11. English summary
Guide contents · Previous: Security
ToTBVDI for Proxmox VE connects Windows and Android clients to assigned Windows VMs or local PCs through an authenticated broker and relay.
1. Install the broker
Use a Linux amd64 server with Docker Engine and the Compose plugin.
Get the release's Compose files, copy .env.example to .env, and set TOTBVDI_SERVER_ADDRESS to your server's address.
sudo docker compose pull && sudo docker compose up -d
sudo docker compose logs broker | grep initial_setup
Open the initial setup URL shown in the log.
Sign in with admin / admin, enter the one-time setup code, and change both credentials.
In 서버 접속 설정 (Server access), configure the address clients and Hosts will use, such as https://vdi.example.com.
Apply the .env lines shown there and run docker compose up -d again.
Connect Proxmox using the short Shell command shown in the admin console. The broker imports the QEMU VM inventory automatically.
2. Install and register the Host
Install the Windows Host from your broker's /get/host on each Windows VM or PC.
Test the broker address in Host settings and request registration.
The administrator must compare the verification codes on both screens before approval.
Configure the shared Windows account under Windows 로그인 (Windows sign-in).
3. Assign access
Create user accounts in the admin console and assign their VMs or PCs. Clipboard and device-sharing permissions are separate for each user and assigned machine, and are off by default. Grant only the permissions needed.
4. Connect
Install the Windows client from /get/client, or the Android app from /get/android.
Enter the broker address, test the connection, and sign in.
Choose 스트리밍 (Streaming) on an assigned card.
On Windows, Ctrl+Alt+Shift+Z releases 마우스 잠금 (Mouse lock). On Android, the amber cluster opens the menu, input-mode switch and keyboard. The Proxmox console is for emergencies; GPU passthrough output may not be visible there.
Updates, security and support
Check 업데이트 확인 for client and Host releases.
For Docker updates, follow 설정 → 서버 업데이트, update TOTBVDI_VERSION as instructed, and run sudo docker compose pull && sudo docker compose up -d.
Keep the data volume; do not use docker compose down -v.
Use HTTPS for internet access. Plain HTTP is unencrypted and is intended only for trusted LANs. The relay does not provide end-to-end encryption, and server sign-in currently has no two-factor authentication. Project Ed25519 release signatures are separate from Windows publisher trust.
Keep all components current; security fixes target the latest releases. Microphone and camera forwarding are not supported. For connection problems, send your administrator the versions, time and redacted error text. For vulnerabilities, follow the security policy and use Security → Report a vulnerability when private reporting is enabled; never publish vulnerability details in a public issue. There is no guaranteed support response time.