guacamole on 대충어쩌고저쩌고샬라샬라

guacamole

Mon, 15 Dec 2025 00:00:00 +0000

 graph LR
 subgraph gvp6nx1a
 A[guacamole] <-- proxy --> C1[nginx]
 B2[ssh-servers] <-- tcp --> A
 end
 C1 <-- https --> C[client]

container 구성

docker-compose.yml

vi /opt/guacamole/docker-compose.yml

services:
 guacamole:
 image: flcontainers/guacamole:latest
 container_name: guacamole
 networks:
 - dev
 ports:
 - 8080/tcp
 user: 0:0
 environment:
 - TZ=Asia/Seoul
 - EXTENSIONS=auth-totp
 volumes:
 - /opt/guacamole/config:/config:rw
 - /etc/localtime:/etc/localtime:ro
 restart: unless-stopped
networks:
 dev:
 external: true

proxy 구성

vi /opt/nginx/config/sites-available/guacamole.conf

...
 location / {
 if ($allowed_country = no) {
 return 403;
 }
 include /etc/nginx/conf.d/include/proxy.conf;
 proxy_pass http://guacamole:8080;
 proxy_buffering off;
 proxy_request_buffering off;
 }
...

Troubleshooting

초기 계정