simonsecuritypedant/bastionhost repository overview

Simple server to use in docker where you want to test connectivity from the container perspective.

This is also designed to be a host target for a Cloudflare tunnel. You will need a cloudflared running on your infrastructure (https://hub.docker.com/r/cloudflare/cloudflared⁠) and then configure an Access application to control access to the host and also expose the shell via a browser. The docker image is built to use short lived certificates to map the Linux user to the Access authenticated user. See more here, https://developers.cloudflare.com/cloudflare-one/identity/users/short-lived-certificates/⁠