guacamole-duo

docker-compose.yml

version: "3"
services:

  guac-mysql:
    container_name: guac-mysql
    restart: always
    image: mariadb
    environment:
      - MYSQL_ROOT_PASSWORD=NOPE
      - MYSQL_DATABASE=guacamole_db
      - MYSQL_USER=guacamole_user
      - MYSQL_PASSWORD=NOPE
      - TZ=America/Los_Angeles
    volumes:
      - /home/admin/mysqldump:/docker-entrypoint-initdb.d
      - mysql-data:/var/lib/mysql
    networks:
      - guac_nw

  guacd:
    container_name: guacd
    restart: always
    image: guacamole/guacd
    environment:
      - TZ=America/Los_Angeles
    networks:
      - guac_nw

  guacamole:
    container_name: guacamole
    restart: always
    image: guacamole/guacamole
    volumes:
      - /home/admin/guac_home:/etc/guac_home
    networks:
      - guac_nw
    environment:
      - MYSQL_DATABASE=guacamole_db
      - MYSQL_USER=guacamole_user
      - MYSQL_PASSWORD=NOPE
      - MYSQL_HOSTNAME=guac-mysql
      - GUACD_HOSTNAME=guacd
      - GUACD_PORT=4822
      - GUACAMOLE_HOME=/etc/guac_home
      - TZ=America/Los_Angeles
    ports:
      - 8080:8080

volumes:
  mysql-data:

networks:
  guac_nw:

guacamole.properties

# Duo MFA Config
duo-api-hostname: api-*.duosecurity.com
duo-integration-key: DI91*
duo-secret-key: S*
duo-application-key: 4*

I left a message for you on the Guacamole Forum, but seems it was not approved.

If I run this command I am able to use DUO.
But for the life of me, I am unable to get it working with my compose file.
I'm assuming I would need to pass the EXTENSIONS variable through but I have tried every iteration and have failed.
Please you know how to get the extensions working on the docker compose file, PLEASE share.

docker run
-p 8080:8080
-v /home/user/guacamole/config:/config
-e "EXTENSIONS=auth-duo"
oznu/guacamole

This is my compose file.

guacamole:
image: oznu/guacamole
container_name: Guacamole
restart: unless-stopped
volumes:

• /home/user/guacamole/config/:/config
  ports:
• "8074:8080"
  environment:
• PUID=1000
• PGID=1000
• TZ=Africa/Harare
  labels:
• "traefik.backend=Guacamole"
• "traefik.docker.network=proxy"
• "traefik.frontend.rule=Host:guac.mydomain.xx"
• "traefik.enable=false"
• "traefik.port=8080"
• "traefik.default.protocol=http"
  network_mode: bridge