mirror of
https://github.com/Termix-SSH/Termix.git
synced 2026-08-25 07:26:52 +00:00
ZacharyZcR
32d77fc6d0
* feat: Step CA SSH certificates as a host authentication type Issue short-lived SSH user certificates from a smallstep CA through its OIDC provisioner, over the CA's HTTP API rather than the step binary. Everything after issuance reuses the OPKSSH plumbing: the same encrypted per-user/host token store, WebSocket dialog and ssh2 certificate injection, with the connect paths branching on a shared usesIssuedCertificate() predicate. Instance-wide CA settings live in the admin panel, with a private-host allowlist for the SSRF guard. * fix: harden Step CA callback flow * style: format Step CA changes
43 lines
976 B
YAML
43 lines
976 B
YAML
services:
|
|
termix-dev:
|
|
build:
|
|
context: ..
|
|
dockerfile: docker/Dockerfile
|
|
container_name: termix-dev
|
|
restart: unless-stopped
|
|
ports:
|
|
- "8081:8080"
|
|
volumes:
|
|
- termix-dev-data:/app/data
|
|
environment:
|
|
PORT: "8080"
|
|
NODE_ENV: development
|
|
GUACD_HOST: "guacd-dev"
|
|
GUACD_TUNNEL_HOST: "termix-dev"
|
|
GUACD_RECORDING_PATH: "/termix-data/session_recordings/guacamole"
|
|
GUACD_DRIVE_PATH: "/termix-data/rdp-drive"
|
|
# REDIS_URL: "redis://redis:6379"
|
|
# TERMIX_REDIS_PREFIX: "termix:collab"
|
|
# TERMIX_STEP_CA_REDIS_PREFIX: "termix:step-ca"
|
|
depends_on:
|
|
- guacd-dev
|
|
networks:
|
|
- termix-dev-net
|
|
|
|
guacd-dev:
|
|
image: guacamole/guacd:1.6.0
|
|
container_name: guacd-dev
|
|
restart: unless-stopped
|
|
volumes:
|
|
- termix-dev-data:/termix-data
|
|
networks:
|
|
- termix-dev-net
|
|
|
|
volumes:
|
|
termix-dev-data:
|
|
driver: local
|
|
|
|
networks:
|
|
termix-dev-net:
|
|
driver: bridge
|