phd59fr/gobastion repository overview

⁠🚀 goBastion

goBastion is a modern SSH bastion for centralized, secure, and automated access management.

It manages:

• SSH access
• database access
• users and groups
• MFA and login security
• session recording

👉 Full documentation, examples, command reference, and advanced setups:
➡️ https://github.com/phd59fr/goBastion⁠

👉 Docker Hub: https://hub.docker.com/r/phd59fr/gobastion⁠

⁠⚠️ Important

⁠🐳 Quick Start

⁠1. Run the default image

docker run -d \
  --name goBastion \
  -p 2222:22 \
  phd59fr/gobastion:latest

The default image includes:

• SSH bastion
• session recording
• built-in DB clients: mysql, postgres, redis

The default image does not include Mosh support.

⁠2. Optional: run the full image with Mosh support

docker run -d \
  --name goBastion \
  -p 2222:22 \
  phd59fr/gobastion:full

⁠3. Initialize the first admin user

docker exec -it goBastion /app/goBastion --firstInstall

⁠4. Connect

ssh -tp 2222 user@localhost --

⁠🔑 Core Principle

goBastion continuously enforces the state stored in the database:

• users
• keys
• accesses
• permissions

This gives:

• centralized control
• deterministic state
• automatic cleanup of drift

⁠✨ Included Features

• centralized SSH access management
• self-service for users
• admin account management
• group-based RBAC
• MFA and login security
• YubiKey / PIV support
• SCP / SFTP / rsync passthrough
• database access management
• session recording

Optional depending on image:

• Mosh support (:full)

⁠🗄️ Container Notes

• built-in DB client support: mysql, postgres, redis
• MongoDB client support is not packaged in the container
• the default image is smaller and excludes mosh-server
• the :full image includes Mosh support

⁠📚 Need More?

Use the GitHub README for:

• full command reference
• bastion usage examples
• SSH / ProxyCommand examples
• SCP / SFTP / rsync usage
• MFA / TOTP / PIV setup
• group and guest access workflows
• database configuration
• Docker and production deployment details

➡️ GitHub: https://github.com/phd59fr/goBastion⁠

⁠📄 License

MIT License