Kasm

Kasm Workspaces | The Container Streaming Platformkasm.com

Streaming containerized apps and desktops to end-users. The Workspaces platform provides enterprise-class orchestration, data loss prevention, and web streaming technology to enable the delivery of containerized workloads to your browser.

https://github.com/trentnbauer/HomelabPublic/blob/main/docker-compose/kasm.yml

version: "2.3"
services:
  app:
    image: ghcr.io/linuxserver/kasm:1.19.0@sha256:58e24f50abb46538b5102ebe9cb4051151d44ca137ae1b051934d47b24df5e5b
    privileged: true
    environment:
      - PUID=1000
      - PGID=1000
      - KASM_PORT=444
      #- NVIDIA_VISIBLE_DEVICES=all
      #- NVIDIA_DRIVER_CAPABILITIES=all
      - TZ=${TZ:-Australia/Melbourne}
    runtime: nvidia
    volumes:
      - opt:/opt
      - profiles:/profiles #persistent storage
      - /dev/input:/dev/input #input support
      - /run/udev/data:/run/udev/data #input support
      - thumbnails:/kasm_release/www/img/thumbnails
      - /opt/kasm/current/log/agent_json.log:/opt/kasm/current/log/agent_json.log ##CrowdSec logs
    ports:
      - ${PORT_SETUP:-3000}:3000 #Setup WebGUI
      - ${PORT:-444}:444
    restart: unless-stopped
    healthcheck:
      test: curl --connect-timeout 15 --silent --show-error --fail -k https://localhost:444/api/__healthcheck
      interval: 30s
      retries: 3
      start_period: 30s
      timeout: 15s
    labels:
      - autoheal=true
      - dfgeneric.enable=${CFTUNNEL:-true}
      - dfgeneric.0.hostname=${CFSUBDOMAIN}${CFDOMAIN}
      - dfgeneric.0.service=https://${HOSTNAME:-localhost}:${PORT:-444}
      - dfgeneric.0.access.policy=${CFPOLICY:-authenticate}
      - dfgeneric.0.access.name=${CFACCESSNAME:-Kasm}
      - dfgeneric.0.access.session_duration=${CFDURATION:-4h}
      - dfgeneric.0.zonename=${CFDOMAIN}
      - dfgeneric.0.no_tls_verify=true
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

volumes:
  opt:
  profiles:
  thumbnails: