Commit Graph

123 Commits

Author SHA1 Message Date
35e0d67446 .
Some checks failed
Test / test (push) Has been cancelled
2026-01-17 01:08:29 +00:00
747f71e27c .
Some checks failed
Test / test (push) Has been cancelled
2026-01-17 00:44:10 +00:00
6e5656a00b .
Some checks failed
Test / test (push) Has been cancelled
2026-01-17 00:42:44 +00:00
ab004b78eb .
Some checks failed
Test / test (push) Has been cancelled
2026-01-17 00:42:15 +00:00
b42bac35bb .
Some checks failed
Test / test (push) Has been cancelled
2026-01-17 00:37:40 +00:00
7b874169cb Update cisco-vpn to use 172.31.0.0/24 container network
Some checks failed
Test / test (push) Has been cancelled
- Replace 100.100.0.0/24 with 172.31.0.0/24
- Update gateway to 172.31.0.1

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:26:26 +00:00
2f7a51d2b7 Move restart-routing trigger into setup_forwarding
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:16:29 +00:00
6097bcbe8f Remove unnecessary runtime mkdir from entrypoint
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:13:52 +00:00
f1fd3572c5 Use APP_DATA_DIR directly for runtime mount
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:12:55 +00:00
3d715664db Create runtime directory in entrypoint
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:11:53 +00:00
31cb8f6db5 Add trigger-based host routing restart (no SSH needed)
Some checks failed
Test / test (push) Has been cancelled
- Add runtime volume mount for trigger files
- cisco-vpn now creates /runtime/restart-routing trigger file
- Host systemd path watcher handles restart

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:11:11 +00:00
abe7a7ab08 Remove deleted init-rego.sh mount from docker-compose files
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:03:03 +00:00
46fe4f5557 Add xstartup to launch cisco-vpn in terminal
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:01:39 +00:00
35e4f1f6b7 Remove unused shared scripts and vpn_scripts-not-used folder
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:00:00 +00:00
767526054e Add IP forwarding to entrypoint
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 22:58:43 +00:00
69062bd828 Remove unused build scripts, fix cisco-vpn monitor loop
Some checks failed
Test / test (push) Has been cancelled
- Delete init-vpn.sh, vpn-connect.sh, xstartup from build/scripts
- Change cisco-vpn monitor to background process so menu shows after connect

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 22:56:34 +00:00
b3259d2981 .
Some checks failed
Test / test (push) Has been cancelled
2026-01-16 22:48:04 +00:00
dc463f4cf0 .
Some checks failed
Test / test (push) Has been cancelled
2026-01-16 22:44:58 +00:00
74f4ab982e .
Some checks failed
Test / test (push) Has been cancelled
2026-01-16 22:10:57 +00:00
070e358463 change build step
Some checks failed
Test / test (push) Has been cancelled
2026-01-16 22:08:37 +00:00
99fc5a5600 update dockerfile
Some checks failed
Test / test (push) Has been cancelled
2026-01-16 21:45:38 +00:00
ee6cb6c90d refactor(rego-tunnel): Inline startup-vnc.sh and vnc.service in Dockerfile
Some checks failed
Test / test (push) Has been cancelled
These two files cannot be overridden at runtime, so they're now
baked directly into the Dockerfile using heredocs.

Remaining scripts (can be overridden at runtime):
- init-vpn.sh
- xstartup
- vpn-connect.sh

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 21:19:55 +00:00
b52ba03be4 fix(rego-tunnel): Make app work out of the box from repo
Some checks failed
Test / test (push) Has been cancelled
- Add init-rego.sh and xstartup to repo's shared folder
- Update docker-compose.json with all volume mounts
- Update docker-compose.yml with cgroup: host
- Mount scripts directly from repo (not user-config)

Now works on fresh install without any user-config overrides.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:49:39 +00:00
38c4eea2f0 feat(rego-tunnel): Add cisco-secure-client tarball to repo
Some checks failed
Test / test (push) Has been cancelled
Includes the pre-extracted Cisco Secure Client 5.1.14.145 installation
for building the Docker image.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:47:42 +00:00
838b33d6c5 feat(rego-tunnel): Add Dockerfile and build scripts for cisco-vpn image
Some checks failed
Test / test (push) Has been cancelled
Includes:
- Dockerfile for native Cisco Secure Client in Docker
- Build scripts (init-vpn.sh, startup-vnc.sh, vpn-connect.sh)
- VNC configuration (xstartup, vnc.service)
- build.sh for manual image builds
- README documenting the architecture

Note: cisco-secure-client-full.tar.gz is gitignored (large binary)
Copy it from ~/projects/cisco-vpn/build/ before building.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:47:20 +00:00
470517a00f refactor(rego-tunnel): Complete migration to native Docker VPN
Some checks failed
Test / test (push) Has been cancelled
- Add custom init-rego.sh that unmounts /etc/resolv.conf and /etc/hosts for VPN
- Add custom xstartup that launches terminal with cisco-vpn script
- Add TARGET_IP environment variable
- Remove QEMU/VM dependencies (TAPs, bridges, dnsmasq not needed)
- The cisco-vpn script handles: vpnagentd, auto-login with TOTP, IP forwarding

Architecture:
1. init-rego.sh: DNS fix + IP forwarding + start systemd
2. systemd: manages vpnagentd and vnc services
3. xstartup: opens xterm with cisco-vpn script
4. cisco-vpn: auto-connects VPN, sets up routing

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:45:16 +00:00
d44a3c1a3b feat(rego-tunnel): Mount custom xstartup to launch terminal with cisco-vpn script
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:34:14 +00:00
865a96c2ec fix(rego-tunnel): Remove Traefik basic auth
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 19:55:48 +00:00
21bbeef579 fix(rego-tunnel): Add cgroup volume for systemd support
Some checks failed
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 19:53:21 +00:00
8523c79999 refactor(rego-tunnel): Replace QEMU VM with native Docker Cisco VPN
Some checks failed
Test / test (push) Has been cancelled
- Switch from linux-vm QEMU image to cisco-vpn native Docker image
- Change port from 8006 to 6080 (noVNC)
- Remove VM-specific config (RAM, CPU, bridges, taps, QEMU)
- Add VPN credential fields (email, password, TOTP, VPN host)
- Add auto-connect and VNC password options
- Update description.md with new documentation
- Simplify Docker requirements (no /dev/kvm needed)

Benefits:
- No QEMU/VM overhead - runs natively in Docker
- Full Cisco Secure Client 5.1.14.145 with GUI
- Auto-login with TOTP support
- Auto-reconnect on disconnect

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 19:47:11 +00:00
8b9b6e798a .
Some checks failed
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2026-01-04 12:22:16 +00:00
b55708721c Add host routing service restart after VPN connects
Some checks failed
Test / test (push) Has been cancelled
SSH to host and restart rego-routing.service after VPN connection
is established in the VM.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 10:28:56 +00:00
3e50f5a465 Add Traefik basicauth to docker-compose.json
Some checks failed
Test / test (push) Has been cancelled
Runtipi uses docker-compose.json, not .yml for labels.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 09:52:52 +00:00
e13cc2b851 Add Traefik basic auth for rego-tunnel noVNC
Some checks failed
Test / test (push) Has been cancelled
- Remove websockify BasicHTTPAuth (doesn't trigger browser prompts)
- Add Traefik basicauth middleware instead (proper browser auth dialog)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 09:49:08 +00:00
6e1d7efa6d Remove unnecessary chmod from Dockerfile
Some checks failed
Test / test (push) Has been cancelled
Files in /shared/ are already executable from host mount,
no need to chmod at build time (which fails anyway since
/shared/ doesn't exist during build).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 09:36:30 +00:00
ed48c37706 new hostshare dir for rego-tunnel app
Some checks failed
Test / test (push) Has been cancelled
2026-01-04 09:06:33 +00:00
0d773fba51 new hostshare dir for rego-tunnel app
Some checks failed
Test / test (push) Has been cancelled
2026-01-04 09:03:51 +00:00
f1ba1f050d new image structure for cisco-vpn and related scripts
Some checks failed
Test / test (push) Has been cancelled
2026-01-04 09:01:52 +00:00
62ca42bb18 Update apps/rego-tunnel/build/setup-network.sh
Some checks failed
Test / test (push) Has been cancelled
2026-01-04 08:25:43 +00:00
bc34fad485 Update apps/rego-tunnel/build/supervisord.conf
Some checks failed
Test / test (push) Has been cancelled
2026-01-04 04:39:06 +00:00
500b5f4045 auto-generated commit message
Some checks failed
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2025-12-29 15:08:45 +00:00
24d28c649c forms update
Some checks failed
Test / test (push) Has been cancelled
2025-12-29 07:23:04 +00:00
6fd57b0ce2 feat(rego-tunnel): optional shared network via NIC2
Some checks failed
Test / test (push) Has been cancelled
2025-12-29 06:59:52 +00:00
2dae9f667e feat(rego-tunnel): optional second VM NIC + robust QCOW2 patch
Some checks failed
Test / test (push) Has been cancelled
2025-12-29 06:49:19 +00:00
cb7e309915 fix(rego-tunnel): align compose with RunTipi
Some checks failed
Test / test (push) Has been cancelled
2025-12-29 06:12:04 +00:00
55ca6fe620 rego-tunnel: relax qcow2 root detection
Some checks failed
Test / test (push) Has been cancelled
2025-12-29 05:46:19 +00:00
5478623d19 rego-tunnel: add configurable hostshare dir
Some checks failed
Test / test (push) Has been cancelled
2025-12-29 05:38:06 +00:00
302c52c784 rego-tunnel: add configurable hostshare dir
Some checks failed
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2025-12-29 01:41:37 +00:00
0020c539ea rego-tunnel: share APP_DATA_DIR via /hostshare + fix compose.json env
Some checks failed
Test / test (push) Has been cancelled
2025-12-29 01:27:12 +00:00
6c790f84aa rego-tunnel: default TSCLIENT to APP_DATA_DIR + auto-mount 9p
Some checks failed
Test / test (push) Has been cancelled
2025-12-29 00:57:47 +00:00