[DRAFT] Implement Furtka Acces Gate #14

New issue

Open

opened 2026-07-22 10:55:23 +02:00 by robert · 1 comment

robert commented

2026-07-22 10:55:23 +02:00

Collaborator

An AG will be a docker stack that can be deployed on any server with an IP (and a A (AAAA) DNS record on this address) accessible from the internet.

TODOs:

Start with a Step-By-Step Guide on how to set up an AG by hand, this will allow advanced users to set up their own access gate
Implement Furtka AG installation Script in Furtka backend and make it downloadable from the frontend
Plan out automatic handshakes to establish connection safely (basically, how to create a wg connection automatically)
Implement setting Furtka Apps to Internet Accessible
Create a test instance (generate an image, I will test it with my infrastructure)

Elements:

Wireguard connection (wg-easy*)
Traefik* for reverse proxy and certificate management

or a similar project with a usable license

How it works:

In Furtka the user can select services that will be accessible from the internet (a warning is needed, before turning the switch on)
In Furtka UI an Access Gate installation script can be generated. This will be a shell script containing all of the docker, wireguard and traefik configuration needed to establish a reverse proxy on an ubuntu server VPS (other script options will follow, let's start with the proof of concept on ubuntu server)
The user will execute the installation script on their server of choice.

An AG will be a docker stack that can be deployed on any server with an IP (and a A (AAAA) DNS record on this address) accessible from the internet. TODOs: - [ ] Start with a Step-By-Step Guide on how to set up an AG by hand, this will allow advanced users to set up their own access gate - [ ] Implement Furtka AG installation Script in Furtka backend and make it downloadable from the frontend - [ ] Plan out automatic handshakes to establish connection safely (basically, how to create a wg connection automatically) - [ ] Implement setting Furtka Apps to Internet Accessible - [ ] Create a test instance (generate an image, I will test it with my infrastructure) Elements: 1. Wireguard connection (wg-easy*) 2. Traefik* for reverse proxy and certificate management * or a similar project with a usable license How it works: 1. In Furtka the user can select services that will be accessible from the internet (a warning is needed, before turning the switch on) 2. In Furtka UI an Access Gate installation script can be generated. This will be a shell script containing all of the docker, wireguard and traefik configuration needed to establish a reverse proxy on an ubuntu server VPS (other script options will follow, let's start with the proof of concept on ubuntu server) 3. The user will execute the installation script on their server of choice.

daniel commented

2026-08-25 17:21:08 +02:00

Owner

Design-Doc dazu liegt in PR #16 (docs/remote-access.md): Caddy + gatewayd auf User-VPS, WireGuard-Pairing, expose-Manifest, 6 Phasen. Vier offene Fragen besprechen wir im Meeting.