Apache Guacamole, un bastion d’administration pour vos accès RDP, SSH, etc. https://www.it-connect.fr/tuto-apache-guacamole-bastion-rdp-ssh-debian/ #ApacheGuacamole #Cybersécurité #Sécurité #Windows #Linux #RDP #SSH

Nachhaltige Digitalisierung unter Einsatz freier und quelloffener Softwarelösungen kann so einfach sein:

- Betriebssystem: Debian GNU/Linux
- Website: WordPress, Hugo
- Mitgliederverwaltung: CiviCRM
- Veranstaltungsmanagement: CiviCRM (Modul), pretix, pretalx, Engelsystem
- Cloudspeicher: owncloud, nextcloud
- Projektmanagement: OpenProject
- Authentifizierung: Keycloak, Authentik
- Messenger: Matrix / Element, XMPP, Nextcloud Talk
- Videokonferenzsystem: Jitsi-Meet, BigBlueButton, OpenTalk
- Mailingliste: Mailman3
- Ticketsystem: Zammad, FreeScout
- Lernmanagementsystem: Moodle, ILIAS
- Personaleinsatzplanung: Kimai
- Microblogging: Mastodon
- Foto: Pixelfed
- Video: PeerTube
- Livestreaming: PeerTube, Owncast
- Eventplaning: Mobilizon
- Beteiligung: Consul Democracy
- Community Management / Social Intranet: Discourse
- (Privacyfriendly) Webanalyse: Matomo
- Collaboratives Text schreiben: HedgeDoc
Applikations- und Terminalserver: Apache Guacamole™
- Administrationswerkzeug Webhosting: Froxlor
- Audio- und Videostreaming: Jellyfin

#FediLZ #FLOSS #FOSS #NachhaltigeITInfrastruktur #NachhaltigeDigitalisierung #OpenSource #WordPress #Hugo #CiviCRM #pretix #pretalx #Engelsystem #owncloud #nextcloud #OpenProject #Keycloak #Matrix #Element #XMPP #NextcloudTalk #JitsiMeet #BigBlueButton #OpenTalk #Mailman3 #Zammad #Moodle #Kimai #Debian #Betriebssystem #Website #Mitgliederverwaltung #Veranstaltungsmanagement #Cloudspeicher #Projektmanagement #Authentifizierung #Messenger #Videokonferenzsystem #Mailingliste #Ticketsystem #Lernmanagementsystem #Personaleinsatzplanung
#Microblogging #Mastodon #Foto #Pixelfed #Video #PeerTube #Livestreaming #PeerTube #Owncast
#Eventplaning #Mobilizon #Guacamole #ApacheGuacamole #Citrix #Froxlor #Plesk #Jellyfin #Spotify #Netflix #AmazonPrime #DVD #BlueRay

Was playing around with #ApacheGuacamole this evening. Nice product. I did have trouble with two things:

1. SSH keys. Didn’t get it working. Saw that Guacamole doesn’t support ed25519, but couldn’t get legacy keys working either

2. Ubuntu VNC worked reasonably well. But as soon as the client locked the screen, VNC stopped working. A bug, it seems. Found a command to wake it up via SSH. Regarding this workaround, see no. 1 above

Next I’ll try out RDP on to both Linux and Windows VMs. Maybe Linux RDP will be better than VNC.

Plan is to set up an OpenVPN (certificate and pass phrase) to Guacamole (pass phrase and TOTP) in DMZ vlan which has FW allow rules to specific hosts and ports in other vlans … all of which I only enable if I am traveling.