Commit Graph
100 Commits
Author SHA1 Message Date
alexzandClaude Opus 4.5 3d715664db Create runtime directory in entrypoint
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:11:53 +00:00
alexzandClaude Opus 4.5 31cb8f6db5 Add trigger-based host routing restart (no SSH needed)
Test / test (push) Has been cancelled
- Add runtime volume mount for trigger files
- cisco-vpn now creates /runtime/restart-routing trigger file
- Host systemd path watcher handles restart

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:11:11 +00:00
alexzandClaude Opus 4.5 abe7a7ab08 Remove deleted init-rego.sh mount from docker-compose files
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:03:03 +00:00
alexzandClaude Opus 4.5 46fe4f5557 Add xstartup to launch cisco-vpn in terminal
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:01:39 +00:00
alexzandClaude Opus 4.5 35e4f1f6b7 Remove unused shared scripts and vpn_scripts-not-used folder
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 23:00:00 +00:00
alexzandClaude Opus 4.5 767526054e Add IP forwarding to entrypoint
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 22:58:43 +00:00
alexzandClaude Opus 4.5 69062bd828 Remove unused build scripts, fix cisco-vpn monitor loop
Test / test (push) Has been cancelled
- Delete init-vpn.sh, vpn-connect.sh, xstartup from build/scripts
- Change cisco-vpn monitor to background process so menu shows after connect

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 22:56:34 +00:00
alexz b3259d2981 .
Test / test (push) Has been cancelled
2026-01-16 22:48:04 +00:00
alexz dc463f4cf0 .
Test / test (push) Has been cancelled
2026-01-16 22:44:58 +00:00
alexz 74f4ab982e .
Test / test (push) Has been cancelled
2026-01-16 22:10:57 +00:00
alexz 070e358463 change build step
Test / test (push) Has been cancelled
2026-01-16 22:08:37 +00:00
alexz 99fc5a5600 update dockerfile
Test / test (push) Has been cancelled
2026-01-16 21:45:38 +00:00
alexzandClaude Opus 4.5 ee6cb6c90d refactor(rego-tunnel): Inline startup-vnc.sh and vnc.service in Dockerfile
Test / test (push) Has been cancelled
These two files cannot be overridden at runtime, so they're now
baked directly into the Dockerfile using heredocs.

Remaining scripts (can be overridden at runtime):
- init-vpn.sh
- xstartup
- vpn-connect.sh

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 21:19:55 +00:00
alexzandClaude Opus 4.5 b52ba03be4 fix(rego-tunnel): Make app work out of the box from repo
Test / test (push) Has been cancelled
- Add init-rego.sh and xstartup to repo's shared folder
- Update docker-compose.json with all volume mounts
- Update docker-compose.yml with cgroup: host
- Mount scripts directly from repo (not user-config)

Now works on fresh install without any user-config overrides.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:49:39 +00:00
alexzandClaude Opus 4.5 38c4eea2f0 feat(rego-tunnel): Add cisco-secure-client tarball to repo
Test / test (push) Has been cancelled
Includes the pre-extracted Cisco Secure Client 5.1.14.145 installation
for building the Docker image.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:47:42 +00:00
alexzandClaude Opus 4.5 838b33d6c5 feat(rego-tunnel): Add Dockerfile and build scripts for cisco-vpn image
Test / test (push) Has been cancelled
Includes:
- Dockerfile for native Cisco Secure Client in Docker
- Build scripts (init-vpn.sh, startup-vnc.sh, vpn-connect.sh)
- VNC configuration (xstartup, vnc.service)
- build.sh for manual image builds
- README documenting the architecture

Note: cisco-secure-client-full.tar.gz is gitignored (large binary)
Copy it from ~/projects/cisco-vpn/build/ before building.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:47:20 +00:00
alexzandClaude Opus 4.5 470517a00f refactor(rego-tunnel): Complete migration to native Docker VPN
Test / test (push) Has been cancelled
- Add custom init-rego.sh that unmounts /etc/resolv.conf and /etc/hosts for VPN
- Add custom xstartup that launches terminal with cisco-vpn script
- Add TARGET_IP environment variable
- Remove QEMU/VM dependencies (TAPs, bridges, dnsmasq not needed)
- The cisco-vpn script handles: vpnagentd, auto-login with TOTP, IP forwarding

Architecture:
1. init-rego.sh: DNS fix + IP forwarding + start systemd
2. systemd: manages vpnagentd and vnc services
3. xstartup: opens xterm with cisco-vpn script
4. cisco-vpn: auto-connects VPN, sets up routing

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:45:16 +00:00
alexzandClaude Opus 4.5 d44a3c1a3b feat(rego-tunnel): Mount custom xstartup to launch terminal with cisco-vpn script
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 20:34:14 +00:00
alexzandClaude Opus 4.5 865a96c2ec fix(rego-tunnel): Remove Traefik basic auth
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 19:55:48 +00:00
alexzandClaude Opus 4.5 21bbeef579 fix(rego-tunnel): Add cgroup volume for systemd support
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 19:53:21 +00:00
alexzandClaude Opus 4.5 8523c79999 refactor(rego-tunnel): Replace QEMU VM with native Docker Cisco VPN
Test / test (push) Has been cancelled
- Switch from linux-vm QEMU image to cisco-vpn native Docker image
- Change port from 8006 to 6080 (noVNC)
- Remove VM-specific config (RAM, CPU, bridges, taps, QEMU)
- Add VPN credential fields (email, password, TOTP, VPN host)
- Add auto-connect and VNC password options
- Update description.md with new documentation
- Simplify Docker requirements (no /dev/kvm needed)

Benefits:
- No QEMU/VM overhead - runs natively in Docker
- Full Cisco Secure Client 5.1.14.145 with GUI
- Auto-login with TOTP support
- Auto-reconnect on disconnect

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-16 19:47:11 +00:00
alexzandClaude Opus 4.5 96153fa557 Fix cfddns to use latest tag
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-15 21:07:43 +00:00
alexzandClaude Opus 4.5 4d1bc9dbd0 Fix cfddns environment format to array
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-15 21:05:12 +00:00
alexzandClaude Opus 4.5 ca826a6229 Add cfddns app - Cloudflare DDNS using favonia image
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-15 21:00:41 +00:00
alexz a7691b16f0 assign ip to npm
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2026-01-13 14:35:30 +00:00
alexzandClaude Opus 4.5 d87429f98d Fix npm environment format to array
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-13 11:43:06 +00:00
alexzandClaude Opus 4.5 ccd1fbc52f Remove misaligned docker-compose.yml for npm app
Test / test (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-13 11:42:00 +00:00
alexz b0ba737d0d .
Test / test (push) Has been cancelled
2026-01-13 11:36:46 +00:00
alexzandClaude Opus 4.5 33aa6d361e Fix npm app: add schemaVersion, fix internalPort
Test / test (push) Has been cancelled
- Added schemaVersion: 2 to docker-compose.json
- Changed internalPort from env var to number (81)
- Fixes 'invalid hostPort: NaN' error

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-13 11:29:28 +00:00
alexz 1eee23953c change npm
Test / test (push) Has been cancelled
2026-01-13 09:53:40 +00:00
alexz 1c548281b0 Update apps/nginx-proxy-manager/docker-compose.json
Test / test (push) Has been cancelled
2026-01-13 09:46:07 +00:00
alexz 38ebb88ac6 Update apps/nginx-proxy-manager/config.json
Test / test (push) Has been cancelled
2026-01-13 09:44:04 +00:00
alexz e4fa0ba9cd Update apps/nginx-proxy-manager/config.json
Test / test (push) Has been cancelled
2026-01-13 09:39:10 +00:00
alexz cb50b25081 Update apps/nginx-proxy-manager/config.json
Test / test (push) Has been cancelled
2026-01-13 09:35:42 +00:00
alexz 6d8015bdc9 Update apps/nginx-proxy-manager/config.json
Test / test (push) Has been cancelled
2026-01-13 09:28:02 +00:00
alexz 982a4bbff9 Update apps/nginx-proxy-manager/docker-compose.json
Test / test (push) Has been cancelled
2026-01-13 09:19:27 +00:00
alexz fa571c9ccd .
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2026-01-09 11:33:00 +00:00
alexz ef0058c93f .
Test / test (push) Has been cancelled
2026-01-09 11:17:18 +00:00
alexz e2e7c44bf6 .
Test / test (push) Has been cancelled
2026-01-09 11:03:49 +00:00
alexz 3aadd164f0 .
Test / test (push) Has been cancelled
2026-01-09 10:42:41 +00:00
alexz d6cafc67b2 add scalar as an app
Test / test (push) Has been cancelled
2026-01-09 10:33:58 +00:00
alexz 8b9b6e798a .
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2026-01-04 12:22:16 +00:00
alexzandClaude Opus 4.5 b55708721c Add host routing service restart after VPN connects
Test / test (push) Has been cancelled
SSH to host and restart rego-routing.service after VPN connection
is established in the VM.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 10:28:56 +00:00
alexzandClaude Opus 4.5 3e50f5a465 Add Traefik basicauth to docker-compose.json
Test / test (push) Has been cancelled
Runtipi uses docker-compose.json, not .yml for labels.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 09:52:52 +00:00
alexzandClaude Opus 4.5 e13cc2b851 Add Traefik basic auth for rego-tunnel noVNC
Test / test (push) Has been cancelled
- Remove websockify BasicHTTPAuth (doesn't trigger browser prompts)
- Add Traefik basicauth middleware instead (proper browser auth dialog)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 09:49:08 +00:00
alexzandClaude Opus 4.5 6e1d7efa6d Remove unnecessary chmod from Dockerfile
Test / test (push) Has been cancelled
Files in /shared/ are already executable from host mount,
no need to chmod at build time (which fails anyway since
/shared/ doesn't exist during build).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-04 09:36:30 +00:00
alexz ed48c37706 new hostshare dir for rego-tunnel app
Test / test (push) Has been cancelled
2026-01-04 09:06:33 +00:00
alexz 0d773fba51 new hostshare dir for rego-tunnel app
Test / test (push) Has been cancelled
2026-01-04 09:03:51 +00:00
alexz f1ba1f050d new image structure for cisco-vpn and related scripts
Test / test (push) Has been cancelled
2026-01-04 09:01:52 +00:00
alexz 62ca42bb18 Update apps/rego-tunnel/build/setup-network.sh
Test / test (push) Has been cancelled
2026-01-04 08:25:43 +00:00
alexz bc34fad485 Update apps/rego-tunnel/build/supervisord.conf
Test / test (push) Has been cancelled
2026-01-04 04:39:06 +00:00
alexz 500b5f4045 auto-generated commit message
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2025-12-29 15:08:45 +00:00
alexz 24d28c649c forms update
Test / test (push) Has been cancelled
2025-12-29 07:23:04 +00:00
alexz 6fd57b0ce2 feat(rego-tunnel): optional shared network via NIC2
Test / test (push) Has been cancelled
2025-12-29 06:59:52 +00:00
alexz 2dae9f667e feat(rego-tunnel): optional second VM NIC + robust QCOW2 patch
Test / test (push) Has been cancelled
2025-12-29 06:49:19 +00:00
alexz cb7e309915 fix(rego-tunnel): align compose with RunTipi
Test / test (push) Has been cancelled
2025-12-29 06:12:04 +00:00
alexz 55ca6fe620 rego-tunnel: relax qcow2 root detection
Test / test (push) Has been cancelled
2025-12-29 05:46:19 +00:00
alexz 5478623d19 rego-tunnel: add configurable hostshare dir
Test / test (push) Has been cancelled
2025-12-29 05:38:06 +00:00
alexz 302c52c784 rego-tunnel: add configurable hostshare dir
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2025-12-29 01:41:37 +00:00
alexz 0020c539ea rego-tunnel: share APP_DATA_DIR via /hostshare + fix compose.json env
Test / test (push) Has been cancelled
2025-12-29 01:27:12 +00:00
alexz 6c790f84aa rego-tunnel: default TSCLIENT to APP_DATA_DIR + auto-mount 9p
Test / test (push) Has been cancelled
2025-12-29 00:57:47 +00:00
alexz 0ab6bb934d rego-tunnel: wire TSCLIENT + fix CIDR defaults
Test / test (push) Has been cancelled
2025-12-29 00:53:44 +00:00
alexz a5871d399b fix ip
Test / test (push) Has been cancelled
2025-12-29 00:49:16 +00:00
alexz 9c2c67fbe1 a
Test / test (push) Has been cancelled
2025-12-29 00:42:23 +00:00
alexz b6a6623406 z
Test / test (push) Has been cancelled
2025-12-29 00:40:32 +00:00
alexz beedccdc29 z
Test / test (push) Has been cancelled
2025-12-29 00:36:23 +00:00
alexz 11aaf00d8d add hostshare
Test / test (push) Has been cancelled
2025-12-28 23:51:22 +00:00
alexz 21c1fa5d9a a
Test / test (push) Has been cancelled
2025-12-28 23:31:45 +00:00
alexz 509814f3a8 rego-tunnel: export app-data as 9p TSCLIENT tag
Test / test (push) Has been cancelled
2025-12-28 23:15:19 +00:00
alexz 203e04101b update json
Test / test (push) Has been cancelled
2025-12-28 22:57:59 +00:00
alexz 2d98ca843f rego-tunnel: parameterize net + add DHCP static lease
Test / test (push) Has been cancelled
2025-12-28 22:56:51 +00:00
alexz 919f5904f8 ?
Test / test (push) Has been cancelled
2025-12-28 14:52:08 +00:00
alexz ea2a1ba94d feat(rego-tunnel): share /shared into VM via 9p
Test / test (push) Has been cancelled
2025-12-28 14:41:13 +00:00
alexz 776666a77a fix zip
Test / test (push) Has been cancelled
2025-12-28 14:11:58 +00:00
alexz 9bde91f047 fix(rego-tunnel): exclude swap files from ssh.zip
Test / test (push) Has been cancelled
2025-12-28 14:08:32 +00:00
alexz 03c1181186 change nic
Test / test (push) Has been cancelled
2025-12-28 13:52:20 +00:00
alexz 022c455334 fix(rego-tunnel): detect outbound iface for NAT
Test / test (push) Has been cancelled
2025-12-28 13:14:29 +00:00
alexz 0461ffec7c .
Test / test (push) Has been cancelled
2025-12-28 13:10:05 +00:00
alexz f9c17c644a . 2025-12-28 13:09:48 +00:00
alexz 68a9af9331 .
Test / test (push) Has been cancelled
2025-12-28 08:06:31 +00:00
alexz 016e663eef change image
Test / test (push) Has been cancelled
2025-12-28 08:02:46 +00:00
alexz a343aecc0d Persist rego-tunnel qcow2 under user-config; remove rego-tunnel-linux
Test / test (push) Has been cancelled
2025-12-28 06:41:10 +00:00
alexz c76afb2380 Extract ssh.zip to /root/.ssh/zip at startup
Test / test (push) Has been cancelled
2025-12-28 06:12:35 +00:00
alexz d22818669f Remove rego-tunnel build docker-compose
Test / test (push) Has been cancelled
2025-12-28 06:06:02 +00:00
alexz 5c9609b509 rego-tunnel: use localhost:8108 image
Test / test (push) Has been cancelled
2025-12-28 02:55:37 +00:00
alexz 716a5bed7d rego-tunnel: listen on 8006; publish 8006
Test / test (push) Has been cancelled
2025-12-28 02:17:52 +00:00
alexz 1fb683ce68 Update apps/rego-tunnel/docker-compose.yml
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2025-12-28 01:27:52 +00:00
alexz c9450ed5fc Ignore ssh.zip bundles
Test / test (push) Has been cancelled
2025-12-27 22:47:17 +00:00
alexz 98e91e46aa Add TAP networking for transparent VPN routing
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2025-12-25 19:00:02 +00:00
alexz ab4fbeaef8 Update config.json for Linux VM
Test / test (push) Has been cancelled
2025-12-25 08:09:08 +00:00
alexz 57baf4c289 Bump tipi_version to 2 for regeneration
Test / test (push) Has been cancelled
2025-12-25 08:04:05 +00:00
alexz 4efb8d205f Update rego-tunnel to use linux-vm from container registry
Test / test (push) Has been cancelled
2025-12-25 07:53:58 +00:00
alexz 3a674bc44d Add linux-vm Docker build files for rego-tunnel
Test / test (push) Has been cancelled
2025-12-25 07:39:42 +00:00
alexz 25a1985d20 Remove cgroupns settings
Test / test (push) Has been cancelled
2025-12-25 02:34:53 +00:00
alexz dd2d860243 Add cgroupnsMode to docker-compose.json
Test / test (push) Has been cancelled
2025-12-25 02:30:29 +00:00
alexz ece0198ff5 Add cgroupns_mode to docker-compose.yml
Test / test (push) Has been cancelled
2025-12-25 02:23:39 +00:00
alexz c6903bb2a0 Systemd init with /sbin/init, services for vpnagentd and entrypoint
Test / test (push) Has been cancelled
2025-12-25 02:21:19 +00:00
alexz b96e3a46bf Use systemd as init with /sbin/init
Test / test (push) Has been cancelled
Renovate / renovate (push) Has been cancelled
2025-12-25 01:55:07 +00:00
alexz 7b0065f75a Fix cgroupns_mode syntax for docker-compose
Test / test (push) Has been cancelled
2025-12-25 01:13:55 +00:00
alexz 2aba0ee03b Add cgroupns=host for systemd in cgroup v2
Test / test (push) Has been cancelled
2025-12-25 01:13:20 +00:00