Install Guacamole on Docker with Traefik, Postgres and 2FA

Remotely accessing an SSH terminal or graphics session with VNC/RDP can be very useful. Particularly if you have a lot of devices and if you regularly change your workstation. Guacamole is one of the open source solutions on the market. Unfortunately there is not a single docker container to install and it’s not easy to find a complete guide for installation from start to finish.

Below I’ve created a small guide to install Guacamole with a postgres database for user management and integration with Traefik to have an https connection.

Wake-on-LAN from Guacamole in docker

The Guacamole service allows a “Wake on LAN” (WOL) packet to be launched before connecting to the machine with VNC or RDP. Unfortunately, by Docker’s default setting, networks configured as bridge do not allow broadcast packets (even if directed to a specific subnet) to be sent out. This prevents the use of WOL and Guacamole. There remains the option of configuring the guacd container on the host network, but this solution has security issues.

Install Guacamole on Docker with Traefik and 2FA