Embedded Browser

An interactive Brave (Chromium-based, degoogled) session running on the Cloudron host, streamed to your browser through KasmVNC. Backend machines IP-whitelist the Cloudron host as their single trusted ingress; you reach those backends' web UIs from anywhere through this remote browser.

All users with access share the same browser session — there is no per-user isolation within the container. For per-user isolation, install one instance per user (each with its own subdomain and ACL).

Security: Brave runs unsandboxed (stock Cloudron cannot run Chromium's sandbox — see SECURITY.md). An in-container iptables + ip6tables egress filter denies RFC1918, ULA, and link-local addresses by default, for both IPv4 and IPv6. A * in /app/data/allowlist.txt (created on first run) allows all public internet — remove it to switch to whitelist mode (only explicitly listed hosts reachable). Brave runs in incognito mode with the profile wiped on each restart — no credentials, history, or cookies persist (downloads do). DuckDuckGo is the default search engine; Brave telemetry/rewards disabled; Tor enabled. No external STUN calls (websocket-only). Auto-restarts Brave on crash or close.

Read SECURITY.md before installing on a multi-app Cloudron.

• Login: Cloudron proxyAuth (OIDC) — no extra password
• All users share one browser session (no per-user isolation; use multiple instances)
• Incognito + profile wipe (no persistent credentials/history)
• iptables + ip6tables egress filter with * toggle (blacklist/whitelist)
• DuckDuckGo default search; Tor enabled; Brave telemetry disabled
• Downloads in /app/data/downloads (Cloudron File Manager)
• Clipboard sync; dynamic window resize; non-root session