From 92097e398db3b9a2ba38bdfd178e2e2acb41304e Mon Sep 17 00:00:00 2001
From: Muhammad Atif Ali <me@matifali.dev>
Date: Thu, 24 Oct 2024 19:49:11 +0500
Subject: [PATCH] Update KasmVNC user group and config settings

- Use `usermod` to add user to ssl-cert group for compatibility.
- Simplify KasmVNC config with protocol and SSL parameters.
- Ensure UDP communication is confined to localhost for security.
---
 kasmvnc/run.sh | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/kasmvnc/run.sh b/kasmvnc/run.sh
index 76dcb14..164832d 100644
--- a/kasmvnc/run.sh
+++ b/kasmvnc/run.sh
@@ -34,7 +34,7 @@ install_deb() {
   download_file $url /tmp/kasmvncserver.deb
   sudo apt-get update
   DEBIAN_FRONTEND=noninteractive sudo apt-get install --yes -qq --no-install-recommends --no-install-suggests /tmp/kasmvncserver.deb
-  sudo addgroup $USER ssl-cert
+  sudo usermod -aG ssl-cert $USER
   rm /tmp/kasmvncserver.deb
 }
 
@@ -176,7 +176,14 @@ EOF" || true
 mkdir -p "$HOME/.vnc"
 cat > "$HOME/.vnc/kasmvnc.yaml" <<EOF
 network:
+  protocol: http
   websocket_port: ${PORT}
+  ssl:
+    require_ssl: false
+    pem_certificate:
+    pem_key:
+  udp:
+    public_ip: 127.0.0.1
 EOF
 
 # This password is not used since we start the server without auth.