A tutorial to install and configure Apache Guacamole, a clientless remote desktop gateway, to access your machines through a web browser.
This advanced tutorial is reserved for premium members.
/guacamole context, not at the root of the application server. The full address is therefore http://<your_server_ip>:8080/guacamole/, trailing slash included. This is the single most common mistake right after the first docker-compose up -d. If you add a reverse proxy in front, make sure that path is preserved or rewritten correctly.guacd is the proxy daemon that actually opens the RDP, VNC and SSH connections to the target machines and converts them into a stream the browser can render. The guacamole container only serves the web interface and handles authentication. The two talk to each other through the GUACD_HOSTNAME: guacd variable: if it is wrong, the interface loads fine but no connection will ever open.db-init container runs initdb.sh --postgresql to create that schema and then exits: it is a one-shot job, not a permanent service. That is why the first docker-compose up -d takes a few minutes, between pulling the images and running this initialization.CHANGEME_A_STRONG_PASSWORD with a real password across all three services in docker-compose.yml, change the guacadmin account immediately after the first login, and never publish port 8080 in the clear — put a reverse proxy (Nginx Proxy Manager, Traefik, Caddy) in charge of the SSL/TLS certificate. Guacamole can also plug into an existing directory through LDAP, SAML or OpenID, which spares you from managing a separate account database../data/guacd/record volume mounted on the guacd container.Did you enjoy this article?
Comments