Sign inSign up

ericfg82/ghost-browse

By ericfg82

•Updated 2 minutes ago

Disposable Chromium in Docker, accessible from your browser via noVNC. Built to run behind gluetun.

Image
Networking
0

95

ericfg82/ghost-browse repository overview

⁠ghost-browse

A disposable, privacy-focused Chromium browser that runs in Docker and is accessible from any web browser via noVNC. No client software, no persistent profile — the browser profile is wiped and Chromium relaunches fresh every time it closes or the container restarts.

⁠Highlights

  • Ephemeral tmpfs profile — nothing survives a session except an optional Downloads folder
  • uBlock Origin Lite, Privacy Badger, "I still don't care about cookies", and Cookie-Editor force-installed and pinned
  • Hardened Chromium policies: blocked third-party cookies, DuckDuckGo default search, WebRTC leak protection
  • Auto-resizing desktop (TigerVNC + noVNC) — the remote screen follows your browser window
  • No VPN client baked in — designed to run behind your own gluetun⁠ container

⁠Quick start

services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      - VPN_SERVICE_PROVIDER=your_provider
      - VPN_TYPE=wireguard
      # ...the rest of your gluetun VPN configuration
    ports:
      - "6080:6080"   # noVNC — published here, not on ghost-browse
    restart: unless-stopped

  ghost-browse:
    image: ericfg82/ghost-browse:latest
    container_name: ghost-browse
    network_mode: "service:gluetun"
    depends_on:
      - gluetun
    environment:
      - VNC_PASSWORD=change-me-to-a-long-random-password
      - INCOGNITO=false
      - TZ=Europe/Madrid
    tmpfs:
      - /tmp:size=1g,mode=1777
    volumes:
      # Downloaded files survive container updates/restarts.
      - ./ghost-browse-downloads:/home/ghost/Downloads
      # So do Bookmarks/Preferences/Local State (not history/cookies/passwords).
      - ./ghost-browse-settings:/home/ghost/chrome-settings
    shm_size: 1gb
    restart: unless-stopped

Open http://<host>:6080. VNC_PASSWORD is required — the
container refuses to start on the default value. Don't expose port
6080 to the internet directly; put it behind an authenticated HTTPS
reverse proxy for remote access.

Tag summary

Content type

Image

Digest

sha256:b023b7b3f…

Size

428.8 MB

Last updated

2 minutes ago

docker pull ericfg82/ghost-browse