pannal/jugglucoconnect-open repository overview

⁠jugglucoconnect-open

An unofficial, self-hostable build of jugglucoconnect⁠ for Juggluco and JugglucoNG ICE Clone connections.

The service exchanges ICE negotiation metadata so two Clone peers can find each other. It does not carry or relay the glucose data stream.

Security-focused deployment defaults:

• TLS on TCP port 6789
• Non-root UID and GID 65534
• Read-only container support with all Linux capabilities dropped
• Built without LOGMUCH, so raw SDP and ICE candidates are not written by the verbose logging paths
• Bounded local container logs in the supplied Compose file

Source, Dockerfile, and Compose example: pannal/jugglucoconnect⁠

Mount a certificate chain at /data/fullchain.pem and its matching private key at /data/privkey.pem. Both files must be readable by GID 65534.