[DRAFT] Implement Furtka Acces Gate #14

Open
opened 2026-07-22 10:55:23 +02:00 by robert · 0 comments
Collaborator

An AG will be a docker stack that can be deployed on any server with an IP (and a A (AAAA) DNS record on this address) accessible from the internet.

TODOs:

  • Start with a Step-By-Step Guide on how to set up an AG by hand, this will allow advanced users to set up their own access gate
  • Implement Furtka AG installation Script in Furtka backend and make it downloadable from the frontend
  • Plan out automatic handshakes to establish connection safely (basically, how to create a wg connection automatically)
  • Implement setting Furtka Apps to Internet Accessible
  • Create a test instance (generate an image, I will test it with my infrastructure)

Elements:

  1. Wireguard connection (wg-easy*)
  2. Traefik* for reverse proxy and certificate management
  • or a similar project with a usable license

How it works:

  1. In Furtka the user can select services that will be accessible from the internet (a warning is needed, before turning the switch on)
  2. In Furtka UI an Access Gate installation script can be generated. This will be a shell script containing all of the docker, wireguard and traefik configuration needed to establish a reverse proxy on an ubuntu server VPS (other script options will follow, let's start with the proof of concept on ubuntu server)
  3. The user will execute the installation script on their server of choice.
An AG will be a docker stack that can be deployed on any server with an IP (and a A (AAAA) DNS record on this address) accessible from the internet. TODOs: - [ ] Start with a Step-By-Step Guide on how to set up an AG by hand, this will allow advanced users to set up their own access gate - [ ] Implement Furtka AG installation Script in Furtka backend and make it downloadable from the frontend - [ ] Plan out automatic handshakes to establish connection safely (basically, how to create a wg connection automatically) - [ ] Implement setting Furtka Apps to Internet Accessible - [ ] Create a test instance (generate an image, I will test it with my infrastructure) Elements: 1. Wireguard connection (wg-easy*) 2. Traefik* for reverse proxy and certificate management * or a similar project with a usable license How it works: 1. In Furtka the user can select services that will be accessible from the internet (a warning is needed, before turning the switch on) 2. In Furtka UI an Access Gate installation script can be generated. This will be a shell script containing all of the docker, wireguard and traefik configuration needed to establish a reverse proxy on an ubuntu server VPS (other script options will follow, let's start with the proof of concept on ubuntu server) 3. The user will execute the installation script on their server of choice.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: daniel/furtka#14
No description provided.