Files
glkvm-cloud/docker-compose
GL.iNet-Yongping.Xie de48a9041e feat: add OIDC whitelist feature
1. Added OIDC whitelist functionality to allow specific users or domains
   to bypass standard authentication checks for controlled access.

Signed-off-by: GL.iNet-Yongping.Xie <yongping.xie@gl-inet.com>
2025-11-12 03:19:33 -08:00
..
2025-11-12 03:19:33 -08:00
2025-11-12 03:19:33 -08:00

Quick Start

This guide shows how to deploy glkvm-cloud using the provided Docker Compose environment template.

  1. Clone the repository and prepare the environment template

    git clone https://github.com/gl-inet/glkvm-cloud.git
    cd glkvm-cloud/docker-compose/
    cp .env.example .env
    
  2. Configure environment variables

    Edit .env and update the required parameters:

    • RTTYS_TOKEN: device connection token (leave empty to use the default)
    • RTTYS_PASS: web management password (leave empty to use the default StrongP@ssw0rd)
    • TURN_USER / TURN_PASS: coturn authentication credentials (leave empty to use the default)
    • GLKVM_ACCESS_IP: glkvm cloud access address (leave empty to auto-detect at startup)

    LDAP Authentication (Optional):

    • LDAP_ENABLED: set to true to enable LDAP authentication (default: false)
    • LDAP_SERVER: LDAP server hostname or IP address
    • LDAP_PORT: LDAP server port (default: 389, for TLS use 636)
    • LDAP_USE_TLS: set to true to enable TLS encryption (default: false)
    • LDAP_BIND_DN: service account distinguished name
    • LDAP_BIND_PASSWORD: service account password
    • LDAP_BASE_DN: search base for user queries
    • LDAP_USER_FILTER: LDAP query filter (default: (uid=%s))
    • LDAP_ALLOWED_GROUPS: comma-separated list of authorized groups (optional)
    • LDAP_ALLOWED_USERS: comma-separated list of authorized users (optional)

    ⚠️ Note: All configuration should be done in the .env file. You don’t need to modify docker-compose.yml, templates, or scripts directly.

  3. Start the services

    docker-compose up -d
    

    If you modify .env or template files, make sure to apply the updates:

    docker-compose down && docker-compose up -d
    
  4. Platform Access

    Once the installation is complete, access the platform via:

    https://<your_server_public_ip>