https://github.com/mojocn/sshfortress
A pure and slim Golang SSH-Jumper-bastion-web app. One binary rules them all
https://github.com/mojocn/sshfortress
bastion fortress jumper-server
Last synced: 4 months ago
JSON representation
A pure and slim Golang SSH-Jumper-bastion-web app. One binary rules them all
- Host: GitHub
- URL: https://github.com/mojocn/sshfortress
- Owner: mojocn
- License: apache-2.0
- Created: 2019-10-10T08:46:54.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2023-02-25T00:37:16.000Z (over 2 years ago)
- Last Synced: 2025-05-14T09:44:19.595Z (5 months ago)
- Topics: bastion, fortress, jumper-server
- Language: Go
- Homepage: https://mojotv.cn/golang/golang-terminl-util-felix
- Size: 5.87 MB
- Stars: 163
- Watchers: 3
- Forks: 53
- Open Issues: 8
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# SSH-Fortress
go version > 1.12
windows10 needs GCC to run with SQLite(CGO) Database
## 1. What does it do?
1. Make your cluster servers be more safe by expose your SSH connection through SSH-Fortress server
2. Login your SSH server through the SSH-Fortress Web Interface and record all input and output history commands.
3. Manage your cluster server's SSH Account by SSH-Fortress with Web Account
4. Sync your SSHfortress WebApp Account into your linux SSH Account
5. Manage a server's files by SSH-Fortress's SFTP-web-interface.
6. Easily login into your private Cluster by SSH Proxy provided by SSH-Fortress-Proxy
## 2. Build and run
```bash
git clone https://github.com/mojocn/sshfortress.git && cd sshfortress;
go build
echo "run the app with SQLite database"
./sshfortress sqlite -v --listen=':3333'
echo "run the app with Mysql database, you need a config.toml file in your sshfortress binary folder"
./sshfortress run -v --listen=':3333'
```
Docker pull `docker pull mojotvcn/sshfortress`
### 2.1 config.toml
The config.toml file should be in sshfortress binary folder. config.toml works with command `sshfortress run`. Command `sshfortress sqlite` can run with the config file.
```toml
[app]
name="frotress.mojotv.cn"
addr=":8360"
verbose= true
jwt_expire=240 #hour
secret="asdf4e8hcjvbkjclkjkklfgki843895iojfdnvufh98" #jwt secret
[db]
# mysql database connection
host = "127.0.0.1"
user = "root"
dbname = "sshfortress"
password = "your_mysql_password"
port = 3306
[github] #github.com OAuth2
client_id="d0b29360a088d0c4dc18"
client_secret="89b272eeb22f373d8aa688986a8dbbc4edbfc64a"
callback_url="http://sshfortress.mojotv.cn/#/"
```
## 3. Live demo
[https://sshfortress.mojotv.cn/#/login](https://sshfortress.mojotv.cn/#/login)
Just click the login button, the default password has input for you, user `admin@sshfortress.cn` password: `admin`,
### 3.1 Universal Web SST Terminal
- `URL` : `https://sshfortress.mojotv.cn/#/any-term` eg: `https://sshfortress.mojotv.cn/#/any-term?a=home.mojotv.cn&p=test007&u=test007&z=1`
- URL-ARG `a` : SSH Address with Port eg: `home.mojotv.cn` `home.mojotv.cn:22`
- URL-ARG `u` : SSH Username eg: `test007`
- URL-ARG `p` : SSH Password eg: `test007`
- URL-ARG `z` : Not Use Zend Mode eg: `1`
## 4. Run with Supervisor & Nginx
sshfortress.mojotv.cn.conf
```bash
server {
server_name sshfortress.mojotv.cn;
charset utf-8;
location /api/ws-any-term
{
proxy_pass http://127.0.0.1:8360;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header X-Real-IP $remote_addr;
}
location /api/ws/
{
proxy_pass http://127.0.0.1:8360;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header X-Real-IP $remote_addr;
}
location / {
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header Host $http_host;
proxy_pass http://127.0.0.1:8360;
}
access_log /data/wwwlogs/sshfortress.mojotv.cn.log;
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/sshfortress.mojotv.cn/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/sshfortress.mojotv.cn/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
```
Supervisor config file: `sshfortress.ini`
```ini
[program:sshfortress.mojotv.cn]
command=/data/sshfortress/bin/sshfortress sqlite
autostart=true
autorestart=true
startsecs=10
user=root
chmod=0777
numprocs=1
redirect_stderr=true
stdout_logfile=/data/sshfortress/supervisor.log
```
## 5. Reference
1. [Idea from my another repo: libragen/felix](https://github.com/libragen/felix)
2. [How to run SSH-Terminal in browser](https://mojotv.cn/2019/05/27/xtermjs-go)
3. [Dockerhub image](https://hub.docker.com/r/mojotvcn/sshfortress/dockerfile)