{
  "name": "Rego Tunnel",
  "available": true,
  "port": 6080,
  "exposable": true,
  "dynamic_config": true,
  "id": "rego-tunnel",
  "description": "Cisco Secure Client VPN in Docker with noVNC web UI for accessing Rego environments. No VM overhead.",
  "tipi_version": 4,
  "version": "5.1.14.145",
  "categories": ["utilities"],
  "short_desc": "Cisco VPN tunnel to Rego environments (native Docker, no VM)",
  "author": "alexz",
  "source": "https://git.alexzaw.dev/alexz/runtipi",
  "form_fields": [
    {
      "type": "email",
      "label": "VPN Email",
      "hint": "Email address for VPN SSO login",
      "placeholder": "your-email@company.com",
      "required": false,
      "env_variable": "VPN_EMAIL",
      "default": ""
    },
    {
      "type": "password",
      "label": "VPN Password",
      "hint": "Password for VPN SSO login. Leave empty for manual login via noVNC.",
      "placeholder": "",
      "required": false,
      "env_variable": "VPN_PASSWORD",
      "default": ""
    },
    {
      "type": "text",
      "label": "TOTP Secret",
      "hint": "Base32 encoded TOTP secret for 2FA (from authenticator app setup). Leave empty if not using TOTP.",
      "placeholder": "",
      "required": false,
      "env_variable": "VPN_TOTP_SECRET",
      "default": ""
    },
    {
      "type": "text",
      "label": "VPN Host",
      "hint": "VPN server hostname (for reference)",
      "placeholder": "vpn.company.com",
      "required": false,
      "env_variable": "VPN_HOST",
      "default": ""
    },
    {
      "type": "boolean",
      "label": "Auto-Connect on Start",
      "hint": "Automatically connect to VPN when container starts (requires credentials above)",
      "required": false,
      "env_variable": "VPN_AUTO_CONNECT",
      "default": false
    },
    {
      "type": "password",
      "label": "VNC Password",
      "hint": "Password for noVNC web interface",
      "placeholder": "cisco123",
      "required": false,
      "env_variable": "VNC_PASSWORD",
      "default": "cisco123"
    },
    {
      "type": "text",
      "label": "Basic Auth Users",
      "hint": "Traefik basic auth users string (htpasswd format). Use generate-traefik-basicauth.sh to create.",
      "placeholder": "user:$$apr1$$hash",
      "required": false,
      "env_variable": "BASICAUTH_USERS",
      "default": ""
    }
  ],
  "supported_architectures": ["amd64"]
}