fix(rego-tunnel): Make app work out of the box from repo

- Add init-rego.sh and xstartup to repo's shared folder
- Update docker-compose.json with all volume mounts
- Update docker-compose.yml with cgroup: host
- Mount scripts directly from repo (not user-config)

Now works on fresh install without any user-config overrides.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/rego-tunnel/docker-compose.json

@@ -21,10 +21,6 @@
           "key": "VPN_HOST",
           "value": "${VPN_HOST}"
         },
-        {
-          "key": "VPN_AUTO_CONNECT",
-          "value": "${VPN_AUTO_CONNECT}"
-        },
         {
           "key": "VNC_PASSWORD",
           "value": "${VNC_PASSWORD}"
@@ -32,6 +28,10 @@
         {
           "key": "TZ",
           "value": "${TZ}"
+        },
+        {
+          "key": "TARGET_IP",
+          "value": "${TARGET_IP}"
         }
       ],
       "internalPort": 6080,
@@ -39,34 +39,30 @@
         {
           "hostPath": "${APP_DATA_DIR}/config",
           "containerPath": "/config",
-          "readOnly": false,
-          "shared": false,
-          "private": false
+          "readOnly": false
         },
         {
-          "hostPath": "/etc/runtipi/user-config/runtipi/rego-tunnel/shared",
+          "hostPath": "/etc/runtipi/repos/runtipi/apps/rego-tunnel/shared",
           "containerPath": "/shared",
-          "readOnly": false,
-          "shared": false,
-          "private": false
+          "readOnly": false
         },
         {
           "hostPath": "/sys/fs/cgroup",
           "containerPath": "/sys/fs/cgroup",
-          "readOnly": false,
-          "shared": false,
-          "private": false
+          "readOnly": false
         },
         {
-          "hostPath": "/etc/runtipi/user-config/runtipi/rego-tunnel/shared/xstartup",
+          "hostPath": "/etc/runtipi/repos/runtipi/apps/rego-tunnel/shared/init-rego.sh",
+          "containerPath": "/opt/scripts/init-vpn.sh",
+          "readOnly": true
+        },
+        {
+          "hostPath": "/etc/runtipi/repos/runtipi/apps/rego-tunnel/shared/xstartup",
           "containerPath": "/root/.vnc/xstartup",
-          "readOnly": false,
-          "shared": false,
-          "private": false
+          "readOnly": true
         }
       ],
       "stopGracePeriod": "30s",
-      "sysctls": {},
       "devices": [
         "/dev/net/tun"
       ],