This Docker image provides Duo Authentication Proxy based on Ubuntu 24.04.
155
Docker hub: https://hub.docker.com/r/gentipjetri/duo-authentication-proxy
Current version: Duo Authproxy 6.6.0
The Duo Authentication Proxy provides a local proxy service that enables on-premises integrations between VPNs, devices, applications, and hosted Duo or Trustwave two-factor authentication (2FA).
This repository demonstrates how to run the Duo Authentication Proxy as a container.
The Duo Authentication Proxy requires configuration files .cfg to operate. To keep the file secure and separate from the container image, use a host-mounted directory.
Bind folder on the host machine (e.g., /path/on/host) into the container at /opt/duoauthproxy/bin/conf-transit.
The container reads the configuration directly from that folder.
Any changes made on the host automatically apply inside the container, eliminating the need to rebuild the image for configuration updates.
'''version: '3.9'
services:
duo-auth-proxy:
image: gentipjetri/duo-authentication-proxy:6.6.0
container_name: duo-auth-proxy
restart: unless-stopped
network_mode: "host"
dns:
- 208.67.222.222
- 208.67.220.220
volumes:
- /path/on/host:/opt/duoauthproxy/bin/conf-transit
- duo-log:/opt/duoauthproxy/log
volumes:
duo_log:
Complete documentation about the Duo Auth Proxy can be found here: https://duo.com/docs/authproxy_reference
Configuration of authproxy.cfg: https://duo.com/docs/authproxy-reference#configuration
; Complete documentation about the Duo Auth Proxy can be found here:
; https://duo.com/docs/authproxy_reference
; MAIN: Include this section to specify global configuration options.
; Reference: https://duo.com/docs/authproxy_reference#main-section
[main]
log_stdout=true
; CLIENTS: Include one or more of the following configuration sections.
; To configure more than one client configuration of the same type, append a
; number to the section name (e.g. [ad_client2])
[duo_only_client]
; SERVERS: Include one or more of the following configuration sections.
; To configure more than one server configuration of the same type, append a
; number to the section name (e.g. radius_server_auto1, radius_server_auto2)
[radius_server_duo_only]
ikey=xxxxxxxxxxxxxxx
skey=yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
api_host=zzzzzzzzzzz.duosecurity.com
failmode=secure
radius_ip_1=a.b.c.d
radius_secret_1=vvvvvvvvvvv
port=1822
The service is configured to listen on a custom port (1822) instead of the default, ensuring compatibility with existing services and firewall rules.
Content type
Image
Digest
sha256:89865368e…
Size
124.3 MB
Last updated
9 months ago
docker pull gentipjetri/duo-authentication-proxy:6.6.0