The vnc-desktop container no longer runs a desktop environment. KDE Plasma and Xvnc now run directly on the host via a vnc-kde systemd service, with port 5901 firewalled to the podman bridge subnet only. The container is reduced to a websockify bridge forwarding the noVNC web UI to hetzner-host:5901. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
5 lines
162 B
Bash
5 lines
162 B
Bash
#!/bin/bash
|
|
set -e
|
|
|
|
# Proxy WebSocket (6080) → VNC server running on the host (hetzner-host:5901)
|
|
exec websockify --web /usr/share/novnc 6080 hetzner-host:5901
|