From dd8ffa2b96d7b7119c877087840be199cc57d560 Mon Sep 17 00:00:00 2001 From: Eben van Deventer Date: Mon, 14 Feb 2022 16:08:36 +0200 Subject: [PATCH] Include Post Installation Notes (#214) Hi, great work, I have, like many other people, if my Google searches were any indication, found issues with normal reverse proxying. Obviously moving Apache Guacamole behind a public facing reverse proxy, while not absolutely necessary, is best practice. For this reason, I was having huge performance issues behind a vanilla RP on NginX until I read the Apache Quac documentation, noting the headers and buffering (Especially under NginX). This solved the issue for me and I thought might assist users of your script as well. --- README.md | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/README.md b/README.md index cf762d9..672873d 100644 --- a/README.md +++ b/README.md @@ -141,3 +141,28 @@ Interactive (asks for passwords): Non-Interactive (MySQL root password provided via cli): `./guac-upgrade.sh --mysqlpwd password` + +## Post Installation - Reverse Proxies + +Make sure that you configure your reverse proxy (NGinx or Apache) as per the [Official Documentation](https://guacamole.apache.org/doc/0.9.7/gug/proxying-guacamole.html) + +For Nginx: + +location /guacamole/ { + proxy_pass http://HOSTNAME:8080/guacamole/; + proxy_buffering off; + proxy_http_version 1.1; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $http_connection; + access_log off; +} + +For Apache: + + + Order allow,deny + Allow from all + ProxyPass http://HOSTNAME:8080/guacamole/ flushpackets=on + ProxyPassReverse http://HOSTNAME:8080/guacamole/ +