Community Apps

Langfuse

By OrcVole

Open-source LLM observability, tracing, evals and prompt management

4.43.0 6144MB Updated 23 Sep 2026
Package Website Documentation
notes project
Install this app
In your Cloudron dashboard, open the App Store, choose "Community apps" and paste this URL:
https://raw.githubusercontent.com/OrcVole/langfuse-cloudron/main/CloudronVersions.json

Description

4.43.0

Langfuse is an open-source LLM engineering platform. It gives you observability and tracing for LLM applications, evaluations, prompt management, a prompt playground, datasets, and usage/cost metrics — all self-hosted on your own Cloudron.

This package runs the open-source (MIT) edition. It integrates with OpenTelemetry, the OpenAI SDK, LangChain, LiteLLM, LlamaIndex, and most LLM tooling, so it can act as the observability sink for the rest of your stack.

On this Cloudron:

  • Langfuse keeps its own login (email/password plus optional single sign-on through your Cloudron users via OIDC). It is not fronted by the Cloudron SSO proxy.
  • Trace ingestion uses Langfuse project API keys (a public/secret key pair you create in the UI), sent to the open /api/public/* endpoints — including the OpenTelemetry endpoint /api/public/otel/v1/traces.
  • ClickHouse and MinIO are bundled and managed for you; PostgreSQL and Redis come from Cloudron addons. All trace data and object storage live in the app's backed-up data directory.

The enterprise (/ee) features (RBAC, audit logs, data retention policies, SCIM) are intentionally not included.

Screenshot

Recent Changes

  • Update langfuse 4.36.0 to 4.43.0.

  • The update applies two PostgreSQL migrations (evaluator templates and questions) and one ClickHouse

  • migration that adds search indexes for new data only; existing data is not rewritten, so the first

  • start after updating is not slowed on a large install.

  • langfuse 4.43 adds a native module to the worker; the package now makes sure it loads (the upstream

  • loader otherwise picks the wrong build on this platform and the worker cannot start).

  • MinIO/mc moved from docker.io to quay.io: docker.io/minio/{minio,mc} now denies every anonymous

  • pull, including the digest this package had pinned, so the previous build was no longer

  • reproducible. MinIO is also bumped to its newest available build.

  • Known, not yet fixable: security scanners report four CRITICAL findings in the bundled MinIO

  • server and client. Three are in MinIO's optional RabbitMQ bucket-notification target

  • (github.com/rabbitmq/amqp091-go), which this package never configures; one is a gRPC server

  • authorisation issue (google.golang.org/grpc) in the mc client, which never runs a gRPC server.

  • No MinIO or mc build with fixed versions has been published yet; we will update as soon as one is.

  • Rebuilt on cloudron/base:5.1.0 (was 5.0.0), a routine fleet-wide bump, no functional change.