Yes definitely, I would never have been running unraid and spent thousands of dollars on server equipment if Spaceinvader didn't make these kinds of videos
A note to anyone trying to get this working through a reverse proxy. If you are receiving a 502 Bad Gateway message, double-check settings -> Docker -> "Host access to custom networks" is set to Enabled.
For those who have followed Spaceinvader's past videos on Swag, you can't set your own IP address like he does in this video. When editing ApacheGuacamole, you need to set network type to a custom network that you created in his past video and leave Fixed IP Address empty. When you edit the guacamole.subdomain.conf, the server name is a subdomain you need to create on duck dns and replace set $upstream_app guacamole; with set $upstream_app ApacheGuacamole; Restart Swag and ApacheGuacamole. Open a new google tab and type (your subdomain).duckdns.org
Yep, you can... Although I did have the same issues you probably had... (502 Bad Gateway) when I was setting my own IP address to Guacamole instead placing it on the "custom network "(Proxynet).. But just had to go to the Unraid Settings... Docker Settings, and set the option "Host access to custom networks" to Enable. Now the static IP under "br0" works for me as it does in the video.
if an IP address is assigned to a docker, it has no communication with the host whether or not they are on the same subnet. This is by design with Docker. You can see in the video he is not following his own instructions, he is using bridge not br0 for the docker, you can see the host ip changes from 192.168.1.167:8080 to 192.168.1.3:9191 at 16:59 min mark video, this is the only reason he is able to ssh to the unraid host
@@planetwilson Yea I figured this as well but it will not work if you want to use guacamole to actually remote to your physical machines on your network. The only way I actually got this to work was to use bridge. The problem with bridge was that WOL does not work with that.. So it is kind of a mess really
@@AquaRelliux my guacamole is on proxynet, and vm is on br0, is there a way to get WOL working? It works when guacamole is in br0, but cant access it through reverse proxy then
I’ve always been curious about guacamole and it’s use cases, thank you for the great explanation! Lately I’ve been trying to get matrix/element running on unraid but haven’t had much luck. Would love a video on that if you ever get the chance!
I recommend you show the community how to setup and use Tailscale as a FAR more secure way then reverse proxy to access their Unraid server. Imagine Wireguard, but an automatic P2P connection between each device, allowing you from any of your devices, anywhere, to connect to any of your other devices. No port forwarding!
Extra layer of security/obscurity: change RDP port on each windows machine to a different port using regedit (or by other means). make sure to reflect the port change in guac.
2023 Update: Wake on Lan does not seem to work in Bridge Mode, but my Br0 does not allow Guac to work at all. More importantly Wake on Lan App requires Python2 installed so I just installed it from the apps page. Hopefully they allow Python3 asap.
Thank you for this. Can you include Index markers on your future videos please? You mention how your video has a bar at the top during the whole thing, denoting the current section of the video, which is great, but youtube has built in indexing you can add to the timeline so you can easily see all sections and jump through to the part you want without having to scrub through the video. Go look at any of the newer Gamers Nexus youtube videos and you can see how they use the indexing feature on youtube to mark the sections of the video.
Great video. Can you do a Swag setup guide video please so I can then do the part 24 of this video. Nextcloud is on the list too, but I spot that yours is under a proxy net like Swag. So I need to do a bit more research. 👍
RDP is working fine. VNC and SSH timeout. I'm running RealVNC with VNC password, so no funky RealVNC specific stuff going on. And the SSH is into the unRAID server as Spaceinvader did, but no luck for me. I've gone back and made sure I followed his instructions. Not sure what's wrong. :-/
thank you sir for this video ...i just got kicked out of AnyDesk and i also got kicked form Teamviewer before that they think i am using them professionally when i am really not...so discovering this came just in time ...again thank you
Since there will be an influx of people interested in RDPWrapper after this video, there have been some issues recently. The project isn't well maintained and a recent update somewhat broke it. In the pull requests there is a guy that updated it though so it now works no problem.
At 29:25 using the Glyptodon Player, when I try to open the file in the browser window, I get: "You don't have permission to open this file. Contact the file owner or an administrator...". Does anyone know the setting to fix this? Thanks Spaceinvader One for all of your tutorials!
@@blairchristopher3073 For most things it's not that difficult (took me a rainy afternoon and I do lots of stupid things). I'll see if I can knock something together.
As usual, the right balance between learning with all the explanations, and following instructions for newbies like me to get immediate results. Thank you sio and thank you to people making these containers etc
Thanks, very helpful, but i have one question: i'm using NginxProxyManager as my reverse proxy, and when i'm adding the ApacheGuacamole to the hosts i still getting 502 Bad Gateway.
I got this too but fixed it by changing the Network Type to ProxyNet and removed the Fixed I/P address. Pointed nginx at the I/P address of UNRAID server and port you changed it to (from 8080). This is really cool. Thanks SpaceInvader!
nice video.i can see some uses for this. i would really like to see a video about setting authelia up with swag (preferably not with DUO) to be able to secure any site you reverse proxy that dont have totp. thanks again for your videos, they have helped me alot :)
great video. one thing. how are you ensuring nobody is trying to hack into the server by brute force? this would be really useful, and I'm too incompetent to maange to trigger a fail2ban even based on the logs from guacamole.
I can't get mine to work actually. My problem is that I need to use the proxynet to connect to unraid. If I try to put the container on it's own IP like you did in the video I can't connect to unraid. Why is it like this?
Hey Ed, Thanks for the video. everything works like a charm except setting up the reserve proxy; I got an error of "This site can’t be reached". I have no idea what went wrong.
Hey mate, I've been using apache guac pretty reliability for a few years now. Here's another use case: TeamViewer has been restricting my account claiming commercial uses, therefore I can only connect for a few minutes before it disconnects. I've been using apache guac tunneled through an unraid zerotier Network docker to grant RDP access to all local and remote machines. I can now use apache guac web ui to control 5 devices on any network given they are part of the zerotier Network. As a side note, you need to disable NLA to connect via RDP without a password. This would be helpful to a bunch of people having trouble with TeamViewer.
Funny how in the beginning of the video he leaves the default port 8080 but later in the video it's now 9191 and I can't get the docker to change from 8080. Yet seems it should be a simple setting.
Not sure why I cannot connect to unraid by SSH. I know my IP and the password and I am able to login ok via ssh from another client. I get: "The remote desktop server is currently unreachable. If the problem persists, please notify your system administrator, or check your system logs." Guacamole logs are well.. not verbose for me to find out what gives. Any ideas?
Mine was working great for ages but now whenever I try to connect to my Apache guac server I just get the message error contact your system admin, it is of course in the same format as the webui. All my other dockers are working great. Webuis and all.
An internal error has occurred within the Guacamole server, and the connection has been terminated. If the problem persists, please notify your system administrator, or check your system logs. error I get while doing SSH from this, and the logs show nothing.
My GOD Ed.. you are amazing... just tested it with my company´s notebook and worked right away... amazing job... One question: using RDP I can´t make skype or teams calls with guacamole right ? is there any trick to "passthrough" the audio and mic ?
Go down to the device redirection part of the settings (as seen at 12:44) and enable the 2 audio options (checkbox 1 & 3). I do pretty much the same thing your trying to do, but using a native RDP session and I regularly use teams etc.
@@tjb_altf4 Tks Tristran ! I saw, and tried, but the audio comes from the laptop and not the Headphones of the connected PC... is there any additional config I need to do?
you probably need to change the default audio device in windows settings, and restart the app you are using for it to take, or manually set the correct audio devices within that app.
Thank you so much for what you do, I wouldn't have gotten anywhere without your wonderful guides. I do have a question, and maybe this cant be done, but i am using Nginx Proxy manager, NPM is set up on my own custom network (proxy1). However when using the br0 network for guacamole, i can not access it thru the internet. I have resorted to putting it on proxy1 and just making sure i leave the VM i want to connect started. If anyone has advice on how to route a reverse proxy to another ip on the network please let me know.
the only 2 issues I've observed: - it took me about 5 re-tries to get that hotkeys are ctrl+shift+ALT - didn't manage to setup ssh to Unraid itself, it just hangs (works perfectly fine for all other ssh enabled devices though) p.s. in case someone else hit the barrier with issue#2 - check your settings in Docker ->"Host access to custom networks: Enabled" I would never guess about it without extensive searching around
Can you do a video on setup and configuring swag? I know you have one about migrating from letsencrpyt but a fresh setup video would be so helpful! You're video have helped me so much, thank you.
Hi, for me it all works bit only on the local network. I can access with the reverse proxy but it wont connect to the client. If I use von or im in the local network. It works
If anyone else is have issues with getting SSH to Unraid working with "SSL Handshake Failed" , my solution was to use abesnier/guacamole container. It looks like the jasonbean/guacamole container was using a weak cipher.
I couldn t connect to Pop!_Os with Guacamole, becouse coundn't login to the first screen of the linux system. I had to login first to Pop!_Os with the unraid WebGUI ,then Guacamole vnc connection finally worked. At the end..... I had installed rdc connection to Pop!_Os and configured :)
I had this previously setup and working with SWAG, changed it following your video with the custom: br0 and an IP address. Changed the SWAG config, I keep getting the 502. If I changed it back to using proxynet and the config to the port I chose and unraid server IP, it works just fine... what am I missing?
@@stefan2030 I think the solution is to go into Settings, Docker, set it to not use docker to stop it. Turn on Advanced View in the upper right corner, find "Host access to custom networks". Enable that. Then it should work. I haven't come across any issues with other dockers or anything enabling that but that seems to be the fix.
I've got the exact same problem. RDP and VNC work fine but not SSH to Unraid although works from Mac terminal - SSL-Keys issue?. -- But nevertheless HUGE shoutout to Spaceinvader, you're a legend! EDIT: I can connect, if I set the ApacheGuacamole container to 'proxynet'
if an IP address is assigned to a docker, it has no communication with the host whether or not they are on the same subnet. This is by design with Docker. You can see in the video he is not following his own instructions, he is using bridge not br0 for the docker, you can see the host ip changes from 192.168.1.167:8080 to 192.168.1.3:9191 at 16:59 min mark video, this is the only reason he is able to ssh to the unraid host
Thank you. At 14:24 you proceeded to add multiple connections to your user, even though maximum connections per user was set to 1 in your initial config. So, during the transition, did you change that number to allow that many connections under your user?
hmm noticed in the logs when the container starts it starts a mariadb... i'm already running a mariadb for the nextcloud container... can i add guac to use that instead?
This looks great, Any chance of a video detailing how to set up SWAG for all web facing services with sub domains? - Home assistant, Emby, Guacamole etc with PF sense nat reflection so everything works as expected from inside the Lan. Also can certificates / https be used for Lan only services to remove the "this website is unsecure" messages from things like pfsense / unraid ui. i guess a front end for the the whole lot could still be created using Heimdall or organizr I am currently using a homeassistant vm, which has an addon (docker based) letsencrypt/DuckDNS that works great for external access but would like to access more services remotely. by using subdomains. I am also slightly unsure of the security implications from having lots of services available on the web and wonder if i would be better off accessing the whole lot via a VPN such as wireguard.
Hello, I just finished setting this all up and I can get the two factor authentication to work when launching the WebGUI through unraid apps, but when I have the reverse proxy on and try to use 2FA it asks for the code but there is no text box to enter it in, and no QR code or anything, it just says "failed to verify". Does anyone know a way around this?
Thank you very much!! You're the best!! 👊🏻 Are you able to remote into the PopOs VM after the first boot? For me, when I first start the VM , it doesn't allow me to remote into it through the PopOS VNC server. It's seems the OS VNC server just starts up after the first login. Is it the same for you? How can I change that behavior?
i can't connect ssh to my unraid server. my guacamole is in a custom network. other containers in this network can ping my unraid's ip. Any ideas? Is maybe the br0 custom Network an ipvlan or macvlan? Or what should I create?
I don't see how I connect to a PC (win or Linux) sitting behind a firewall - like my work PC ..... without being able to set a port forwarding, are there any chance of doing that with Guacamole ? And preferable from anywhere like it is possible with TeamViewer
just to circle back to this.. setup fail2ban from within SWAG, pointed to /mnt/user/appdata/ApacheGuacamole/logs/tomcat9/ as the host path and the container path as /guacamole, then edited the jail to add and enable guacamole with the log path to /guacamole/catalina.out,IP tables and maxretry, and then you just have to more the first part of the failregex and keep everything after "Authentication". Restart swag. done. Another layer to it. :)
Took me several days of trying different settings to get the RDP to work from GUAC, came back and pickup for SSH, which against doesnt work from GUAC. Putty can SSH all day, but GUAC can't. I am really starting to doubt the utility of this app.
The remote access functionality is pretty cool, but the file sharing keeps corrupting my file system. I'd be very careful about using that because it doesn't seem compatible with Unraid.
I'm unable to connect to pfsense or freepbx with guacamole via ssh. Both are setup to require keypairs instead of passwords. I used puttygen to export my key in openssh (force new file format) and I included both the key and passphrase in the fields but it refuses to connect. Also, does anyone have a solution for Dell Powerconnect switches that require you to enter the username twice in addition to the password?
Hi Spaceinvader - do you need to have the docker setting "Host access to custom networks: " enabled to add ssh into unRAID on your guac connection? I can't seem to connect to the unRAID ssh connection I added around 19:13 but followed the same steps as you. Did you have that setting enabled?
I have found out that we should forget about using the br0 network and use either proxynet (if you are going to add it as cname and set it up as a subdomain/subfolder) or just bridge for ssh to work.
Hello, I did everything you did in the video to make a connection to windows by RDP but it won't let me connect. I get the error message "The connection was closed because the server took a long time to respond." I hope you can help me
if an IP address is assigned to a docker, it has no communication with the host whether or not they are on the same subnet. This is by design with Docker. You can see in the video he is not following his own instructions, he is using bridge not br0 for the docker, you can see the host ip changes from 192.168.1.167:8080 to 192.168.1.3:9191 at 16:59 min mark video, this is the only reason he is able to ssh to the unraid host
You must enable host access to custom network from Settings -> Docker -> Turn off docker -> Enable host access to custom networks -> Start Docker. That was it for me.
Most people, including myself, wouldn’t know the potential of unraid without these videos. Thank you.
Indeed
Agree
yeah, if Limetech doesn't pay you they should be :)
Agreed !
Yes definitely, I would never have been running unraid and spent thousands of dollars on server equipment if Spaceinvader didn't make these kinds of videos
A note to anyone trying to get this working through a reverse proxy. If you are receiving a 502 Bad Gateway message, double-check settings -> Docker -> "Host access to custom networks" is set to Enabled.
saved me there, thanks mate
Thank you! This was the magic I needed to get things working.
For those who have followed Spaceinvader's past videos on Swag, you can't set your own IP address like he does in this video. When editing ApacheGuacamole, you need to set network type to a custom network that you created in his past video and leave Fixed IP Address empty. When you edit the guacamole.subdomain.conf, the server name is a subdomain you need to create on duck dns and replace set $upstream_app guacamole; with set $upstream_app ApacheGuacamole; Restart Swag and ApacheGuacamole. Open a new google tab and type (your subdomain).duckdns.org
Yep, you can... Although I did have the same issues you probably had... (502 Bad Gateway) when I was setting my own IP address to Guacamole instead placing it on the "custom network "(Proxynet)..
But just had to go to the Unraid Settings... Docker Settings, and set the option "Host access to custom networks" to Enable.
Now the static IP under "br0" works for me as it does in the video.
thanks for this comment! i finally got it to work
if an IP address is assigned to a docker, it has no communication with the host whether or not they are on the same subnet. This is by design with Docker.
You can see in the video he is not following his own instructions, he is using bridge not br0 for the docker, you can see the host ip changes from 192.168.1.167:8080 to 192.168.1.3:9191 at 16:59 min mark video, this is the only reason he is able to ssh to the unraid host
I am assuming he set the option in Docker settings to allow host access to custom networks to true?
@@planetwilson Yea I figured this as well but it will not work if you want to use guacamole to actually remote to your physical machines on your network. The only way I actually got this to work was to use bridge. The problem with bridge was that WOL does not work with that.. So it is kind of a mess really
Ah, good eye! I was wondering why I couldn't SSH to unRAID. Man, Spaceinvader is being sneaky with that one! :-D
@@AquaRelliux my guacamole is on proxynet, and vm is on br0, is there a way to get WOL working? It works when guacamole is in br0, but cant access it through reverse proxy then
4:10 You could also use the youtube thing that lets you tag the segments of the video in the progress bar, its much faster to search
Oh my God Spaceinvader dropped a video 🤭🤭🤭
I’ve always been curious about guacamole and it’s use cases, thank you for the great explanation! Lately I’ve been trying to get matrix/element running on unraid but haven’t had much luck. Would love a video on that if you ever get the chance!
Yeh I'm struggling with matrix element as well. The existing guides are no good, needs a space invader video....
I recommend you show the community how to setup and use Tailscale as a FAR more secure way then reverse proxy to access their Unraid server.
Imagine Wireguard, but an automatic P2P connection between each device, allowing you from any of your devices, anywhere, to connect to any of your other devices. No port forwarding!
Yeah, I'd like this vs having to setup a reverse proxy. I'm fine with VPN but a reverse proxy makes me nervous :(
Will it also work if I only have an IPv6 and no personal IPv4?
Extra layer of security/obscurity: change RDP port on each windows machine to a different port using regedit (or by other means).
make sure to reflect the port change in guac.
Thanks for the video!! Love Apache Guac!
2023 Update: Wake on Lan does not seem to work in Bridge Mode, but my Br0 does not allow Guac to work at all.
More importantly Wake on Lan App requires Python2 installed so I just installed it from the apps page. Hopefully they allow Python3 asap.
Thank you for this. Can you include Index markers on your future videos please?
You mention how your video has a bar at the top during the whole thing, denoting the current section of the video, which is great, but youtube has built in indexing you can add to the timeline so you can easily see all sections and jump through to the part you want without having to scrub through the video. Go look at any of the newer Gamers Nexus youtube videos and you can see how they use the indexing feature on youtube to mark the sections of the video.
Thanks Mike! I appreciate how you plug any gaps in your guide content with precision and clarity. This docker runs like a dream!
I was just looking for a solution to be able to access my computer's from work. Thank you Spaceinvader .
This was an excellent video. I didn't realise how powerful guacamole is.
Awesome as always. Could I ask for timestamps on the video at some point as this would help.
Great video. Can you do a Swag setup guide video please so I can then do the part 24 of this video.
Nextcloud is on the list too, but I spot that yours is under a proxy net like Swag. So I need to do a bit more research. 👍
Check this one. ua-cam.com/video/I0lhZc25Sro/v-deo.html LetsEncrypt was renamed to Swag
RDP is working fine. VNC and SSH timeout. I'm running RealVNC with VNC password, so no funky RealVNC specific stuff going on. And the SSH is into the unRAID server as Spaceinvader did, but no luck for me. I've gone back and made sure I followed his instructions. Not sure what's wrong. :-/
thank you sir for this video ...i just got kicked out of AnyDesk and i also got kicked form Teamviewer before that they think i am using them professionally when i am really not...so discovering this came just in time ...again thank you
Since there will be an influx of people interested in RDPWrapper after this video, there have been some issues recently.
The project isn't well maintained and a recent update somewhat broke it.
In the pull requests there is a guy that updated it though so it now works no problem.
Holy guacamole. This came in just in time. I was looking for a way to ditch teamviewer.
Really appreciate all the work you put into making these videos. Can't express how much they've helped. Thank you.
Hey Ed. Was wondering what 2FA app you recommend. Keep up the great work man!
Google Auth does the job for me.
At 29:25 using the Glyptodon Player, when I try to open the file in the browser window, I get: "You don't have permission to open this file. Contact the file owner or an administrator...". Does anyone know the setting to fix this?
Thanks Spaceinvader One for all of your tutorials!
I'm curious why you still use swag/letsencrypt and not the new, GUI-based Nginx Proxy Manager for your reverse proxy.
I use Nginx Proxy Manager and have the same question. However, I wouldn't call it new - according to my appdata folder, I installed it in August 2019.
Anyone have a great guide on setting up Nginx Proxy Manager (while we wait for Ed to make one)?
@@blairchristopher3073 For most things it's not that difficult (took me a rainy afternoon and I do lots of stupid things). I'll see if I can knock something together.
As usual, the right balance between learning with all the explanations, and following instructions for newbies like me to get immediate results. Thank you sio and thank you to people making these containers etc
Thanks, very helpful, but i have one question: i'm using NginxProxyManager as my reverse proxy, and when i'm adding the ApacheGuacamole to the hosts i still getting 502 Bad Gateway.
Same, I would love to see him do a vid with NginxProxyManager just to learn how to use it correctly or better. :)
I have the exact same problem :( I am using DuckDNS and the other subdomains are working
@@stefan2030 in the same boat, but with SWAG. seems something is missing
I got this too but fixed it by changing the Network Type to ProxyNet and removed the Fixed I/P address. Pointed nginx at the I/P address of UNRAID server and port you changed it to (from 8080). This is really cool. Thanks SpaceInvader!
@@johnfermor Thanks John, this worked like a champ!
nice video.i can see some uses for this.
i would really like to see a video about setting authelia up with swag (preferably not with DUO) to be able to secure any site you reverse proxy that dont have totp. thanks again for your videos, they have helped me alot :)
Great video Ed. Going to use this docker. Really useful.
Love the new intro. Nice & short, just what this channel needed!
great video. one thing. how are you ensuring nobody is trying to hack into the server by brute force? this would be really useful, and I'm too incompetent to maange to trigger a fail2ban even based on the logs from guacamole.
Thanks SpaceInvader One! I love your videos. I've learned how to do so many cool things with my unraid server
I can't get mine to work actually. My problem is that I need to use the proxynet to connect to unraid. If I try to put the container on it's own IP like you did in the video I can't connect to unraid. Why is it like this?
same problem here
Hey Ed, Thanks for the video. everything works like a charm except setting up the reserve proxy; I got an error of "This site can’t be reached". I have no idea what went wrong.
This is just amazing. Thx a bunch for making these videos; just superb quality!
Dude, you are frikin awesome!
Hey mate, I've been using apache guac pretty reliability for a few years now. Here's another use case: TeamViewer has been restricting my account claiming commercial uses, therefore I can only connect for a few minutes before it disconnects. I've been using apache guac tunneled through an unraid zerotier Network docker to grant RDP access to all local and remote machines. I can now use apache guac web ui to control 5 devices on any network given they are part of the zerotier Network. As a side note, you need to disable NLA to connect via RDP without a password. This would be helpful to a bunch of people having trouble with TeamViewer.
Funny how in the beginning of the video he leaves the default port 8080 but later in the video it's now 9191 and I can't get the docker to change from 8080. Yet seems it should be a simple setting.
Another good video Ed! Thanks for always sharing with us!💖👌👍😎JP
A lot of thanks for this instructive tutorials.
Thanks do much for all the videos! Just built a unraid/gaming vm with your help. I'd love a video on how to self host a wordpress website
Is this sorcery? Man how awesome is that!! Thx mate!
Great Great video!
I could not connect to the VNC.
Do you have any idea?
Same issue here. Must need a very specific Server Version.
Not sure why I cannot connect to unraid by SSH. I know my IP and the password and I am able to login ok via ssh from another client. I get: "The remote desktop server is currently unreachable. If the problem persists, please notify your system administrator, or check your system logs." Guacamole logs are well.. not verbose for me to find out what gives. Any ideas?
Excellent, thanks for this vid, all set up and working, your explanations are great, keep it up :)
wow, what a great video, thank you for all your hard work ❤
Mine was working great for ages but now whenever I try to connect to my Apache guac server I just get the message error contact your system admin, it is of course in the same format as the webui. All my other dockers are working great. Webuis and all.
This is so clear. Would you consider making a video on reverse VNC and/or VNC repeater? :)
I had Nacho's for dinner after watching this video. Thanks for ruining my diet, spaceinvaderone :p
Love the new intro music!
An internal error has occurred within the Guacamole server, and the connection has been terminated. If the problem persists, please notify your system administrator, or check your system logs.
error I get while doing SSH from this, and the logs show nothing.
I can’t get the reverse proxy to work if I use a custom network
Wow. I just asked my tutor how to do this. Thanks
My GOD Ed.. you are amazing... just tested it with my company´s notebook and worked right away... amazing job... One question: using RDP I can´t make skype or teams calls with guacamole right ? is there any trick to "passthrough" the audio and mic ?
Go down to the device redirection part of the settings (as seen at 12:44) and enable the 2 audio options (checkbox 1 & 3).
I do pretty much the same thing your trying to do, but using a native RDP session and I regularly use teams etc.
@@tjb_altf4 Tks Tristran ! I saw, and tried, but the audio comes from the laptop and not the Headphones of the connected PC... is there any additional config I need to do?
you probably need to change the default audio device in windows settings, and restart the app you are using for it to take, or manually set the correct audio devices within that app.
@@tjb_altf4 Tks I´ll give it a try... = )
Thank you so much for what you do, I wouldn't have gotten anywhere without your wonderful guides. I do have a question, and maybe this cant be done, but i am using Nginx Proxy manager, NPM is set up on my own custom network (proxy1). However when using the br0 network for guacamole, i can not access it thru the internet. I have resorted to putting it on proxy1 and just making sure i leave the VM i want to connect started. If anyone has advice on how to route a reverse proxy to another ip on the network please let me know.
Thanks for the demo and info
Another great video, well done, very informative as per usual
Awesome video, thanks!
the only 2 issues I've observed:
- it took me about 5 re-tries to get that hotkeys are ctrl+shift+ALT
- didn't manage to setup ssh to Unraid itself, it just hangs (works perfectly fine for all other ssh enabled devices though)
p.s. in case someone else hit the barrier with issue#2 - check your settings in Docker ->"Host access to custom networks: Enabled" I would never guess about it without extensive searching around
Can you do a video on setup and configuring swag? I know you have one about migrating from letsencrpyt but a fresh setup video would be so helpful! You're video have helped me so much, thank you.
He did a months ago. Have a look at previous videos.
@@joelang6126 No, he has one setting up LetsEncrypt and another converting from that to Swag, but not one that just sets up Swag from scratch.
Hi, for me it all works bit only on the local network. I can access with the reverse proxy but it wont connect to the client. If I use von or im in the local network. It works
Spaceinvader sounds kinda like the guy from ExplainingComputers hahah
If anyone else is have issues with getting SSH to Unraid working with "SSL Handshake Failed" , my solution was to use abesnier/guacamole container. It looks like the jasonbean/guacamole container was using a weak cipher.
I couldn t connect to Pop!_Os with Guacamole, becouse coundn't login to the first screen of the linux system. I had to login first to Pop!_Os with the unraid WebGUI ,then Guacamole vnc connection finally worked. At the end..... I had installed rdc connection to Pop!_Os and configured :)
I had this previously setup and working with SWAG, changed it following your video with the custom: br0 and an IP address. Changed the SWAG config, I keep getting the 502. If I changed it back to using proxynet and the config to the port I chose and unraid server IP, it works just fine... what am I missing?
@Wolftron62 I have the same problem :(
@@stefan2030 I think the solution is to go into Settings, Docker, set it to not use docker to stop it. Turn on Advanced View in the upper right corner, find "Host access to custom networks". Enable that. Then it should work. I haven't come across any issues with other dockers or anything enabling that but that seems to be the fix.
@@wolftron6254 I had the same problem till I discovered this setting. Works perfectly now.
@@wolftron6254 I also had this problem. Thanks for posting this!
thanks for help! :-)
The SSH to my unraid server doesn't connect. Says remote desktop server is currently unreachable, but I can ssh to it fine from my Mac.... any tips?
I've got the exact same problem. RDP and VNC work fine but not SSH to Unraid although works from Mac terminal - SSL-Keys issue?. -- But nevertheless HUGE shoutout to Spaceinvader, you're a legend!
EDIT: I can connect, if I set the ApacheGuacamole container to 'proxynet'
if an IP address is assigned to a docker, it has no communication with the host whether or not they are on the same subnet. This is by design with Docker.
You can see in the video he is not following his own instructions, he is using bridge not br0 for the docker, you can see the host ip changes from 192.168.1.167:8080 to 192.168.1.3:9191 at 16:59 min mark video, this is the only reason he is able to ssh to the unraid host
@@JH-tu2tc Thank you sooo much for this, this makes sense
Great video.. Superb!
Thank you. At 14:24 you proceeded to add multiple connections to your user, even though maximum connections per user was set to 1 in your initial config. So, during the transition, did you change that number to allow that many connections under your user?
hmm noticed in the logs when the container starts it starts a mariadb... i'm already running a mariadb for the nextcloud container... can i add guac to use that instead?
Now I'm hungry for guac.
Really appreciate but one thing how to create multiple (bulk) connection and user in guacamole, please help.!!
This looks great, Any chance of a video detailing how to set up SWAG for all web facing services with sub domains? - Home assistant, Emby, Guacamole etc with PF sense nat reflection so everything works as expected from inside the Lan. Also can certificates / https be used for Lan only services to remove the "this website is unsecure" messages from things like pfsense / unraid ui. i guess a front end for the the whole lot could still be created using Heimdall or organizr
I am currently using a homeassistant vm, which has an addon (docker based) letsencrypt/DuckDNS that works great for external access but would like to access more services remotely. by using subdomains. I am also slightly unsure of the security implications from having lots of services available on the web and wonder if i would be better off accessing the whole lot via a VPN such as wireguard.
Hello, I just finished setting this all up and I can get the two factor authentication to work when launching the WebGUI through unraid apps, but when I have the reverse proxy on and try to use 2FA it asks for the code but there is no text box to enter it in, and no QR code or anything, it just says "failed to verify". Does anyone know a way around this?
Does anyone know where I can get the docker-compose file for jasonbean/guacamole isntead of using Unraid's community appstore?
good tutorial, but what do I do if I use NGINX proxy manager?
I've sliced this up a few ways not and I still keep getting a "502 Bad Gateway" error when trying to proxy thru SWAG. Any help would be appreciated,
Was getting that with this and other apps using swag, so I switched to Nginx Proxy Manager and it works great!
Thank you very much!! You're the best!! 👊🏻
Are you able to remote into the PopOs VM after the first boot?
For me, when I first start the VM , it doesn't allow me to remote into it through the PopOS VNC server. It's seems the OS VNC server just starts up after the first login. Is it the same for you?
How can I change that behavior?
i can't connect ssh to my unraid server. my guacamole is in a custom network. other containers in this network can ping my unraid's ip. Any ideas?
Is maybe the br0 custom Network an ipvlan or macvlan? Or what should I create?
I don't see how I connect to a PC (win or Linux) sitting behind a firewall - like my work PC ..... without being able to set a port forwarding, are there any chance of doing that with Guacamole ?
And preferable from anywhere like it is possible with TeamViewer
Can you make a WireGuard tutorial in combination with a UNRAID server? I can't seem to configure this setup...
Seems amazingly convenient and a potential security nightmare!
I would like to know more about its potential security flaws as well
How so?
If you protect it with a strong password and 2FA it should be secured enough. Plus, I'm sure you could enable fail2ban too from within SWAG.
just to circle back to this.. setup fail2ban from within SWAG, pointed to /mnt/user/appdata/ApacheGuacamole/logs/tomcat9/ as the host path and the container path as /guacamole, then edited the jail to add and enable guacamole with the log path to /guacamole/catalina.out,IP tables and maxretry, and then you just have to more the first part of the failregex and keep everything after "Authentication". Restart swag. done. Another layer to it. :)
"...but whatever you are up to for the rest of the day..." Well apparently doing this to my server...
Thanks
Not sure why, but WOL was working when I initially set this up, but now it won't bring up my Windows VMs or full machines.... any ideas?
For my wake on lan it keeps saying I need the NERD PACK yet that is no place in the video and that says it is intended for adv users.
Took me several days of trying different settings to get the RDP to work from GUAC, came back and pickup for SSH, which against doesnt work from GUAC. Putty can SSH all day, but GUAC can't. I am really starting to doubt the utility of this app.
Hi is there a way to make a PHYSICAL keyboard work inside a Windows 10 RDP within a Guacamole ?
The remote access functionality is pretty cool, but the file sharing keeps corrupting my file system. I'd be very careful about using that because it doesn't seem compatible with Unraid.
Hey @SpaceinvaderOne any plans to do a video on Unbound and Pi Hole on Unraid
I'm unable to connect to pfsense or freepbx with guacamole via ssh. Both are setup to require keypairs instead of passwords. I used puttygen to export my key in openssh (force new file format) and I included both the key and passphrase in the fields but it refuses to connect.
Also, does anyone have a solution for Dell Powerconnect switches that require you to enter the username twice in addition to the password?
Hi Spaceinvader - do you need to have the docker setting "Host access to custom networks:
" enabled to add ssh into unRAID on your guac connection? I can't seem to connect to the unRAID ssh connection I added around 19:13 but followed the same steps as you. Did you have that setting enabled?
I have found out that we should forget about using the br0 network and use either proxynet (if you are going to add it as cname and set it up as a subdomain/subfolder) or just bridge for ssh to work.
Hello, I did everything you did in the video to make a connection to windows by RDP but it won't let me connect. I get the error message "The connection was closed because the server took a long time to respond." I hope you can help me
How would one add Guacamole with CGNAT?
Can you please confirm i can connect to the system where Gaucamole is installed? Or is it only to connect to other devices?
can I have 2FA only from external connections not from internal ones ?
Can you remote into say the unraid dashboard via rdp or vnc? I plan to setup reverse proxy for this, just in case I need to restart docker containers
thanks but how can I turn on my VM with my guacamole?
Any idea why my unRAID ssh does not work but I can ssh into other VMs?
if an IP address is assigned to a docker, it has no communication with the host whether or not they are on the same subnet. This is by design with Docker.
You can see in the video he is not following his own instructions, he is using bridge not br0 for the docker, you can see the host ip changes from 192.168.1.167:8080 to 192.168.1.3:9191 at 16:59 min mark video, this is the only reason he is able to ssh to the unraid host
You must enable host access to custom network from Settings -> Docker -> Turn off docker -> Enable host access to custom networks -> Start Docker. That was it for me.
Can you just setup LetsEncrypt at the router lever with pfsense and not have to install Swag as a docker?
So can you make a video on how to game from a laptop without a dedicated gpu offsite from unraid vm with hardware pass-through or will this even work
plz make video on how to install and setup swag in unraid
He already has. Look at the let's encrypt video. Same instructions apply.