Files

alexz 6a5ccd5c02 Update to latest example-appstore structure with custom apps

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2025-12-18 09:00:15 +00:00

Dockerized OpenConnect-SSO with noVNC and Cloudflared

Setup

Copy .env.example to .env and fill values (URLs, servercert pins, VNC passwords, cloudflared tokens).
First-time SSO: leave OC_SSO_ARGS_*=--browser-display-mode visible.
Build and start: docker compose build docker compose up -d vpn_a

Open http://localhost:6901, complete SSO.

After success, attach app containers or start cloudflared_a.
Optional: switch to headless after first login: Set OC_SSO_ARGS_*=--browser-display-mode hidden (or headless) and restart the vpn service.

Each VPN runs in its own net namespace; routes from one cannot affect the other or the host.
DNS from the VPN applies within its container namespace and attached services only.
Persisted state lives in the named volumes mounted at /root (Playwright cache, configs).