diff --git a/apps/cistech-tunnel/config.json b/apps/cistech-tunnel/config.json
index d962785..49eda65 100755
--- a/apps/cistech-tunnel/config.json
+++ b/apps/cistech-tunnel/config.json
@@ -1,25 +1,53 @@
 {
-"name": "Cistech Tunnel",
-"id": "cistech-tunnel",
-"available": true,
-"short_desc": "OpenConnect-SSO VPN + SSH forwards (noVNC)",
-"author": "alexz",
-"port": 6901,
-"categories": ["utilities","network"],
-"description": "OpenConnect-SSO VPN running in an isolated namespace with noVNC for first-time SSO and an SSH tunnel service for local forwards.",
-"tipi_version": 1,
-"version": "1.0.0",
-"source": "https://git.alexzaw.dev/alexz/cistech-tunnel",
-"exposable": true,
-"dynamic_config": false,
-"no_gui": false,
-"form_fields": [
-{"label":"VPN URL","type":"text","env_variable":"OC_URL","required":true,"default":"https://vpn.cistech.net/Employees"},
-{"label":"Server Cert Pin","type":"text","env_variable":"OC_SERVERCERT","required":true,"default":"pin-sha256:HyHob3LiVmIp8ch9AzHJ9jMYqI43tO5N13oWeBLiZ/0="},
-{"label":"Auth Group","type":"text","env_variable":"OC_AUTHGROUP","required":false,"default":""},
-{"label":"SSO Mode","type":"text","env_variable":"OC_SSO_ARGS","required":true,"default":"--browser-display-mode shown"},
-{"label":"VNC Password","type":"password","env_variable":"VNC_PASSWORD","required":true,"default":"Az@83278327$$@@"},
-{"label":"SSH Key Path","type":"text","env_variable":"SSH_KEY_PATH","required":true,"default":"/home/alexz/.ssh/id_ed25519-lenovo"}
-],
-"supported_architectures": ["arm64","amd64"]
+    "name": "Cistech Tunnel",
+    "id": "cistech-tunnel",
+    "available": true,
+    "short_desc": "Cistech VPN client container with noVNC.",
+    "author": "alexz",
+    "port": 6902,
+    "categories": [
+        "utilities",
+        "network"
+    ],
+    "description": "OpenConnect-SSO VPN running in an isolated namespace with noVNC for first-time SSO reconnects.",
+    "tipi_version": 1,
+    "version": "latest",
+    "source": "local",
+    "exposable": true,
+    "dynamic_config": true,
+    "no_gui": false,
+    "form_fields": [
+        {
+            "label": "VPN URL",
+            "type": "text",
+            "env_variable": "OC_URL",
+            "required": true,
+            "default": "https://vpn.cistech.net/Employees"
+        },
+        {
+            "label": "VNC Password",
+            "type": "password",
+            "env_variable": "VNC_PASSWORD",
+            "required": true,
+            "default": "Az@83278327$$@@"
+        },
+        {
+            "label": "Server Certificate",
+            "type": "textarea",
+            "env_variable": "OC_SERVERCERT",
+            "required": true,
+            "default": "pin-sha256:HyHob3LiVmIp8ch9AzHJ9jMYqI43tO5N13oWeBLiZ/0="
+        },
+        {
+            "label": "Username",
+            "type": "text",
+            "env_variable": "OC_USER",
+            "required": true,
+            "default": "alex.zaw@cistech.net"
+        }
+    ],
+    "supported_architectures": [
+        "arm64",
+        "amd64"
+    ]
 }
\ No newline at end of file
diff --git a/apps/cistech-tunnel/docker-compose.json b/apps/cistech-tunnel/docker-compose.json
new file mode 100644
index 0000000..e617a42
--- /dev/null
+++ b/apps/cistech-tunnel/docker-compose.json
@@ -0,0 +1,24 @@
+{
+  "$schema": "https://schemas.runtipi.io/v2/dynamic-compose.json",
+  "schemaVersion": 2,
+  "services": [
+    {
+      "name": "cistech-tunnel",
+      "image": "cistech-vpn:latest",
+      "isMain": true,
+      "internalPort": 6901,
+      "privileged": true,
+      "capAdd": ["NET_ADMIN"],
+      "devices": ["/dev/net/tun:/dev/net/tun"],
+      "environment": [
+        { "key": "OC_URL", "value": "${OC_URL}" },
+        { "key": "OC_SERVERCERT", "value": "${OC_SERVERCERT}" },
+        { "key": "OC_USER", "value": "${OC_USER}" },
+        { "key": "VNC_PASSWORD", "value": "${VNC_PASSWORD}" }
+      ],
+      "volumes": [
+        { "hostPath": "${APP_DATA_DIR}/data", "containerPath": "/root" }
+      ]
+    }
+  ]
+}