bencmeyer/ocvpn-duo-guac repository overview

⁠OpenConnect VPN + Apache Guacamole (All-in-One)

Complete remote access solution combining OpenConnect VPN with Apache Guacamole for secure RDP/SSH/VNC access to internal networks.

⁠🚀 Quick Start

# Pull the image
docker pull bencmeyer/ocvpn-duo-guac:latest

# Run with Docker Compose
docker compose -f docker-compose-allin1.yml up -d

⁠📦 What's Included

• OpenConnect VPN - Cisco AnyConnect compatible VPN client with Duo 2FA
• Apache Guacamole - Clientless remote desktop gateway (RDP/SSH/VNC)
• MariaDB - Integrated database with auto-initialization
• Web UI - Dashboard for VPN control and monitoring

⁠🔧 Configuration

⁠Environment Variables

VPN_USER: your_username          # Your VPN username
VPN_PASS: your_password          # Your VPN password
VPN_SERVER: vpn.example.com      # VPN server hostname
VPN_AUTHGROUP: OpenConnect1      # VPN auth group (optional)
DUO_METHOD: push                 # Duo 2FA method: push, phone, or sms
DNS_SERVERS: 8.8.8.8,8.8.4.4    # DNS servers for VPN tunnel

⁠Ports

⁠Default Credentials

Guacamole Login: guacadmin / guacadmin

⚠️ Change these immediately after first login!

⁠📋 Requirements

• Docker with --privileged mode support
• TUN device support (NET_ADMIN capability)
• VPN credentials (with optional Duo 2FA)

⁠🐳 Docker Run Example

docker run -d \
  --name openconnect-vpn \
  --privileged \
  --cap-add NET_ADMIN \
  --cap-add SYS_ADMIN \
  -p 8080:8080 \
  -p 9000:9000 \
  -e VPN_USER=your_username \
  -e VPN_PASS=your_password \
  -e VPN_SERVER=vpn.example.com \
  -e VPN_AUTHGROUP="OpenConnect1 (Split)" \
  -e DUO_METHOD=push \
  bencmeyer/ocvpn-duo-guac:latest

⁠🔐 RDP Connection Tips

When adding RDP connections in Guacamole:

• Set Security mode to "Any"
• Enable Ignore server certificate
• Use custom ports if needed (e.g., 30020)

These settings resolve common certificate validation issues with enterprise RDP servers.

⁠📖 Documentation

• Full Documentation: GitHub Repository⁠
• Quick Start Guide: QUICKSTART.md⁠
• CI/CD Setup: GITHUB_CI_SETUP.md⁠

⁠🛠️ Troubleshooting

VPN won't connect?

• Verify credentials and VPN_SERVER
• Check logs: docker logs openconnect-vpn
• Enable debug: Add -e DEBUG=true

Can't access Guacamole?

• Use the correct URL: http://localhost:8080/guacamole/⁠
• Default login: guacadmin/guacadmin
• Check port 8080 is not in use

RDP connection fails immediately?

• Set security mode to "Any"
• Enable "Ignore server certificate"
• Verify VPN is connected first

⁠📜 License

• OpenConnect: LGPL
• Apache Guacamole: Apache 2.0
• This Project: MIT License

⁠🔗 Links

• GitHub: https://github.com/bencmeyer/ocvpn-duo-guac⁠
• Issues: https://github.com/bencmeyer/ocvpn-duo-guac/issues⁠
• Docker Hub: https://hub.docker.com/r/bencmeyer/ocvpn-duo-guac⁠

⁠⭐ Features

• ✅ All-in-one container (VPN + Guacamole + Database)
• ✅ Automatic database initialization
• ✅ Duo 2FA support (push/phone/SMS)
• ✅ VPN connection isolation (disconnect won't kill Guacamole)
• ✅ Web-based VPN control dashboard
• ✅ Debug logging enabled for troubleshooting
• ✅ Supports RDP, SSH, VNC, and Telnet protocols
• ✅ Works with enterprise/university VPN systems

Built for: Secure remote access to internal networks via VPN with easy-to-use web interface for RDP/SSH connections.