Change:
<ins> { config , lib , pkgs , ... }: let cfg = config.services.guacamole-client; settingsFormat = pkgs.formats.javaProperties { }; in { options = { services.guacamole-client = { enable = lib.mkEnableOption (lib.mdDoc "Apache Guacamole Client (Tomcat)"); package = lib.mkPackageOptionMD pkgs "guacamole-client" { }; settings = lib.mkOption { type = lib.types.submodule { freeformType = settingsFormat.type; }; default = { guacd-hostname = "localhost"; guacd-port = 4822; }; description = lib.mdDoc '' Configuration written to `guacamole.properties`. ::: {.note} The Guacamole web application uses one main configuration file called `guacamole.properties`. This file is the common location for all configuration properties read by Guacamole or any extension of Guacamole, including authentication providers. ::: ''; }; enableWebserver = lib.mkOption { type = lib.types.bool; default = true; description = lib.mdDoc '' Enable the Guacamole web application in a Tomcat webserver. ''; }; }; }; config = lib.mkIf cfg.enable { environment.etc."guacamole/guacamole.properties" = lib.mkIf (cfg.settings != {}) { source = (settingsFormat.generate "guacamole.properties" cfg.settings); }; services = lib.mkIf cfg.enableWebserver { tomcat = { enable = true; webapps = [ cfg.package ]; }; }; }; } </ins>

Discussion:
Add clientless remote desktop gateway: Create nix expression. I will look into packaging this. It may be more fruitful than gateone or cloud9.
I actually have a local setup of this, but it is done in a very hacky way, so probably better off if you work on a service expression yourself. Probably need some improvements to the existing Tomcat module first though, from what I remember.
Please post any expressions you may have build. For the client, i just grab the binary (do you build it?): I've not made a service yet. You've hit on the issue, the tomcat setup is more convoluted, especially with DB authentication and the properties/user-mappings. this works for the server (depends on ) (note removing a warning due to a deprecated function in ).
Yeah, I just grab the WAR as well, arguably it is more the Nix way to build it from source but I was just looking to get something working rather than something clean :). My expression for the server is pretty similar, but instead of wrapping I used to avoid removing the RPATHs for the dynamically linked libraries. Also I didn't bother to support as many protocols (e.g. RDP) as I didn't need them for that environment. 's my service expression, but I doubt it will be very helpful. It's kind of a mess, fairly specific to my own setup (which e.g. has a reverse-proxy in front of guacamole, not covered therein), and I haven't altered the tomcat service expression to be any better.
Not strictly on-topic, but since it sounds like you both have or did have this running, can you comment on the performance of remote access via guac relative to other options? I've found everything but teamviewer to be frustratingly slow. Is this tree worth barking up? :)
I am no longer pursuing this. Reopen if needed.
well... it's possible i got this working again... still needs some cleanup, but i combined 's work and it's up and running.
I'd also be interested in native nix expression. Currently I just run it in docker.
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below.

Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . 3. Ask on the on .
I'm interested in this (please un-stale it).
I marked this as stale due to inactivity. &rarr;
I'm interested in this (please un-stale it).
I too am interested in it
I'm interested as well.
This is a must-have. Thank you for opening this, we can thumbs up this comment for anyone else who's interested in making this a native nix expression.
For anyone interested - I created a working flake (based on the linked PRs): Configuration is not yet done in a nice way, but if you need to get guacamole running, this could help.
Cool news, I will most probably try it out soon. By the way, how about submitting the PR in directly so we could have a NixOS module?
great work are you planning to make a PR?
Hi all, I just created a draft PR to add Guacamole server and client. I basically copy pasted it from the flake at . This PR does not include the NixOS module since has plan to update it. In the meantime, could you review that new draft PR: ?
Just as side note, I landed here from - where it mentions guacamole not yet being available.
Thanks for noticing it! Any user having a GitHub account is free to edit the wiki. Are you willing to do it?
Can you provide a sample configuration? I'm also unclear of the difference between and
Here's my own server configuration: Are you willing to edit the Wiki page: ?
Thanks for the configuration. However I still can't get it to run. Am I right to assume, that once it's setup, you should get a tomcat webview in which you can select what connection you want to open (defined for your user in the user-). That's how it works on an ubuntu install in a vm that I did.

I surf to it, login and then I have a bunch of connections (or can setup a new one). nginx as reverse proxy just prints 502 bad gateway error. I have this in my I also tried with but no luck either. After adding recommended proxy settings to nginx, I get now this error:
It seems to me that the discussion is shifting more towards the configuration of the proxy rather than focusing on Guacamole itself. I must confess, I'm unfamiliar with nginx, as my experience is primarily with — which I highly recommend you give a try, by the way! To approach this issue more systematically, I suggest first setting up Guacamole without the proxy. This should be a fairly straightforward process. Once you've successfully configured Guacamole, you can then layer the proxy on top. Breaking it down into these two separate steps may simplify the process and help identify any underlying issues more clearly.
How to use it without proxy? I tried to access it directly by ip address and port - no luck. And I also tried with caddy but no luck also. In your caddy setup I don't understand this: . Don't you have guac running on port 4822. Then why proxy to 8080?
The webserver is by default on port 8080, that's the reason why I used caddy in my config, see line 27: I guess you just have to access http://127.0.0.1:8080/
Ok, now that makes sense... I always tried port 4822 :)
Glad you found out. 4822 is the port of the service (guacamole-server).
Ok, figured it out: Caddy or nginx And exmpale of user- For generating the sha256 hash you can easily use: or
Excellent, I might reuse what you did in the documentation :) Caddy is amazing, glad you're using it :)
Sure, go ahead. Well, just for testing on that machine. The actual machine where I run guacamole (up to know in an ubuntu vm - so I can scratch that now) is already using nginx as reverse proxy for several things (plex, roundcube, wetty, photoprims, home assistant).
Do you maybe have a user- entry on how to connect to Win10 or Win11?

I tried rdp with and without NLA but can't get achieve any connection. I keep getting immediately disconnected: I found a solution here for Win10 (didn't test Win11 yet): And my user- looks now like this: And in the Windows 10 Remote Host settings, make sure that NLA () is not checked. Will test Windows 11 later. Thanks for all the hard work on packaging that.
I'm not using Windows machine, sorry...
Figured now out to use it with NLA also: