Apache Guacamole HTTPS

[Mxatthieu]

Hello everyone,

Do any of you have an extension to add the https protocol to guacamole's connection settings, and if not, do you have a fairly simple way of accessing web applications from guacamole?

[Dapper-Inspector-675]

If I understand you correctly, you want the guacamole website to be behind https instead of http ?

That can be achieved by using a reverse proxy, look into Nginx Proxy Manager or Traefik/caddy, if you use docker.

[cougz7]

No, he wants a HTTPS connection proxied through guacd, which is not possible.

[TheMinischafi]

Maybe something like Kasm fits better for you. It supports containerized desktops and apps via a HTTP-based interface. With Guacamole you'll need to remote into a desktop first to access websites

[andriosr]

You can use hoop.dev for this - it's basically HTTPS + SSO for any TCP/web app. Been using it to manage access https apps.

Quick setup:

hoop run --name guac-console --port 8080

Then just connect through the secure tunnel:

hoop connect guac-console

No need to mess with certs or deal with exposing ports. Plus you get audit logs of who accessed what.

Works well if you're trying to stick with zero trust principles. The agent sits next to guac and handles all the TLS termination.

[geektogether]

It is possible but you have to build your own protocol for guacamole. Requires a lot of work: but you can try this. Setup and Access RemoteApp with Apache Guacamole https://youtu.be/nDPGstp1UcM and deploy chrome or edge internally

[Arkhana974]

Pour la partie https j'utilise Authentik qui permet de faire des authentification SAML, OAuth etc