sep 2026 17:43:41 GMT",
            "publishState": "published"
        },
        "0.0.18": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.18",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.18"
            },
            "creationDate": "Thu, 10 Sep 2026 17:48:53 GMT",
            "ts": "Thu, 10 Sep 2026 17:48:53 GMT",
            "publishState": "published"
        },
        "0.0.19": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.19",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.19"
            },
            "creationDate": "Thu, 10 Sep 2026 20:28:44 GMT",
            "ts": "Thu, 10 Sep 2026 20:28:44 GMT",
            "publishState": "published"
        },
        "0.0.20": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.20",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.20"
            },
            "creationDate": "Thu, 10 Sep 2026 20:39:23 GMT",
            "ts": "Thu, 10 Sep 2026 20:39:23 GMT",
            "publishState": "published"
        },
        "0.0.21": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.21",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.21"
            },
            "creationDate": "Thu, 10 Sep 2026 20:42:17 GMT",
            "ts": "Thu, 10 Sep 2026 20:42:17 GMT",
            "publishState": "published"
        },
        "0.0.22": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.22",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.22"
            },
            "creationDate": "Thu, 10 Sep 2026 20:45:24 GMT",
            "ts": "Thu, 10 Sep 2026 20:45:24 GMT",
            "publishState": "published"
        },
        "0.0.23": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.23",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.23"
            },
            "creationDate": "Thu, 10 Sep 2026 20:49:36 GMT",
            "ts": "Thu, 10 Sep 2026 20:49:36 GMT",
            "publishState": "published"
        },
        "0.0.24": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.24",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.24"
            },
            "creationDate": "Thu, 10 Sep 2026 20:58:27 GMT",
            "ts": "Thu, 10 Sep 2026 20:58:27 GMT",
            "publishState": "published"
        },
        "0.0.25": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.25",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.25"
            },
            "creationDate": "Thu, 10 Sep 2026 21:01:48 GMT",
            "ts": "Thu, 10 Sep 2026 21:01:48 GMT",
            "publishState": "published"
        },
        "0.0.26": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.26",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.26"
            },
            "creationDate": "Thu, 10 Sep 2026 21:06:43 GMT",
            "ts": "Thu, 10 Sep 2026 21:06:43 GMT",
            "publishState": "published"
        },
        "0.0.27": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.27",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.27"
            },
            "creationDate": "Thu, 10 Sep 2026 21:12:52 GMT",
            "ts": "Thu, 10 Sep 2026 21:12:52 GMT",
            "publishState": "published"
        },
        "0.0.28": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.28",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.28"
            },
            "creationDate": "Thu, 10 Sep 2026 21:16:11 GMT",
            "ts": "Thu, 10 Sep 2026 21:16:11 GMT",
            "publishState": "published"
        },
        "0.0.29": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.29",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.29"
            },
            "creationDate": "Thu, 10 Sep 2026 21:23:05 GMT",
            "ts": "Thu, 10 Sep 2026 21:23:05 GMT",
            "publishState": "published"
        },
        "0.0.30": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.30",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.30"
            },
            "creationDate": "Thu, 10 Sep 2026 21:27:45 GMT",
            "ts": "Thu, 10 Sep 2026 21:27:45 GMT",
            "publishState": "published"
        },
        "0.0.31": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.31",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.31"
            },
            "creationDate": "Thu, 10 Sep 2026 21:30:22 GMT",
            "ts": "Thu, 10 Sep 2026 21:30:22 GMT",
            "publishState": "published"
        },
        "0.0.32": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.32",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.32"
            },
            "creationDate": "Thu, 10 Sep 2026 21:33:20 GMT",
            "ts": "Thu, 10 Sep 2026 21:33:20 GMT",
            "publishState": "published"
        },
        "0.0.33": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.33",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.33"
            },
            "creationDate": "Thu, 10 Sep 2026 21:36:46 GMT",
            "ts": "Thu, 10 Sep 2026 21:36:46 GMT",
            "publishState": "published"
        },
        "0.0.34": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.34",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.34"
            },
            "creationDate": "Thu, 10 Sep 2026 21:45:37 GMT",
            "ts": "Thu, 10 Sep 2026 21:45:37 GMT",
            "publishState": "published"
        },
        "0.0.35": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.35",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/setup** in your browser. This onboarding page is only available before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.35"
            },
            "creationDate": "Thu, 10 Sep 2026 21:48:52 GMT",
            "ts": "Thu, 10 Sep 2026 21:48:52 GMT",
            "publishState": "published"
        },
        "0.0.36": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.36",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.36"
            },
            "creationDate": "Thu, 10 Sep 2026 22:07:18 GMT",
            "ts": "Thu, 10 Sep 2026 22:07:18 GMT",
            "publishState": "published"
        },
        "0.0.37": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.37",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.37"
            },
            "creationDate": "Thu, 10 Sep 2026 22:12:09 GMT",
            "ts": "Thu, 10 Sep 2026 22:12:09 GMT",
            "publishState": "published"
        },
        "0.0.38": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.38",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.38"
            },
            "creationDate": "Thu, 10 Sep 2026 22:29:27 GMT",
            "ts": "Thu, 10 Sep 2026 22:29:27 GMT",
            "publishState": "published"
        },
        "0.0.39": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.39",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.39"
            },
            "creationDate": "Thu, 10 Sep 2026 22:36:04 GMT",
            "ts": "Thu, 10 Sep 2026 22:36:04 GMT",
            "publishState": "published"
        },
        "0.0.40": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.40",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.40"
            },
            "creationDate": "Thu, 10 Sep 2026 22:51:42 GMT",
            "ts": "Thu, 10 Sep 2026 22:51:42 GMT",
            "publishState": "published"
        },
        "0.0.41": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.41",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.41"
            },
            "creationDate": "Fri, 11 Sep 2026 07:32:04 GMT",
            "ts": "Fri, 11 Sep 2026 07:32:04 GMT",
            "publishState": "published"
        },
        "0.0.42": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.42",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.42"
            },
            "creationDate": "Fri, 11 Sep 2026 07:38:55 GMT",
            "ts": "Fri, 11 Sep 2026 07:38:55 GMT",
            "publishState": "published"
        },
        "0.0.43": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.43",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.43"
            },
            "creationDate": "Fri, 11 Sep 2026 08:57:30 GMT",
            "ts": "Fri, 11 Sep 2026 08:57:30 GMT",
            "publishState": "published"
        },
        "0.0.44": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.44",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.44"
            },
            "creationDate": "Fri, 11 Sep 2026 09:05:08 GMT",
            "ts": "Fri, 11 Sep 2026 09:05:08 GMT",
            "publishState": "published"
        },
        "0.0.45": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.45",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.45"
            },
            "creationDate": "Fri, 11 Sep 2026 09:17:39 GMT",
            "ts": "Fri, 11 Sep 2026 09:17:39 GMT",
            "publishState": "published"
        },
        "0.0.46": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.46",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.46"
            },
            "creationDate": "Fri, 11 Sep 2026 09:25:31 GMT",
            "ts": "Fri, 11 Sep 2026 09:25:31 GMT",
            "publishState": "published"
        },
        "0.0.47": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.47",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.47"
            },
            "creationDate": "Fri, 11 Sep 2026 09:34:17 GMT",
            "ts": "Fri, 11 Sep 2026 09:34:17 GMT",
            "publishState": "published"
        },
        "0.0.48": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.48",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.48"
            },
            "creationDate": "Fri, 11 Sep 2026 09:55:43 GMT",
            "ts": "Fri, 11 Sep 2026 09:55:43 GMT",
            "publishState": "published"
        },
        "0.0.49": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.49",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.49"
            },
            "creationDate": "Fri, 11 Sep 2026 10:01:04 GMT",
            "ts": "Fri, 11 Sep 2026 10:01:04 GMT",
            "publishState": "published"
        },
        "0.0.50": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.50",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.50"
            },
            "creationDate": "Fri, 11 Sep 2026 10:08:00 GMT",
            "ts": "Fri, 11 Sep 2026 10:08:00 GMT",
            "publishState": "published"
        },
        "0.0.51": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.51",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* initial build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.51"
            },
            "creationDate": "Fri, 11 Sep 2026 10:26:16 GMT",
            "ts": "Fri, 11 Sep 2026 10:26:16 GMT",
            "publishState": "published"
        },
        "0.0.53": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.53",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.53"
            },
            "creationDate": "Fri, 11 Sep 2026 14:58:11 GMT",
            "ts": "Fri, 11 Sep 2026 14:58:11 GMT",
            "publishState": "published"
        },
        "0.0.54": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.54",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.54"
            },
            "creationDate": "Fri, 11 Sep 2026 15:03:44 GMT",
            "ts": "Fri, 11 Sep 2026 15:03:44 GMT",
            "publishState": "published"
        },
        "0.0.55": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.55",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.55"
            },
            "creationDate": "Fri, 11 Sep 2026 15:14:04 GMT",
            "ts": "Fri, 11 Sep 2026 15:14:04 GMT",
            "publishState": "published"
        },
        "0.0.57": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.57",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.57"
            },
            "creationDate": "Fri, 11 Sep 2026 15:28:52 GMT",
            "ts": "Fri, 11 Sep 2026 15:28:52 GMT",
            "publishState": "published"
        },
        "0.0.58": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.58",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.58"
            },
            "creationDate": "Fri, 11 Sep 2026 15:36:00 GMT",
            "ts": "Fri, 11 Sep 2026 15:36:00 GMT",
            "publishState": "published"
        },
        "0.0.59": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.59",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.59"
            },
            "creationDate": "Fri, 11 Sep 2026 15:41:54 GMT",
            "ts": "Fri, 11 Sep 2026 15:41:54 GMT",
            "publishState": "published"
        },
        "0.0.60": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.60",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.60"
            },
            "creationDate": "Fri, 11 Sep 2026 15:47:56 GMT",
            "ts": "Fri, 11 Sep 2026 15:47:56 GMT",
            "publishState": "published"
        },
        "0.0.61": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.61",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.61"
            },
            "creationDate": "Fri, 11 Sep 2026 15:54:00 GMT",
            "ts": "Fri, 11 Sep 2026 15:54:00 GMT",
            "publishState": "published"
        },
        "0.0.62": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.62",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.62"
            },
            "creationDate": "Fri, 11 Sep 2026 15:57:48 GMT",
            "ts": "Fri, 11 Sep 2026 15:57:48 GMT",
            "publishState": "published"
        },
        "0.0.63": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.63",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.63"
            },
            "creationDate": "Fri, 11 Sep 2026 16:00:59 GMT",
            "ts": "Fri, 11 Sep 2026 16:00:59 GMT",
            "publishState": "published"
        },
        "0.0.64": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.64",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.64"
            },
            "creationDate": "Fri, 11 Sep 2026 16:02:38 GMT",
            "ts": "Fri, 11 Sep 2026 16:02:38 GMT",
            "publishState": "published"
        },
        "0.0.65": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.65",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.65"
            },
            "creationDate": "Fri, 11 Sep 2026 16:04:19 GMT",
            "ts": "Fri, 11 Sep 2026 16:04:19 GMT",
            "publishState": "published"
        },
        "0.0.66": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.66",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.66"
            },
            "creationDate": "Fri, 11 Sep 2026 16:05:54 GMT",
            "ts": "Fri, 11 Sep 2026 16:05:54 GMT",
            "publishState": "published"
        },
        "0.0.67": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.67",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.67"
            },
            "creationDate": "Fri, 11 Sep 2026 16:08:43 GMT",
            "ts": "Fri, 11 Sep 2026 16:08:43 GMT",
            "publishState": "published"
        },
        "0.0.68": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.68",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.68"
            },
            "creationDate": "Fri, 11 Sep 2026 16:10:44 GMT",
            "ts": "Fri, 11 Sep 2026 16:10:44 GMT",
            "publishState": "published"
        },
        "0.0.69": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.69",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.69"
            },
            "creationDate": "Fri, 11 Sep 2026 16:14:28 GMT",
            "ts": "Fri, 11 Sep 2026 16:14:28 GMT",
            "publishState": "published"
        },
        "0.0.70": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.70",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.70"
            },
            "creationDate": "Fri, 11 Sep 2026 16:17:47 GMT",
            "ts": "Fri, 11 Sep 2026 16:17:47 GMT",
            "publishState": "published"
        },
        "0.0.71": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.71",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.71"
            },
            "creationDate": "Fri, 11 Sep 2026 16:20:38 GMT",
            "ts": "Fri, 11 Sep 2026 16:20:38 GMT",
            "publishState": "published"
        },
        "0.0.72": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.72",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.72"
            },
            "creationDate": "Fri, 11 Sep 2026 16:26:09 GMT",
            "ts": "Fri, 11 Sep 2026 16:26:09 GMT",
            "publishState": "published"
        },
        "0.0.73": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.73",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.73"
            },
            "creationDate": "Fri, 11 Sep 2026 16:28:45 GMT",
            "ts": "Fri, 11 Sep 2026 16:28:45 GMT",
            "publishState": "published"
        },
        "0.0.74": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.74",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "tcpPorts": {
                    "NETBIRD_CLIENT_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS gRPC port for native NetBird clients. Use this port in --management-url for desktop and CLI clients.",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "tls": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n   Replace `33073` if you changed the app's **Native Client Port** binding.\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.74"
            },
            "creationDate": "Fri, 11 Sep 2026 16:40:17 GMT",
            "ts": "Fri, 11 Sep 2026 16:40:17 GMT",
            "publishState": "published"
        },
        "0.0.75": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.75",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "tcpPorts": {
                    "NETBIRD_CLIENT_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS gRPC port for native NetBird clients. Use this port in --management-url for desktop and CLI clients.",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "udpPorts": {
                    "NETBIRD_STUN_PORT": {
                        "title": "STUN Port",
                        "description": "NetBird embedded STUN server (UDP). Used for WireGuard NAT hole-punching discovery. Avoid 3478 if this Cloudron host already exposes STUN on that port.",
                        "defaultValue": 3479,
                        "containerPort": 3479,
                        "portCount": 1
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url http://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n   Replace `33073` if you changed the app's **Native Client Port** binding.\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url http://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.75"
            },
            "creationDate": "Fri, 11 Sep 2026 16:44:19 GMT",
            "ts": "Fri, 11 Sep 2026 16:44:19 GMT",
            "publishState": "published"
        },
        "0.0.76": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.76",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "tcpPorts": {
                    "NETBIRD_CLIENT_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS gRPC port for native NetBird clients. Use this port in --management-url for desktop and CLI clients.",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url http://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n   Replace `33073` if you changed the app's **Native Client Port** binding.\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url http://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.76"
            },
            "creationDate": "Fri, 11 Sep 2026 16:55:38 GMT",
            "ts": "Fri, 11 Sep 2026 16:55:38 GMT",
            "publishState": "published"
        },
        "0.0.77": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.77",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.77"
            },
            "creationDate": "Fri, 11 Sep 2026 17:02:44 GMT",
            "ts": "Fri, 11 Sep 2026 17:02:44 GMT",
            "publishState": "published"
        },
        "0.0.78": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.78",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.78"
            },
            "creationDate": "Fri, 11 Sep 2026 17:11:06 GMT",
            "ts": "Fri, 11 Sep 2026 17:11:06 GMT",
            "publishState": "published"
        },
        "0.0.79": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.79",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.79"
            },
            "creationDate": "Fri, 11 Sep 2026 17:13:51 GMT",
            "ts": "Fri, 11 Sep 2026 17:13:51 GMT",
            "publishState": "published"
        },
        "0.0.80": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.80",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.80"
            },
            "creationDate": "Fri, 11 Sep 2026 17:28:37 GMT",
            "ts": "Fri, 11 Sep 2026 17:28:37 GMT",
            "publishState": "published"
        },
        "0.0.81": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.81",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.81"
            },
            "creationDate": "Fri, 11 Sep 2026 17:32:00 GMT",
            "ts": "Fri, 11 Sep 2026 17:32:00 GMT",
            "publishState": "published"
        },
        "0.0.82": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.82",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.82"
            },
            "creationDate": "Fri, 11 Sep 2026 17:37:34 GMT",
            "ts": "Fri, 11 Sep 2026 17:37:34 GMT",
            "publishState": "published"
        },
        "0.0.83": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.83",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.83"
            },
            "creationDate": "Fri, 11 Sep 2026 17:41:21 GMT",
            "ts": "Fri, 11 Sep 2026 17:41:21 GMT",
            "publishState": "published"
        },
        "0.0.84": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.84",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.84"
            },
            "creationDate": "Fri, 11 Sep 2026 17:48:11 GMT",
            "ts": "Fri, 11 Sep 2026 17:48:11 GMT",
            "publishState": "published"
        },
        "0.0.85": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.85",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.85"
            },
            "creationDate": "Fri, 11 Sep 2026 19:37:14 GMT",
            "ts": "Fri, 11 Sep 2026 19:37:14 GMT",
            "publishState": "published"
        },
        "0.0.86": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.86",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.86"
            },
            "creationDate": "Fri, 11 Sep 2026 19:42:55 GMT",
            "ts": "Fri, 11 Sep 2026 19:42:55 GMT",
            "publishState": "published"
        },
        "0.0.87": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.87",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.87"
            },
            "creationDate": "Fri, 11 Sep 2026 19:56:52 GMT",
            "ts": "Fri, 11 Sep 2026 19:56:52 GMT",
            "publishState": "published"
        },
        "0.0.88": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.88",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.88"
            },
            "creationDate": "Fri, 11 Sep 2026 20:02:07 GMT",
            "ts": "Fri, 11 Sep 2026 20:02:07 GMT",
            "publishState": "published"
        },
        "0.0.89": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.89",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.89"
            },
            "creationDate": "Fri, 11 Sep 2026 20:05:26 GMT",
            "ts": "Fri, 11 Sep 2026 20:05:26 GMT",
            "publishState": "published"
        },
        "0.0.90": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.90",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url http://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url http://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.90"
            },
            "creationDate": "Fri, 11 Sep 2026 20:13:17 GMT",
            "ts": "Fri, 11 Sep 2026 20:13:17 GMT",
            "publishState": "published"
        },
        "0.0.91": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.91",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.91"
            },
            "creationDate": "Fri, 11 Sep 2026 20:21:56 GMT",
            "ts": "Fri, 11 Sep 2026 20:21:56 GMT",
            "publishState": "published"
        },
        "0.0.92": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.92",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.92"
            },
            "creationDate": "Fri, 11 Sep 2026 20:27:36 GMT",
            "ts": "Fri, 11 Sep 2026 20:27:36 GMT",
            "publishState": "published"
        },
        "0.0.93": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.93",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1 with 33073 as client connection\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.93"
            },
            "creationDate": "Sat, 12 Sep 2026 10:36:35 GMT",
            "ts": "Sat, 12 Sep 2026 10:36:35 GMT",
            "publishState": "published"
        },
        "0.0.94": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.94",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1 with 33073 as client connection\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.94"
            },
            "creationDate": "Sat, 12 Sep 2026 10:48:40 GMT",
            "ts": "Sat, 12 Sep 2026 10:48:40 GMT",
            "publishState": "published"
        },
        "0.0.95": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.95",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33073
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1 with 33073 as client connection\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.95"
            },
            "creationDate": "Sat, 12 Sep 2026 10:54:23 GMT",
            "ts": "Sat, 12 Sep 2026 10:54:23 GMT",
            "publishState": "published"
        },
        "0.0.96": {
            "manifest": {
                "id": "io.timconsidine.cloudron-netbird",
                "title": "Netbird",
                "author": "Netbird Devs",
                "description": "NetBird combines a WireGuard-based peer-to-peer mesh VPN with centralized access control. This single-package Cloudron install bundles the self-hosted NetBird combined control plane (management + signal + relay + embedded Dex identity provider) with the official NetBird admin dashboard. Create encrypted private networks across any infrastructure, manage peers and setup keys, define ACL groups and rules, add local or external SSO IdPs, configure private DNS zones, custom routes, subnet routers, and exit nodes, and optionally expose NetBird-internal services to the web via the built-in reverse proxy — all from one domain, one install, one backup.\n",
                "tagline": "Self-hosted WireGuard mesh VPN with admin dashboard and built-in identity provider",
                "version": "0.0.96",
                "upstreamVersion": "0.78.1",
                "healthCheckPath": "/",
                "httpPort": 8080,
                "memoryLimit": 2147483648,
                "addons": {
                    "localstorage": {},
                    "postgresql": {},
                    "turn": {},
                    "tls": {}
                },
                "tcpPorts": {
                    "NETBIRD_NATIVE_PORT": {
                        "title": "Native Client Port",
                        "description": "TLS+HTTP/2 port for NetBird native clients (management, signal, relay).",
                        "defaultValue": 33073,
                        "containerPort": 33080
                    }
                },
                "manifestVersion": 2,
                "postInstallMessage": "## Initial Setup\n\n1. Open **https://<your-domain>/** (the app's root URL) in your browser. The onboarding wizard is shown automatically before any users exist.\n2. Create your first admin (owner) account by entering your email, name, and password, then click **Create Account**.\n3. You will be redirected to the login page. Sign in with the credentials you just created.\n\nThe web dashboard stays on the normal app URL. Native NetBird clients must use port `33073` unless you changed the Native Client Port during install.\n\n## Adding Peers (Devices) to Your Network\n\n1. In the NetBird dashboard, go to **Setup Keys** in the sidebar.\n2. Click **Add Setup Key**, choose a name and usage limit, pick a default group (e.g. `All`), and click **Create**.\n3. Copy the setup key shown.\n4. On each client device (Linux, macOS, Windows, iOS, Android, FreeBSD), install the NetBird client from [netbird.io/get-started](https://netbird.io/get-started), then run:\n\n   ```\n   netbird up --management-url https://<your-domain>:33073/ --setup-key <YOUR-SETUP-KEY>\n   ```\n\n5. The peer will now appear under **Peers** in the dashboard and receive an IP on your private `100.64.0.0/10` NetBird network.\n\n## User Management\n\nThis self-hosted installation includes a built-in identity provider (Dex) with local users. You can:\n\n- Invite more users under **Users → Invite User**.\n- Enable per-user TOTP MFA per user in the user settings.\n- Optionally add an external OIDC/SAML IdP (Google, Microsoft, Okta, Keycloak, etc.) under **Settings → Identity Providers**.\n\n## Access Control Basics\n\n1. **Groups**: Organize peers and users into groups (e.g. `Laptops`, `Servers`, `Admins`).\n2. **Policies (ACLs)**: Create rules that describe which groups can talk to which other groups, and on which protocols/ports. A default policy that allows everything within the `All` group is created automatically.\n3. **Setup Keys, Routes, DNS, and Exit Nodes**: all are configured from the left-hand navigation in the dashboard.\n\n## CLI Login (OAuth)\n\nIf you prefer not to use a setup key, run:\n\n```\nnetbird up --management-url https://<your-domain>:33073/\n```\n\nThis opens a browser for OAuth login against the bundled Dex IdP.\n\n## Backups\n\nCloudron's built-in backup covers:\n\n- The PostgreSQL database (all peers, users, groups, keys, policies, audit events, IdP sessions)\n- `/app/data` (auth secrets, store encryption key, IdP session cookie key, and the dashboard's runtime files)\n\nThese are sufficient to restore the instance.\n",
                "changelog": "* v2 : build 0.78.1 with 33073 as client connection\n",
                "website": "https://ca.cloudron.io",
                "contactEmail": "support@appx.uk",
                "icon": "file://logo.png",
                "tags": [
                    "networking",
                    "security",
                    "vpn",
                    "productivity"
                ],
                "iconUrl": "https://communityapps.appx.uk/cloudron-netbird/logo.png",
                "packagerName": "@timconsidine",
                "packagerUrl": "https://communityapps.appx.uk",
                "minBoxVersion": "9.1.0",
                "mediaLinks": [
                    "https://communityapps.appx.uk/cloudron-netbird/media/screenshot.png"
                ],
                "dockerImage": "forgejo.tcjc.uk/cca/cloudron-netbird:0.0.96"
            },
            "creationDate": "Sat, 12 Sep 2026 11:01:24 GMT",
            "ts": "Sat, 12 Sep 2026 11:01:24 GMT",
            "publishState": "published"
        }
    }
}