phd59fr/gobastion repository overview

⁠🚀 goBastion

goBastion is a modern SSH bastion designed for secure, centralized, and fully automated access management.

👉 📚 Full documentation, examples, and advanced usage: ➡️ https://github.com/phd59fr/goBastion⁠

👉 Docker Hub: https://hub.docker.com/r/phd59fr/gobastion⁠

⁠⚠️ Important

⁠🐳 Quick Start

⁠1. Run the container

docker run -d \
  --name goBastion \
  -p 2222:22 \
  phd59fr/gobastion:latest

⁠2. ⚠️ Initialize the first admin user (REQUIRED)

docker exec -it goBastion /app/goBastion --firstInstall

⁠3. Connect

ssh -tp 2222 user@localhost --'

⁠🔑 Core Concept, Database as Source of Truth

• Automatic sync every 5 minutes
• Unauthorized changes are removed
• Fully consistent and secure

⁠✨ Key Features

• 🔐 Centralized SSH access management
• 👤 Self-service (keys, access, aliases, MFA)
• 🦸 Admin control (users, audit, permissions)
• 👥 Group-based RBAC
• 🔑 MFA (TOTP + password + JIT)
• 🛡️ YubiKey / PIV support
• 📡 SCP / SFTP / rsync passthrough
• ⏱️ TTL + IP restrictions
• 🐚 Mosh support
• 📜 Session recording

⁠🚀 Read the Full Documentation

👉 This project is feature-rich, this page is NOT enough.

⁠On GitHub you get:

• Complete command reference
• SSH / ProxyCommand examples
• SCP / SFTP / rsync configuration
• MFA & security setup
• YubiKey / PIV guide
• Database configuration
• Advanced production setups

➡️ Go now: https://github.com/phd59fr/goBastion⁠

⁠💡 Why goBastion?

• No SSH key drift
• No manual cleanup
• No inconsistencies

👉 Secure, deterministic, production-ready access management

⁠🤝 Contributing

See GitHub.

⁠📄 License

MIT License