Sshwifty Web SSH & Telnet Client

Ce projet permet de déployer un client web Sshwifty permettant de se connecter en SSH protéger par une authentification Keycloak-gatekeeper via Keycloak

Configurer

git clone --recursive https://git.legaragenumerique.fr/GARAGENUM/sshwifty
cd sshwifty

Keycloak

• Créer un client "sshwifty":

• Mapper aud -> clien id:

Gatekeeper

• Editer le docker-compose.yml:

nano docker-compose.yml

      - "--discovery-url=https://<keycloak-dns>/auth/realms/<realm>/.well-known/openid-configuration"
      - "--client-id=sshwifty"
      - "--client-secret=<keycloak-client-secret>"

Si reverse-proxy devant

• Ajouter les directives suivantes pour le websocket dans la config du reverse-proxy:

    location /sshwifty/socket {
        proxy_pass http://sshwifty;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
    }

Déployer

docker compose up -d

License

Code of this project is licensed under AGPL, see LICENSE.md for detail.

Third-party components used by this project are licensed under their respective licenses. See DEPENDENCIES.md to learn more about dependencies used by this project and read their copyright statements.

Contribuer

• Config Keycloak Audience mapping
• SSHWIFTY à traduire en français