Commit Graph

7 Commits

Author SHA1 Message Date
Vantz Stockwell
a88c164ac4 fix(security): infrastructure hardening — guacd network isolation, drop DB port, helmet, non-root container
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-14 14:13:28 -04:00
Vantz Stockwell
36251c3caa fix(rdp): correct guacd debug entrypoint override
ENTRYPOINT not CMD — guacamole/guacd image sets its own entrypoint,
so command override was being appended as args to guacd binary.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-14 05:58:13 -04:00
Vantz Stockwell
c062cd502d debug(rdp): enable guacd debug logging + log all guacd responses
guacd was dying silently with no error instruction sent back.
Enable -L debug -f for verbose FreeRDP diagnostics and log
first 5 guacd→browser instructions plus connection parameters.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-14 05:53:13 -04:00
Vantz Stockwell
80463235b0 fix(rdp): VERSION echo + guacd host networking for overlay reach
- Echo VERSION_X_Y_Z args back to guacd in CONNECT handshake
- Set guacd to network_mode: host so it can reach RDP targets on
  NetBird/Tailscale overlay networks (100.64.x.x)
- App container uses host.docker.internal to reach guacd on host
- Add diagnostic logging for guacd→browser instruction relay

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-14 05:23:02 -04:00
Vantz Stockwell
f06dcbaa6b chore: expose postgres on port 4211 for external access
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-14 00:55:35 -04:00
Vantz Stockwell
adb18cbd75 fix: expose app on port 4210 2026-03-13 08:17:52 -04:00
Vantz Stockwell
88dbb99f9d feat: project scaffold — Docker, NestJS, Nuxt 3, Prisma config
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-12 17:05:37 -04:00