Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

docs.linuxserver.io

Post reply on HN
Print view View original

21–30 of 81 posts

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#21

Post by Melomomololo »

satertek wrote: post #3
chrisweekly wrote: post #2

> "Warning Do not put this on the Internet if you do not know what you are doing. By default this container has no authentication and the optional environment variables CUSTOM_USER and PASSWORD to enable basic http auth via the embedded NGINX server should only be used to locally secure the container from unwanted access on a local network. If exposing this to the Internet we recommend putting it behind a reverse pro…

That warning applies to anything you run locally. And going further, in this day and age, I would never put up any home service without it being behind Cloudflare Access or some form of wireguard tunnel.

[dead]

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#22

Post by Timber-6539 »

satertek wrote: post #3
chrisweekly wrote: post #2

> "Warning Do not put this on the Internet if you do not know what you are doing. By default this container has no authentication and the optional environment variables CUSTOM_USER and PASSWORD to enable basic http auth via the embedded NGINX server should only be used to locally secure the container from unwanted access on a local network. If exposing this to the Internet we recommend putting it behind a reverse pro…

That warning applies to anything you run locally. And going further, in this day and age, I would never put up any home service without it being behind Cloudflare Access or some form of wireguard tunnel.

Just put up basic auth infront of your services and be done with it.

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#24

Post by ctm92 »

Kasm [1] also has ready-to-use images that work similar. They are also customizable to contain own applications or configuration. Intended to be used with their Kasm Workspaces solution, but they also work standalone just fine.

[1] https://hub.docker.com/u/kasmweb

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#25

Post by weitzj »

mch82 wrote: post #23

Since the website doesn’t have pictures or videos… Is “webtop” a way to package GUI desktop apps in a Docker container so that the only dependencies to run the app are Docker Desktop and a web browser?

Yes. From the documentation there are some Screenshots and this is possible. Like starting a standalone Firefox browser inside docker desktop and accessing it via a browser vnc session.

But you get to control the keyboard/clipboard and it can add apparently watermarks to the vnc session for DLP functionality and you have a web http to take screenshots of your vnc sessions.

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#26

Post by NKosmatos »

ctm92 wrote: post #24

Kasm [1] also has ready-to-use images that work similar. They are also customizable to contain own applications or configuration. Intended to be used with their Kasm Workspaces solution, but they also work standalone just fine. [1] https://hub.docker.com/u/kasmweb

Thanks for this, they have many images with an online working demo for 3 minutes to try it out. For sure I'm going to have another look at Kasm.

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#28

Post by ctm92 »

NKosmatos wrote: post #26
ctm92 wrote: post #24

Kasm [1] also has ready-to-use images that work similar. They are also customizable to contain own applications or configuration. Intended to be used with their Kasm Workspaces solution, but they also work standalone just fine. [1] https://hub.docker.com/u/kasmweb

Thanks for this, they have many images with an online working demo for 3 minutes to try it out. For sure I'm going to have another look at Kasm.

Their GitHub repo [1] has also skeleton dockerfiles that are annotated with comments on where you have to put your customizations, quite cool

[1] https://github.com/kasmtech/workspaces-images

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#29

Post by KronisLV »

Timber-6539 wrote: post #22
satertek wrote: post #3

Earlier quoted context omitted.

That warning applies to anything you run locally. And going further, in this day and age, I would never put up any home service without it being behind Cloudflare Access or some form of wireguard tunnel.

Just put up basic auth infront of your services and be done with it.

I've done that in the past, even for securing the admin pages of some software (there was once an issue where the admin page auth could be bypassed, this essentially adds another layer). With TLS it's okay for getting something up and running quickly.

Of course, for the things that matter a bit more, you can also run your own CA and do mTLS, even without any of the other fancy cloud services.

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#30

Post by nsteel »

hifikuno wrote: post #5
chrisweekly wrote: post #2

> "Warning Do not put this on the Internet if you do not know what you are doing. By default this container has no authentication and the optional environment variables CUSTOM_USER and PASSWORD to enable basic http auth via the embedded NGINX server should only be used to locally secure the container from unwanted access on a local network. If exposing this to the Internet we recommend putting it behind a reverse pro…

Yeah, I made a mistake with my config. I had setup SWAG, with Authelia (i think?). Got password login working with 2fa. But my dumbass didn't realize I had left ports open. Logged in one day to find a terminal open with a message from someone who found my instance and got in. Called me stupid (I mean they're not wrong) and all kinds of things and deleted everything from my home drive to "teach me a lesson". Lesson pa…

But you can have Obsidian access from any device already if you easily setup syncing using the official method (and support the project by doing so) or one of the community plugins. Doing it this normal way avoids opening up a massive security hole too.
Post reply on HN