HTTPS Bastion¶
Le Bastion HTTPS Reemo est un navigateur verrouillé, exposé de manière sécurisée via une session Reemo directement dans le navigateur de l’utilisateur. Il donne un accès contrôlé à des applications web sans installer ni exposer de navigateur sur le poste de travail.
Ce guide couvre d’abord le déploiement (côté administrateur), puis l’usage au quotidien (côté utilisateur final).
Template¶
Ce gabarit est importable depuis la page Images de l’interface d’administration. Reportez-vous à la section Import et export d’images pour la procédure d’importation et de mise à jour.
{
"name": "HTTPS Bastion",
"type": "ALU",
"comments": "",
"reference": "registry.reemo.io/reemosbhttps",
"icon": "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 512 512\" width=\"512\" height=\"512\" role=\"img\" aria-label=\"HTTPS Bastion\"><rect width=\"512\" height=\"512\" rx=\"96\" fill=\"#7B88A3\"/><path d=\"M 184 192 V 146 a 72 72 0 0 1 144 0 V 192\" fill=\"none\" stroke=\"#FFFFFF\" stroke-width=\"34\" stroke-linecap=\"round\"/><rect x=\"126\" y=\"192\" width=\"260\" height=\"208\" rx=\"40\" fill=\"#FFFFFF\"/><g fill=\"none\" stroke=\"#56617A\" stroke-width=\"15\" stroke-linecap=\"round\"><circle cx=\"256\" cy=\"296\" r=\"54\"/><ellipse cx=\"256\" cy=\"296\" rx=\"22\" ry=\"54\"/><path d=\"M 202 296 H 310\"/></g></svg>",
"config": [
{"conditionOp":"EQUAL","conditionVal":"allowlist","conditionVar":"REEMO_FILTER_LOGIC","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Only these are reachable; everything else is blocked. Comma-separated. Accepts bare domains (reemo.io = that host only), wildcard subdomains (*.github.com), full URLs with a path prefix (https://site.com/app), or URL globs (*://*.cdn.net/*).","name":"Allowed Websites","placeholder":null,"type":"STRING","uiPriority":830,"value":"","variable":"REEMO_ALLOWLIST","optional":false},
{"conditionOp":"EQUAL","conditionVal":"blocklist","conditionVar":"REEMO_FILTER_LOGIC","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"These are blocked; everything else is allowed. Same formats as allowlist: bare domains, *.subdomain wildcards, full URLs with a path prefix, or URL globs.","name":"Blocked Websites","placeholder":null,"type":"STRING","uiPriority":820,"value":"","variable":"REEMO_BLOCKLIST","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Allowlist (deny by default)","placeholder":null,"type":"SELECT_OPTION","uiPriority":10,"value":"allowlist","variable":"REEMO_FILTER_LOGIC","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"BLANK","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"What a new tab shows.","name":"New Tab Page","placeholder":null,"type":"SELECT","uiPriority":900,"value":"","variable":"REEMO_NEW_TAB","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Reemo","placeholder":null,"type":"SELECT_OPTION","uiPriority":50,"value":"#896FFB","variable":"REEMO_BACKGROUND_COLOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"5","placeholder":null,"type":"SELECT_OPTION","uiPriority":10,"value":"5","variable":"REEMO_LIMIT_MONITOR","optional":false},
{"conditionOp":"EQUAL","conditionVal":"external","conditionVar":"REEMO_PROXY_MODE","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"All browser traffic is routed through this upstream proxy, as host:port (e.g. proxy.corp.local:3128).","name":"Upstream Proxy (host:port)","placeholder":null,"type":"STRING","uiPriority":810,"value":"","variable":"REEMO_EXTERNAL_PROXY","optional":false},
{"conditionOp":"EQUAL","conditionVal":"custom","conditionVar":"REEMO_NEW_TAB","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"URL opened on each new tab.","name":"New Tab URL","placeholder":null,"type":"STRING","uiPriority":890,"value":"","variable":"REEMO_NEW_TAB_URL","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"2","placeholder":null,"type":"SELECT_OPTION","uiPriority":40,"value":"2","variable":"REEMO_LIMIT_MONITOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"1","placeholder":null,"type":"SELECT_OPTION","uiPriority":50,"value":"1","variable":"REEMO_LIMIT_MONITOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Direct connection (no proxy)","placeholder":null,"type":"SELECT_OPTION","uiPriority":5,"value":"direct","variable":"REEMO_PROXY_MODE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Navy","placeholder":null,"type":"SELECT_OPTION","uiPriority":30,"value":"#0a3d62","variable":"REEMO_BACKGROUND_COLOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"External proxy (upstream)","placeholder":null,"type":"SELECT_OPTION","uiPriority":15,"value":"external","variable":"REEMO_PROXY_MODE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Dark","placeholder":null,"type":"SELECT_OPTION","uiPriority":5,"value":"#1e1e1e","variable":"REEMO_BACKGROUND_COLOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"URL filtering (allow / block websites)","placeholder":null,"type":"SELECT_OPTION","uiPriority":10,"value":"filter","variable":"REEMO_PROXY_MODE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"direct","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"How the browser reaches the web. Direct: no proxy. URL filtering: route through a local proxy that allows or blocks websites. External proxy: route all traffic through an upstream proxy.","name":"Proxy Mode","placeholder":null,"type":"SELECT","uiPriority":850,"value":"","variable":"REEMO_PROXY_MODE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Custom URL","placeholder":null,"type":"SELECT_OPTION","uiPriority":20,"value":"custom","variable":"REEMO_NEW_TAB","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"4","placeholder":null,"type":"SELECT_OPTION","uiPriority":20,"value":"4","variable":"REEMO_LIMIT_MONITOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Blank page","placeholder":null,"type":"SELECT_OPTION","uiPriority":10,"value":"BLANK","variable":"REEMO_NEW_TAB","optional":false},
{"conditionOp":"EQUAL","conditionVal":"url","conditionVar":"REEMO_HOME_MODE","defaultValue":"https://reemo.io","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Page loaded when the session starts.","name":"Start URL / Homepage","placeholder":null,"type":"STRING","uiPriority":1000,"value":"","variable":"REEMO_HOME","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Black","placeholder":null,"type":"SELECT_OPTION","uiPriority":20,"value":"#000000","variable":"REEMO_BACKGROUND_COLOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Blocklist (allow by default)","placeholder":null,"type":"SELECT_OPTION","uiPriority":5,"value":"blocklist","variable":"REEMO_FILTER_LOGIC","optional":false},
{"conditionOp":"EQUAL","conditionVal":"filter","conditionVar":"REEMO_PROXY_MODE","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Allowlist: block everything except the listed websites. Blocklist: allow everything except the listed websites.","name":"Filtering Logic","placeholder":null,"type":"SELECT","uiPriority":840,"value":"","variable":"REEMO_FILTER_LOGIC","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"Bookmarks","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Name of the bookmarks folder shown in the bar.","name":"Bookmarks Folder Name","placeholder":null,"type":"STRING","uiPriority":520,"value":"","variable":"REEMO_BOOKMARKS_NAME","optional":true},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"#896FFB","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":null,"name":"Background Color","placeholder":null,"type":"SELECT","uiPriority":490,"value":"","variable":"REEMO_BACKGROUND_COLOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"White","placeholder":null,"type":"SELECT_OPTION","uiPriority":30,"value":"#ffffff","variable":"REEMO_BACKGROUND_COLOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Bookmarks as Name|URL pairs, comma-separated (e.g. Reemo|https://reemo.io,Docs|https://docs.reemo.io).","name":"Bookmarks","placeholder":null,"type":"STRING","uiPriority":510,"value":"","variable":"REEMO_BOOKMARKS","optional":true},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"5","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":null,"name":"Monitor Limit","placeholder":null,"type":"SELECT","uiPriority":480,"value":"","variable":"REEMO_LIMIT_MONITOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"3","placeholder":null,"type":"SELECT_OPTION","uiPriority":30,"value":"3","variable":"REEMO_LIMIT_MONITOR","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"false","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Allows the browser to resolve and display URLs using the local file:// protocol.","name":"Local file navigation (file://)","placeholder":null,"type":"SELECT","uiPriority":805,"value":"","variable":"REEMO_ALLOW_FILE_PROTOCOL","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Enabled","placeholder":null,"type":"SELECT_OPTION","uiPriority":10,"value":"true","variable":"REEMO_ALLOW_FILE_PROTOCOL","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Disabled","placeholder":null,"type":"SELECT_OPTION","uiPriority":5,"value":"false","variable":"REEMO_ALLOW_FILE_PROTOCOL","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"fr","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Keyboard layout for the session.","name":"Keyboard","placeholder":null,"type":"SELECT","uiPriority":470,"value":"","variable":"REEMO_KEYMAP","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"English","placeholder":null,"type":"SELECT_OPTION","uiPriority":30,"value":"us","variable":"REEMO_KEYMAP","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"French","placeholder":null,"type":"SELECT_OPTION","uiPriority":20,"value":"fr","variable":"REEMO_KEYMAP","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Sweden","placeholder":null,"type":"SELECT_OPTION","uiPriority":10,"value":"sv","variable":"REEMO_KEYMAP","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"Europe/Paris","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Time zone for the session.","name":"Timezone","placeholder":null,"type":"SELECT","uiPriority":460,"value":"","variable":"REEMO_TIMEZONE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Europe/Paris","placeholder":null,"type":"SELECT_OPTION","uiPriority":30,"value":"Europe/Paris","variable":"REEMO_TIMEZONE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Europe/London","placeholder":null,"type":"SELECT_OPTION","uiPriority":20,"value":"Europe/London","variable":"REEMO_TIMEZONE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Europe/Stockholm","placeholder":null,"type":"SELECT_OPTION","uiPriority":10,"value":"Europe/Stockholm","variable":"REEMO_TIMEZONE","optional":false},
{"conditionOp":"EQUAL","conditionVal":"html","conditionVar":"REEMO_HOME_MODE","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"Paste raw HTML to use as the session start page. The page is served locally and hardened: scripts and remote resources are disabled, so images must be inlined as data: URIs. Keep it under ~128 KB.","name":"Custom Homepage (HTML)","placeholder":null,"type":"TEXT","uiPriority":995,"value":"","variable":"REEMO_CUSTOM_HTML","optional":true},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Same as start page","placeholder":null,"type":"SELECT_OPTION","uiPriority":15,"value":"CUSTOM_HTML","variable":"REEMO_NEW_TAB","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":"url","intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":true,"hint":"What the session opens on. URL: a normal web address. Custom HTML page: paste your own HTML below.","name":"Start Page","placeholder":null,"type":"SELECT","uiPriority":1010,"value":"","variable":"REEMO_HOME_MODE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"URL","placeholder":null,"type":"SELECT_OPTION","uiPriority":20,"value":"url","variable":"REEMO_HOME_MODE","optional":false},
{"conditionOp":null,"conditionVal":"","conditionVar":"","defaultValue":null,"intMax":null,"intMin":null,"intStep":null,"volumeName":null,"volumeTarget":null,"volumeStorageClass":null,"volumeAccessMode":null,"volumeMode":null,"volumeRequestSize":null,"volumeRequestSizeOverhead":null,"editable":false,"hint":null,"name":"Custom HTML page","placeholder":null,"type":"SELECT_OPTION","uiPriority":10,"value":"html","variable":"REEMO_HOME_MODE","optional":false}
],
"links": [],
"usePushNotifications": false,
"assignableToProvider": true,
"os": null,
"vmStartMode": null,
"vmCreationMode": null,
"vmCreationDate": null,
"vmPersistentDisk": null,
"official": false
}
Configuration et déploiement¶
Informations de l’image¶
Image :
registry.reemo.io/reemosbhttps:latest
Navigateur interne : ungoogled-Chromium
Choisir la page de démarrage¶
Le sélecteur Start Page détermine ce que la session affiche à l’ouverture. Un seul des deux champs suivants est visible à la fois, selon l’option retenue.
Option |
Champ associé et comportement |
|---|---|
URL (défaut) |
Start URL / Homepage : adresse web classique chargée au démarrage de la session. Valeur par défaut : https://reemo.io. |
Custom HTML page |
Custom Homepage (HTML) : votre propre code HTML, collé dans le formulaire, devient la page de démarrage. Voir la section suivante. |
Page d’accueil personnalisée (HTML)¶
Afficher votre propre page à l’ouverture du navigateur : un portail de liens internes, un message d’accueil, les consignes de votre équipe. Vous collez du HTML, il devient la page de démarrage de la session.
Comment l’activer
Start Page → Custom HTML page
Custom Homepage (HTML) → collez votre code
Facultatif — New Tab Page → Same as start page, pour que les nouveaux onglets ouvrent aussi cette page. La barre d’adresse reste alors vide.
Ce qui fonctionne
Texte, titres, tableaux et listes · mise en forme CSS (<style> et attributs style=”…”) · liens vers vos sites, soumis au filtrage d’URL de la session comme partout ailleurs · formulaires · images, à condition de les intégrer directement dans le code sous forme de data: URI.
Ce qui ne fonctionne pas, volontairement
Aucun JavaScript : les balises <script>, les attributs onclick et les liens javascript: sont sans effet.
Aucune ressource chargée depuis Internet : une image, une police ou une feuille de style désignée par une URL ne s’affichera pas.
Les <iframe> ne s’affichent pas.
La page s’affiche dans le navigateur volontairement verrouillé. Plutôt que de « nettoyer » votre code, le navigateur reçoit la consigne de ne rien exécuter et de ne contacter personne. Votre HTML n’est jamais modifié : il est affiché tel quel, dans un cadre qui l’empêche d’agir.
Tip
Bon à savoir
Taille maximale d’environ 128 Ko, images intégrées comprises.
Pour un logo, convertissez-le en data: URI et utilisez <img src=”data:image/png;base64,…”>.
Pour une adresse web classique, laissez Start Page sur URL.
Contrôler les nouveaux onglets¶
Le sélecteur New Tab Page détermine ce qu’affiche un nouvel onglet.
Option |
Comportement |
|---|---|
Blank page (défaut) |
Onglet vide. |
Custom URL |
Affiche le champ New Tab URL : adresse ouverte à chaque nouvel onglet. |
Same as start page |
Ouvre la même page que le démarrage de la session : la page HTML personnalisée si vous en avez défini une, sinon la Start URL. |
Note
Avec Same as start page et une page HTML personnalisée, la barre d’adresse de la session reste vide au démarrage, sur le bouton Accueil et sur les nouveaux onglets. C’est le réglage à privilégier pour un portail interne.
Publier des marque-pages¶
Champ |
Description |
|---|---|
Bookmarks |
Liste de paires Nom|URL séparées par des virgules, ex. Reemo|https://reemo.io,Docs|https://docs.reemo.io. |
Bookmarks Folder Name |
Nom du dossier affiché dans la barre de marque-pages. Défaut : Bookmarks. |
Le dossier est poussé par politique : l’utilisateur final ne peut ni le modifier ni le supprimer.
Régler la session¶
Champ |
Description |
|---|---|
Monitor Limit |
Nombre maximal d’écrans utilisables dans la session, de 1 à 5. Défaut : 5. |
Background Color |
Couleur du fond du bureau : Reemo (défaut), Navy, Dark, Black, White. |
Keyboard |
Disposition clavier de la session : French (défaut), English, Sweden. |
Timezone |
Fuseau horaire de la session : Europe/Paris (défaut), Europe/London, Europe/Stockholm. |
Guide d’utilisation¶
Ouvrir la session¶
À l’ouverture de la session Reemo, le navigateur démarre directement sur la page définie par Start Page. Aucune installation ni configuration n’est demandée à l’utilisateur.
Gérer les fenêtres¶
Une barre des tâches est présente en bas de chaque écran de la session et liste les fenêtres ouvertes. Le bouton au logo Reemo, à gauche de la barre, ouvre un menu contenant l’entrée Nouvelle fenêtre : elle ouvre une fenêtre de navigateur supplémentaire sur la page de démarrage de la session, à tout moment.
Saisir des identifiants depuis le portail Reemo¶
Lorsque la session est associée à un secret du portail d’identifiants Reemo, l’utilisateur n’a aucun mot de passe à connaître :
Ouvrir la page de connexion du site cible.
Un badge au logo Reemo apparaît sur le champ identifiant.
Un clic sur le badge (ou sur le champ vide) ouvre le sélecteur d’identifiants.
Choisir l’entrée : l’identifiant et le mot de passe sont remplis.
Note
Le secret n’est jamais écrit sur le disque du conteneur, et n’est jamais affiché en clair à l’utilisateur final. Le composant qui le détient s’exécute sous un compte système dédié, distinct de celui du navigateur.
Transférer des fichiers¶
Lorsque le transfert de fichiers est activé pour la session, l’image expose un répertoire Transfer, accessible depuis le menu Fichiers du navigateur Reemo. Ce répertoire est aussi le dossier de téléchargement du navigateur : un fichier téléchargé dans la session y est déposé directement, prêt à être récupéré sur le poste de travail.
Warning
L’espace Transfer est éphémère. Pensez à rapatrier vos fichiers sur votre poste local avant de fermer la session : les données ne survivent pas à l’arrêt du conteneur.
Contraintes de sécurité¶
Le navigateur est verrouillé en permanence. Ce n’est pas une option de déploiement : les restrictions suivantes s’appliquent à toutes les sessions.
Pas d’accès à la configuration du navigateur : les pages de paramètres, le gestionnaire d’extensions et les pages internes chrome:// et about:// sont inaccessibles.
Pas d’outils de développement : la console et l’inspecteur sont désactivés.
Extensions verrouillées : les deux extensions Reemo (injection d’identifiants, sécurité et journalisation) ne peuvent être ni désactivées ni supprimées par l’utilisateur final, et aucune autre extension ne peut être installée.
Fonctions désactivées : synchronisation de compte, gestionnaire de mots de passe intégré, historique de navigation, impression, navigation privée, suggestions de recherche et télémétrie.
Journalisation intégrale de la navigation : chaque requête émise par la session (méthode et URL) est enregistrée dans les journaux du conteneur, avec l’identité de l’utilisateur Reemo sur chaque ligne. L’activité d’une session est donc reconstituable a posteriori.
Changelog¶
v1.0.0 (2026-09-01)¶
First public release of the HTTPS Bastion Reemo image: a locked-down ungoogled-Chromium session, delivered in the browser through Reemo, that gives controlled access to web applications without exposing a browser installed on the user’s workstation.
Added¶
Web access through a locked-down browser. The session opens an ungoogled-Chromium window the end user cannot reconfigure or repurpose: the settings pages, the extension manager, the internal browser pages and the developer tools are all unreachable, and local file navigation is refused unless a deployment enables it explicitly. Sync, the built-in password manager, browsing history, printing and telemetry are disabled, and the two Reemo extensions are locked in place — the user can neither remove them nor install any other.
URL filtering, allowlist or blocklist. The session can act as a filtered gateway: either everything is blocked except the websites you list, or everything is allowed except those you list. Filtering applies to any navigation, including a link followed from inside a page, and a refused address shows a block page instead of loading. Alternatively, all browser traffic can be routed through an existing corporate proxy.
Custom start page written in HTML. Instead of a URL, the session can open on a page you supply as raw HTML — an internal link portal, a welcome message, your team’s instructions. It is served locally and displayed exactly as written, inside a frame that prevents it from running scripts or reaching the internet. New tabs can open on that same page, on a blank page, or on a URL of your choice.
Credential injection from the Reemo credential portal. A secret held in the portal is resolved when the session starts and offered on the target site’s login form: a Reemo badge appears on the username field, and one click fills username and password. The secret is never written to disk and never shown to the end user, and the component holding it runs under its own system account, isolated from the browser.
Full navigation audit. Every request the session issues is recorded in the container logs with per-line attribution to the Reemo user, so what was accessed during a session can be reconstructed afterwards. All subsystems of the image write to a single log format aligned with the rest of the Reemo platform, which makes the container output directly usable for operations and log collection.
Bidirectional file transfer. Files move between the user’s workstation and the session through a dedicated
Transferfolder, which is also the browser’s download directory: a downloaded file lands there ready to be retrieved. Transfer can be disabled entirely for a deployment, in which case the browser’s file dialogs are closed off as well.Multi-monitor desktop with a per-screen taskbar. The session can use several screens, added or removed on the fly, and resizes with the browser window. A taskbar on each screen manages the open windows, and its Reemo logo button opens a locked menu that can open another browser window at any time. The number of usable screens and the desktop background color are configurable.
Managed bookmarks, keyboard layout and time zone. A read-only bookmarks folder can be pushed into the bar, and the session’s keyboard layout and time zone are chosen at deployment.
Versions¶
Images published on registry.reemo.io/reemosbhttps.
Each build exposes these pullable tags:
Latest (
:latest) – the latest published releaseRelease (
:vX.Y.Z) – always tracks the latest build of this versionBuild (
:vX.Y.Z-N) – a specific, frozen weekly buildImage (
:<id>) – immutable reference to this exact build
Example: docker pull registry.reemo.io/reemosbhttps:vX.Y.Z-N
v1.0.0-1 (2026-09-01)