mac-remote-access/docker-compose.yml at main · hochizo5940/mac-remote-access · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
version: "3.9"

# On-Demand Apache Guacamole Stack
# Architecture: Gatekeeper(:8889) → Guacamole(:8090) → VNC(localhost:5900)
# Platform: linux/amd64 (Colima emulation on Apple Silicon)

networks:
  guacamole_net:
    driver: bridge

services:

  # --------------------------------------------------------------------------
  # guacd: Guacamole proxy daemon (handles VNC/RDP/SSH protocols)
  # --------------------------------------------------------------------------
  guacd:
    image: guacamole/guacd:1.5.5
    platform: linux/amd64
    container_name: guacd
    restart: unless-stopped
    networks:
      - guacamole_net
    environment:
      GUACD_LOG_LEVEL: info
    security_opt:
      - no-new-privileges:true

  # --------------------------------------------------------------------------
  # guacamole: Web application front-end
  # --------------------------------------------------------------------------
  guacamole:
    image: guacamole/guacamole:1.5.5
    platform: linux/amd64
    container_name: guacamole
    restart: unless-stopped
    depends_on:
      - guacd
      - postgres
    networks:
      - guacamole_net
    ports:
      - "127.0.0.1:8090:8080"
    environment:
      GUACD_HOSTNAME: guacd
      GUACD_PORT: 4822
      POSTGRES_HOSTNAME: postgres
      POSTGRES_PORT: 5432
      POSTGRES_DATABASE: guacamole_db
      POSTGRES_USER: guacamole_user
      POSTGRES_PASSWORD: guacamole_pass
      POSTGRESQL_AUTO_CREATE_ACCOUNTS: "false"
      # TOTP extension
      TOTP_ENABLED: "true"
    security_opt:
      - no-new-privileges:true

  # --------------------------------------------------------------------------
  # postgres: Backend database for Guacamole
  # --------------------------------------------------------------------------
  postgres:
    image: postgres:16-alpine
    platform: linux/amd64
    container_name: guacamole_postgres
    restart: unless-stopped
    networks:
      - guacamole_net
    environment:
      POSTGRES_DB: guacamole_db
      POSTGRES_USER: guacamole_user
      POSTGRES_PASSWORD: guacamole_pass
      PGDATA: /var/lib/postgresql/data/pgdata
    volumes:
      - ./data/postgres:/var/lib/postgresql/data
      - ./init/initdb.sql:/docker-entrypoint-initdb.d/01-initdb.sql:ro
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U guacamole_user -d guacamole_db"]
      interval: 10s
      timeout: 5s
      retries: 5