From 556721e7782cc1b1a037a2799959853c40127bac Mon Sep 17 00:00:00 2001 From: Eric Nemchik Date: Tue, 22 Jan 2019 13:40:08 -0600 Subject: [PATCH] Add guacamole proxies --- guacamole.subdomain.conf.sample | 31 +++++++++++++++++++++++++++++++ guacamole.subfolder.conf.sample | 21 +++++++++++++++++++++ 2 files changed, 52 insertions(+) create mode 100644 guacamole.subdomain.conf.sample create mode 100644 guacamole.subfolder.conf.sample diff --git a/guacamole.subdomain.conf.sample b/guacamole.subdomain.conf.sample new file mode 100644 index 0000000..efe4e3f --- /dev/null +++ b/guacamole.subdomain.conf.sample @@ -0,0 +1,31 @@ +# make sure that your dns has a cname set for guacamole and that your guacamole container is not using a base url + +server { + listen 443 ssl; + listen [::]:443 ssl; + + server_name guacamole.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth, fill in ldap details in ldap.conf + #include /config/nginx/ldap.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable the next two lines for ldap auth + #auth_request /auth; + #error_page 401 =200 /login; + + include /config/nginx/proxy.conf; + proxy_buffering off; + resolver 127.0.0.11 valid=30s; + set $upstream_guacamole guacamole; + proxy_pass http://$upstream_guacamole:8080; + } +} diff --git a/guacamole.subfolder.conf.sample b/guacamole.subfolder.conf.sample new file mode 100644 index 0000000..ea14873 --- /dev/null +++ b/guacamole.subfolder.conf.sample @@ -0,0 +1,21 @@ +# guacamole does not require a base url setting + +location /guacamole { + return 301 $scheme://$host/guacamole/; +} +location ^~ /guacamole/ { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable the next two lines for ldap auth, also customize and enable ldap.conf in the default conf + #auth_request /auth; + #error_page 401 =200 /login; + + include /config/nginx/proxy.conf; + proxy_buffering off; + resolver 127.0.0.11 valid=30s; + set $upstream_guacamole guacamole; + rewrite /guacamole(.*) $1 break; + proxy_pass http://$upstream_guacamole:8080; +}