Restructure cistech-tunnel to match rego-tunnel pattern
Some checks failed
Test / test (push) Has been cancelled

- build/: Dockerfile + entrypoint.sh (base image with VNC/noVNC)
- shared/: Runtime scripts mounted into container
  - xstartup: VNC startup, launches openconnect-vpn in xterm
  - openconnect-vpn: Main VPN script with menu, auto-connect, watchdog
- Removed source/ folder (replaced by build/)
- Updated docker-compose.json with proper volume mounts
- Changed port to 6080 (noVNC default)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
2026-01-17 10:36:41 +00:00
parent 5d54ed6f80
commit 3c427af6fe
8 changed files with 764 additions and 278 deletions

View File

@@ -4,24 +4,28 @@
{
"name": "cistech-tunnel",
"image": "git.alexzaw.dev/alexz/cistech-vpn:latest",
"isMain": true,
"internalPort": 6902,
"privileged": true,
"capAdd": ["NET_ADMIN"],
"devices": ["/dev/net/tun"],
"environment": [
{ "key": "OC_URL", "value": "${OC_URL}" },
{ "key": "OC_USER", "value": "${OC_USER}" },
{ "key": "OC_PASSWORD", "value": "${OC_PASSWORD}" },
{ "key": "OC_TOTP_SECRET", "value": "${OC_TOTP_SECRET}" },
{ "key": "VNC_PASSWORD", "value": "${VNC_PASSWORD}" },
{ "key": "NOVNC_PORT", "value": "6902" }
{ "key": "NOVNC_PORT", "value": "6080" },
{ "key": "TZ", "value": "${TZ}" }
],
"internalPort": 6080,
"volumes": [
{ "hostPath": "${APP_DATA_DIR}/data", "containerPath": "/root" },
{ "hostPath": "${APP_DATA_DIR}", "containerPath": "/runtime" },
{ "hostPath": "/etc/runtipi/repos/runtipi/apps/cistech-tunnel/shared", "containerPath": "/shared" }
]
{ "hostPath": "${APP_DATA_DIR}/config", "containerPath": "/config", "readOnly": false },
{ "hostPath": "${APP_DATA_DIR}", "containerPath": "/runtime", "readOnly": false },
{ "hostPath": "/etc/runtipi/repos/runtipi/apps/cistech-tunnel/shared", "containerPath": "/shared", "readOnly": false },
{ "hostPath": "/etc/runtipi/repos/runtipi/apps/cistech-tunnel/shared/xstartup", "containerPath": "/root/.vnc/xstartup", "readOnly": true }
],
"stopGracePeriod": "30s",
"devices": ["/dev/net/tun"],
"privileged": true,
"capAdd": ["NET_ADMIN"],
"isMain": true,
"extraLabels": { "runtipi.managed": true }
}
]
}