@girish Thanks for the input. I actually decided to just build the server manually without using docker, but to answer your question, how I've done it (and this would be a SUPER AWESOME feature for you to add in your app) is to set up an encrypted tunnel using SSH. I'm doing a remote port forward from the machine I'm remoting into, to the guacamole server. Guacamole connections are then simply configured to connect to localhost and the forwarded port. Traffic then goes through an encrypted tunnel to the machine I'm remoting into.

@girish many thanks for the advice I did as you asked and I could not telnet to the server via the terminal app, so I then went to the cloudron server and tried it from there it would also not work, which lead me down a bit of rabbit hole Eventually I managed to find and issue with the virtual nic on the server itself and managed to resolve that, and now it is working perfectly. Not sure how I missed it but you helped me find so many thanks. Kind Regards Scott

@dark_dragone not 100% sure but I think search domains is a client feature. This means that docker (the DNS client on behalf of the guac container) should be configured to have a dns search. See https://docs.docker.com/config/containers/container-networking/ (--dns-search). Maybe you can quickly try by editing /etc/systemd/system/docker.service.d/cloudron.conf and restarting docker. I think you can also add it in your local machine's /etc/resolv.conf

@robi The universe gave me a hint this could be due to a session timeout, will re-test.

@tshafaat211 is there anything in the guacamole logs - https://docs.cloudron.io/apps/#log-viewer ?

@rez I see. Cloudron apps do not run in host mode because we need the network isolation for security purposes. Still I am not sure I understand why a docker container cannot access external network regardless. I thought this was taken care of by linux routing.

@jonlabs If you open a web terminal, are you able to telnet ip-of-server 22 (22 is the SSH port). Does it connect?

@girish Thank you for your prompt action on this. I have tested and all is now working as intended.

@girish Thanks! - should have figured that out - didn't see the button

Fair enough, currently it has no memory limit set, so it uses the default 256MB. Which is probably quite low for java apps.

I had to look up why this was needed. https://github.com/glyptodon/clipboard-permission-manager has an explanation.

@murgero Thanks for following up, apologies for not seeing this sooner. I don’t really know if they are fully compatible. I started using it a number of years ago since it then was a more secure and faster VNC implementation. It works cross platform by downloading a server application from RealVNC, and then registering an account with them. The free tier allows for 5 desktops/servers. The added benefit from a simplicity point of is that you connect via the client app through their servers, eliminating the need to open standard VNC ports in your firewall. I never did manage to find out how, and if, it is possible to connect in other ways. That’s why I was hoping someone else knew... Thank you very much!

@odie Good catch! This was an oversight on my part. I have pushed an update to fix this.