CortenDesk 1.5.0

IMPORTANT!

CortenDesk is now a complete drop-in replacement for the open-source RustDesk server. One image runs the console, the ID server (hbbs) and the relay (hbbr). Make sure to follow the upgrade instructions correctly.

Why

The bundled servers are CortenDesk Server, our AGPL fork of rustdesk-server. It fixes something the open-source server cannot do: clients from 1.4.1 onwards encrypt their connection to the ID server whenever they are signed in to a console, and the stock hbbs never completes that exchange — so every connection from a signed-in client fails with Failed to secure tcp: deadline has elapsed, breaking the address book, which is the reason to sign in at all. Reported as #19.

New

• One container is the whole deployment. No separate hbbs/hbbr project, no key to copy between them.
• APP_URL is the only setting that matters. The ID server, the relay address handed to clients, the public key and the web client's WebSocket URLs are all derived from it. The key pair is generated into /data/rustdesk on first boot and the console picks it up by itself.
• The WebSocket bridge is internal. /ws/id and /ws/relay reach the servers over loopback, so a reverse proxy only has to forward 8080 — no nginx stream block, no publishing 21118/21119.
• CORTENDESK_EMBEDDED_SERVER=false keeps the 1.1.x behaviour if you run your own servers.

Upgrading from 1.1.x or earlier

Stop your hbbs/hbbr containers and mount their data directory at /data/rustdesk. The key pair and peer database are adopted as they are, so every device keeps its ID and no client needs reconfiguring.

Full walkthrough, including what to check in the logs and how to roll back: Upgrading to 1.5.

Ports

8080 console and client API; 21115 NAT test; 21116 signalling, TCP and UDP; 21117 relay; 21118/21119 WebSocket (only if something outside the container talks to them directly).

docker pull marcpope/cortendesk:1.5.0
docker pull ghcr.io/marcpope/cortendesk:1.5.0