From 008659436854f077aad36b4a6571003c49a9559b Mon Sep 17 00:00:00 2001
From: Alex Zaw <me@alexzaw.dev>
Date: Wed, 24 Dec 2025 07:21:49 +0000
Subject: [PATCH] upload current sources

---
 apps/rego-tunnel-linux/docker-compose.json | 30 +++++---------
 apps/rego-tunnel-linux/docker-compose.yml  | 48 ++++++++++++++++++++++
 2 files changed, 58 insertions(+), 20 deletions(-)
 create mode 100644 apps/rego-tunnel-linux/docker-compose.yml

diff --git a/apps/rego-tunnel-linux/docker-compose.json b/apps/rego-tunnel-linux/docker-compose.json
index afb02b5..038aa35 100644
--- a/apps/rego-tunnel-linux/docker-compose.json
+++ b/apps/rego-tunnel-linux/docker-compose.json
@@ -1,26 +1,10 @@
 {
-  "schemaVersion": 2,
   "services": [
     {
       "name": "rego-tunnel-linux",
       "image": "qemux/qemu:latest",
       "isMain": true,
       "internalPort": 8006,
-      "volumes": [
-        {
-          "hostPath": "${APP_DATA_DIR}/data/storage",
-          "containerPath": "/storage"
-        },
-        {
-          "hostPath": "${APP_DATA_DIR}/data/shared",
-          "containerPath": "/shared"
-        },
-        {
-          "hostPath": "/etc/runtipi/repos/runtipi/apps/rego-tunnel-linux/vpn_scripts",
-          "containerPath": "/vpn_scripts",
-          "readOnly": true
-        }
-      ],
       "environment": [
         {"key": "BOOT", "value": "${LINUX_DISTRO}"},
         {"key": "RAM_SIZE", "value": "${LINUX_RAM_GB}G"},
@@ -28,11 +12,17 @@
         {"key": "DISK_SIZE", "value": "${LINUX_DISK_SIZE_GB}G"},
         {"key": "DHCP", "value": "Y"}
       ],
+      "volumes": [
+        {"hostPath": "${APP_DATA_DIR}/data/storage", "containerPath": "/storage"},
+        {"hostPath": "${APP_DATA_DIR}/data/shared", "containerPath": "/shared"},
+        {"hostPath": "/etc/runtipi/repos/runtipi/apps/rego-tunnel-linux/vpn_scripts", "containerPath": "/vpn_scripts"}
+      ],
+      "sysctls": {"net.ipv4.ip_forward": 1},
       "devices": ["/dev/kvm", "/dev/net/tun"],
       "capAdd": ["NET_ADMIN"],
-      "sysctls": [
-        {"key": "net.ipv4.ip_forward", "value": "1"}
-      ]
+      "stopGracePeriod": "2m"
     }
-  ]
+  ],
+  "schemaVersion": 2,
+  "$schema": "https://schemas.runtipi.io/v2/dynamic-compose.json"
 }
diff --git a/apps/rego-tunnel-linux/docker-compose.yml b/apps/rego-tunnel-linux/docker-compose.yml
new file mode 100644
index 0000000..519a5a4
--- /dev/null
+++ b/apps/rego-tunnel-linux/docker-compose.yml
@@ -0,0 +1,48 @@
+services:
+  rego-tunnel-linux:
+    container_name: rego-tunnel-linux
+    image: qemux/qemu:latest
+    restart: unless-stopped
+    devices:
+      - /dev/kvm
+      - /dev/net/tun
+    cap_add:
+      - NET_ADMIN
+    stop_grace_period: 2m
+    ports:
+      - ${APP_PORT}:8006
+    environment:
+      - BOOT=${LINUX_DISTRO}
+      - RAM_SIZE=${LINUX_RAM_GB}G
+      - CPU_CORES=${LINUX_CPU_CORES}
+      - DISK_SIZE=${LINUX_DISK_SIZE_GB}G
+      - DHCP=Y
+    volumes:
+      - ${APP_DATA_DIR}/data/storage:/storage
+      - ${APP_DATA_DIR}/data/shared:/shared
+      - /etc/runtipi/repos/runtipi/apps/rego-tunnel-linux/vpn_scripts:/vpn_scripts:ro
+    networks:
+      - tipi_main_network
+    sysctls:
+      - net.ipv4.ip_forward=1
+    labels:
+      traefik.enable: true
+      traefik.http.middlewares.rego-tunnel-linux-web-redirect.redirectscheme.scheme: https
+      traefik.http.services.rego-tunnel-linux.loadbalancer.server.port: 8006
+      traefik.http.routers.rego-tunnel-linux-insecure.rule: Host(`${APP_DOMAIN}`)
+      traefik.http.routers.rego-tunnel-linux-insecure.entrypoints: web
+      traefik.http.routers.rego-tunnel-linux-insecure.service: rego-tunnel-linux
+      traefik.http.routers.rego-tunnel-linux-insecure.middlewares: rego-tunnel-linux-web-redirect
+      traefik.http.routers.rego-tunnel-linux.rule: Host(`${APP_DOMAIN}`)
+      traefik.http.routers.rego-tunnel-linux.entrypoints: websecure
+      traefik.http.routers.rego-tunnel-linux.service: rego-tunnel-linux
+      traefik.http.routers.rego-tunnel-linux.tls.certresolver: myresolver
+      traefik.http.routers.rego-tunnel-linux-local-insecure.rule: Host(`rego-tunnel-linux.${LOCAL_DOMAIN}`)
+      traefik.http.routers.rego-tunnel-linux-local-insecure.entrypoints: web
+      traefik.http.routers.rego-tunnel-linux-local-insecure.service: rego-tunnel-linux
+      traefik.http.routers.rego-tunnel-linux-local-insecure.middlewares: rego-tunnel-linux-web-redirect
+      traefik.http.routers.rego-tunnel-linux-local.rule: Host(`rego-tunnel-linux.${LOCAL_DOMAIN}`)
+      traefik.http.routers.rego-tunnel-linux-local.entrypoints: websecure
+      traefik.http.routers.rego-tunnel-linux-local.service: rego-tunnel-linux
+      traefik.http.routers.rego-tunnel-linux-local.tls: true
+      runtipi.managed: true