Building a Guacamole Server on Debian 11

apt update

apt install postgresql postgresql-client postgresql-contrib

su - postgres
psql -d template1 -c "ALTER USER postgres WITH PASSWORD 'SomePassword';"
exit

# To allow remote connection
host    all         all         192.168.122.0/24    trust
host    all         all         192.168.123.0/24    trust

listen_addresses = '*'

systemctl enable postgresql
systemctl start postgresql && systemctl status postgresql

tree -L 2
.
├── guacamole-1.5.2
│   ├── guacamole-1.5.2.war
│   ├── guacamole-auth-jdbc-1.5.2.tar.gz
│   └── guacamole-server-1.5.2.tar.gz
└── postgres-jdbc-driver
    └── postgresql-42.5.4.jar

2 directories, 4 files

apt install build-essential libcairo2-dev libjpeg62-turbo-dev \
    libpng-dev libtool-bin uuid-dev libossp-uuid-dev libavcodec-dev \
    libavformat-dev libavutil-dev libswscale-dev freerdp2-dev \
    libpango1.0-dev libssh2-1-dev libtelnet-dev libvncserver-dev \
    libwebsockets-dev libpulse-dev libssl-dev libvorbis-dev libwebp-dev

apt install tomcat9 tomcat9-admin tomcat9-common tomcat9-user

systemctl enable tomcat9

cd guacamole-1.5.2
tar -xzf guacamole-server-1.5.2.tar.gz
cd guacamole-server-1.5.2

./configure --with-systemd-dir=/etc/systemd/system/ --disable-dependency-tracking

------------------------------------------------
guacamole-server version 1.5.2
------------------------------------------------

   Library status:

     freerdp2 ............ yes
     pango ............... yes
     libavcodec .......... yes
     libavformat.......... yes
     libavutil ........... yes
     libssh2 ............. yes
     libssl .............. yes
     libswscale .......... yes
     libtelnet ........... yes
     libVNCServer ........ yes
     libvorbis ........... yes
     libpulse ............ yes
     libwebsockets ....... yes
     libwebp ............. yes
     wsock32 ............. no

   Protocol support:

      Kubernetes .... yes
      RDP ........... yes
      SSH ........... yes
      Telnet ........ yes
      VNC ........... yes

   Services / tools:

      guacd ...... yes
      guacenc .... yes
      guaclog .... yes

   FreeRDP plugins: /usr/lib/x86_64-linux-gnu/freerdp2
   Init scripts: no
   Systemd units: /etc/systemd/system/

make
make install

ldconfig

useradd -M -d /var/lib/guacd/ -r -s /sbin/nologin -c "Guacd User" guacd
mkdir /var/lib/guacd
chown -R guacd: /var/lib/guacd

sed -i 's/daemon/guacd/' /etc/systemd/system/guacd.service

systemctl enable guacd

echo GUACAMOLE_HOME=/etc/guacamole >> /etc/default/tomcat9

mkdir -p /etc/guacamole/{extensions,lib}

touch /etc/guacamole/{guacamole.properties,guacd.conf}

su - postgres
psql

CREATE DATABASE guacamole_db;
CREATE USER guacamole_user WITH PASSWORD 'DbPassword';

\q
exit

cd guacamole-1.5.2
tar -xzf guacamole-auth-jdbc-1.5.2.tar.gz
cd guacamole-auth-jdbc-1.5.2/postgresql

psql -f schema/001-create-schema.sql --host=localhost --port=5432 --username=postgres --dbname=guacamole_db

psql -f schema/002-create-admin-user.sql --host=localhost --port=5432 --username=postgres --dbname=guacamole_db

su - postgres
psql

\c guacamole_db
GRANT SELECT,INSERT,UPDATE,DELETE ON ALL TABLES IN SCHEMA public TO guacamole_user;
GRANT SELECT,USAGE ON ALL SEQUENCES IN SCHEMA public TO guacamole_user;

\q
exit

cp guacamole-auth-jdbc-postgresql-1.5.2.jar /etc/guacamole/extensions/guacamole-auth-jdbc-postgresql.jar

cd postgres-jdbc-driver
cp postgresql-42.5.4.jar /etc/guacamole/lib/postgresql-connector.jar

[server]
bind_host = 0.0.0.0
bind_port = 4822

cd guacamole-1.5.2
cp guacamole-1.5.2.war /var/lib/tomcat9/webapps/guacamole.war

systemctl start guacd
systemctl status guacd

systemctl start tomcat9
systemctl status tomcat9

apt install nginx

systemctl enable nginx

server {
    listen 80;

    server_name guacamole.domain.dom;

    access_log /var/log/nginx/guacamole_access.log;
    error_log /var/log/nginx/guacamole_error.log;

        location / {
        proxy_pass http://192.168.122.125:8080/guacamole/;
        proxy_buffering off;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $http_connection;
        proxy_cookie_path /guacamole/ /guacamole/;
        }
}

<role rolename="admin"/>
<role rolename="admin-gui"/>
<role rolename="manager"/>
<role rolename="manager-gui"/>
<user username="admin" password="admin" roles="admin,admin-gui,manager,manager-gui"/>

<Context antiResourceLocking="false" privileged="true" >
  <CookieProcessor className="org.apache.tomcat.util.http.Rfc6265CookieProcessor"
                   sameSiteCookies="strict" />
  <!--<Valve className="org.apache.catalina.valves.RemoteAddrValve"
  allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />-->
  <Manager sessionAttributeValueClassNameFilter="java\.lang\.(?:Boolean|Integer|Long|Number|String)|org\.apache\.catalina\.filters\.CsrfPreventionFilter\$LruCache(?:\$1)?|java\.util\.(?:Linked)?HashMap"/>
</Context>

<Context antiResourceLocking="false" privileged="true" >
  <CookieProcessor className="org.apache.tomcat.util.http.Rfc6265CookieProcessor"
                   sameSiteCookies="strict" />
  <!--<Valve className="org.apache.catalina.valves.RemoteAddrValve"
  allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1" />-->
  <Manager sessionAttributeValueClassNameFilter="java\.lang\.(?:Boolean|Integer|Long|Number|String)|org\.apache\.catalina\.filters\.CsrfPreventionFilter\$LruCache(?:\$1)?|java\.util\.(?:Linked)?HashMap"/>
</Context>

systemctl restart tomcat9