# Cistech Tunnel (VPN + SSH)

- VPN: OpenConnect-SSO with noVNC for first-time SSO (port 6901)
- SSH tunnels: forwards to 10.3.1.201 inside the VPN namespace

Usage
- Copy `.env.example` to `.env` and adjust values.
- Build and start:
  docker compose build
  docker compose up -d vpn ssh_tunnel
- First-time SSO: open http://<host>:6901 and complete login; then set `OC_SSO_ARGS=--browser-display-mode hidden` and restart `vpn`.