How to disable SSL,so that Synology NAS can use reverse proxy

[Jenking-Zhang]

I have deployed a kasmweb/chrome on my Synology NAS(DSM 7.1 beta).I'm trying to configure reverse proxy on my Synology NAS, but it doesn't work. I'm sure my method works fine on other containers using http protocol.I'm guessing that the reverse proxy of Synology NAS does not support https destination. So please tell me how to disable ssl (https) and let vnc work on http protocol. I tried configure headers and "-e VNC_USE_HTTP=1",it didn't work either. Thanks.

[beechfuzz]

I too would like to know how to disable SSL.

[mmcclaskey]

If you want to run the Kasm Workspaces containers directly without the Workspaces platform, you can disable SSL on the webserver embedded in KasmVNC, however, you would have to modify the source on our core image, build it yourself, and then build the desired chrome image from the core you modified. I can at least point you to the line that needs to be modified, but I'm afraid you would need to figure it out from there as this is not something we support at this time.

Remove -sslOnly from the vncserver command.

https://github.com/kasmtech/workspaces-core-images/blob/0e60c7eb5f7d6a63f30831a1a3d53312be2ef429/src/common/startup_scripts/vnc_startup.sh#L64

[JingerTea]

I am faced with a similar issue.

I build KASM on a local desktop for a higher configuration. To be able to access from public network, I decide to connect local KASM with a dedicate sever using FRP (reverse proxy), and I forward the port 443. At the end, I am to connect to the workplace via public network, but I am not able to setup any session. Everything else connecting via local network work fine.

[chaudhryfaisal]

Following worked for me

FROM kasmweb/firefox:1.11.0
USER root
RUN sed -i.bak 's/-sslOnly//' /dockerstartup/vnc_startup.sh
USER 1000

[zckevin]

sed -i.bak 's/-sslOnly//' /dockerstartup/vnc_startup.sh USER 1000

Awesome!

[JReming85]

Alt you can replace the ssl certs with self signed ones, add them as trusted via the reverse proxy server's ca file and reverse proxy to the https without error.

Had to do something similar for Collabora Office back in the day before it was a docker,