feat(kasm): añadir stack de workspaces aislados en navegador

Kasm Workspaces para ejecutar aplicaciones de escritorio en contenedores accesibles desde el navegador, protegido con Authentik SSO. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-25 05:49:12 +00:00
parent 26898ac1fe
commit 7b4ed3e05e
3 changed files with 87 additions and 0 deletions
@@ -0,0 +1,36 @@
+services:
+  kasm:
+    image: ${KASM_IMAGE}
+    pull_policy: always
+    container_name: kasm
+    restart: unless-stopped
+    privileged: true
+    environment:
+      TZ: ${TZ}
+      KASM_PORT: "443"
+    volumes:
+      - ${KASM_OPT_PATH}:/opt:Z
+    networks:
+      - proxy
+    labels:
+      traefik.enable: "true"
+      traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
+      traefik.http.routers.kasm.rule: "Host(`${KASM_DOMAIN}`)"
+      traefik.http.routers.kasm.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
+      traefik.http.routers.kasm.tls: "true"
+      traefik.http.routers.kasm.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
+      traefik.http.routers.kasm.middlewares: "crowdsec-bouncer@file,${TRAEFIK_AUTH_MIDDLEWARE}"
+      traefik.http.services.kasm.loadbalancer.server.port: "3000"
+      traefik.http.services.kasm.loadbalancer.server.scheme: "https"
+      traefik.http.services.kasm.loadbalancer.passhostheader: "true"
+      homepage.group: "Infraestructura"
+      homepage.name: "Kasm"
+      homepage.icon: "https://www.kasmweb.com/favicon.ico"
+      homepage.description: "Workspaces en navegador"
+      homepage.href: "https://${KASM_DOMAIN}"
+      homepage.siteMonitor: "https://kasm:3000/"
+      homepage.weight: "350"
+
+networks:
+  proxy:
+    external: true