Hi Joachim, the address book feature is backed by hashicorp vault or openbao. So you need to set that up first if you want to use the address book. I realise that is a kinda heavy lift for some people, but I'm aiming to have this be security focused and that means not having credentials to remote machines stored on disk or on the same machine even. Once you have vault setup, its pretty easy - you give rustguac an approle, and it will connect to vault and manage your address book entries. It works without vault for adhoc entries, so you can give it a go with just adhoc sessions.
https://github.com/sol1/rustguac/blob/main/docs/integrations.md#vault--openbao-address-book A neat side effect of this approach is that you can have multiple rustguac instances use a shared address book, and still have instance specific addresses. Vault is just like a super secure database. Dave On Tue, 10 Feb 2026 at 05:38, Joachim Lindenberg <[email protected]> wrote: > Hi Dave, > > where do you maintain the “targets” guacd is supposed to connect to? in > Apache Guacamole this is usually in a database or via some extension > plugin. Anything similar? > > Thanks, > > Joachim > > > > *Von:* Dave Kempe <[email protected]> > *Gesendet:* Samstag, 7. Februar 2026 03:55 > *An:* [email protected] > *Betreff:* Introducing rustguac - a guacamole-client replacement written > in rust > > > > Hi everyone, > > I have been using Guacamole for years, and I want to thank the dev team > for all the hard work they have put in not only writing a great product > that I and my business rely on, but in support and docs and planning and > all that thankless stuff. Well done. > > > > I have wanted to change out the frontend of guacamole for years, and I > knew it was possible, and kinda managed to do that. I suspect there are > other commercial products that have kinda done the same thing as I have > done with this little project. > > > > So I had a crack and here we are: > > https://github.com/sol1/rustguac > > > > Lightweight Rust replacement for Apache Guacamole — browser-based SSH, > RDP, and web sessions via guacd > > I have added a few very opinionated choices and features: > > * Hashicorp Vault is the only address book backend > > * OIDC is the only authentication method for users - API first for machines > > * Web sessions are a browser URL and VNC > > * No VNC support at this stage (can add it if someone asks) > > * Lots of other security first features, like TLS everywhere, LUKS for > drives, etc. > > > > I'm currently running some fuzzing on the codebase, so development is > ongoing, but there are packages and docker images ready to go. > > > > Anyway, I hope I'm not overstepping by sharing this here. I am happy to > have feedback and again, thanks for all the great work you do. Hopefully > rustguac becomes a little cousin to guacamole, and is eventually invited > for family dinner. > > > > Dave Kempe > > >
