Apache Guacamole in a Container Secured with TLS

This Docker Compose setup makes it very easy run Apache Guacamole behind a NGINX reverse proxy TLS secured with Let's Encrypt.

Unique Features

• Unlike other examples with compose this setup is much simpler to setup and is inline with common docker practice.
• This composition is using official Apache Guacamole Docker Images guacamole/guacamole:latest.
• Automatically created and configured Nginx Reverse Proxy in front of the Guacamole Service.
• TLS encrypted traffic with Let's Encrypt for your public custom domain.
• Minimal configuration of only two mandatory environment variables.

Run

Before you start the service configure two mandatory parameters. The easiest way is to create a .env file in your working directory eg.:

Step 1

cut > .env <<EOF
POSTGRES_PASSWORD=*****
VIRTUAL_HOST=workshop.8gears.com
EOF

It is advised to run the service init-guac-db once before starting all other services. This one off job will export the application database schema so Postgres can pick it up when it starts and init the database with those values accordingly.

Step 2

docker-compose -f https://raw.githubusercontent.com/8gears/containerized-guacamole/master/docker-compose.yml up init-guac-db

Step 3 Start Guacamole Services:

docker-compose -f https://raw.githubusercontent.com/8gears/containerized-guacamole/master/docker-compose.yml up -d

Now go to your application https://workshop.domain.org/guacamole and login as guacadmin/guacadmin. Don't forget to change the password in the next step.