alexz
8523c79999
Some checks failed
Test / test (push) Has been cancelled
- Switch from linux-vm QEMU image to cisco-vpn native Docker image - Change port from 8006 to 6080 (noVNC) - Remove VM-specific config (RAM, CPU, bridges, taps, QEMU) - Add VPN credential fields (email, password, TOTP, VPN host) - Add auto-connect and VNC password options - Update description.md with new documentation - Simplify Docker requirements (no /dev/kvm needed) Benefits: - No QEMU/VM overhead - runs natively in Docker - Full Cisco Secure Client 5.1.14.145 with GUI - Auto-login with TOTP support - Auto-reconnect on disconnect Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
72 lines
1.7 KiB
JSON
Executable File
72 lines
1.7 KiB
JSON
Executable File
{
|
|
"schemaVersion": 2,
|
|
"services": [
|
|
{
|
|
"name": "rego-tunnel",
|
|
"image": "git.alexzaw.dev/alexz/cisco-vpn:latest",
|
|
"environment": [
|
|
{
|
|
"key": "VPN_EMAIL",
|
|
"value": "${VPN_EMAIL}"
|
|
},
|
|
{
|
|
"key": "VPN_PASSWORD",
|
|
"value": "${VPN_PASSWORD}"
|
|
},
|
|
{
|
|
"key": "VPN_TOTP_SECRET",
|
|
"value": "${VPN_TOTP_SECRET}"
|
|
},
|
|
{
|
|
"key": "VPN_HOST",
|
|
"value": "${VPN_HOST}"
|
|
},
|
|
{
|
|
"key": "VPN_AUTO_CONNECT",
|
|
"value": "${VPN_AUTO_CONNECT}"
|
|
},
|
|
{
|
|
"key": "VNC_PASSWORD",
|
|
"value": "${VNC_PASSWORD}"
|
|
},
|
|
{
|
|
"key": "TZ",
|
|
"value": "${TZ}"
|
|
}
|
|
],
|
|
"internalPort": 6080,
|
|
"volumes": [
|
|
{
|
|
"hostPath": "${APP_DATA_DIR}/config",
|
|
"containerPath": "/config",
|
|
"readOnly": false,
|
|
"shared": false,
|
|
"private": false
|
|
},
|
|
{
|
|
"hostPath": "/etc/runtipi/user-config/runtipi/rego-tunnel/shared",
|
|
"containerPath": "/shared",
|
|
"readOnly": false,
|
|
"shared": false,
|
|
"private": false
|
|
}
|
|
],
|
|
"stopGracePeriod": "30s",
|
|
"sysctls": {},
|
|
"devices": [
|
|
"/dev/net/tun"
|
|
],
|
|
"privileged": true,
|
|
"capAdd": [
|
|
"NET_ADMIN"
|
|
],
|
|
"isMain": true,
|
|
"extraLabels": {
|
|
"traefik.http.middlewares.rego-tunnel-runtipi-auth.basicauth.users": "${BASICAUTH_USERS}",
|
|
"traefik.http.routers.rego-tunnel-runtipi.middlewares": "rego-tunnel-runtipi-auth",
|
|
"runtipi.managed": true
|
|
}
|
|
}
|
|
]
|
|
}
|