alexz
8523c79999
Some checks failed
Test / test (push) Has been cancelled
- Switch from linux-vm QEMU image to cisco-vpn native Docker image - Change port from 8006 to 6080 (noVNC) - Remove VM-specific config (RAM, CPU, bridges, taps, QEMU) - Add VPN credential fields (email, password, TOTP, VPN host) - Add auto-connect and VNC password options - Update description.md with new documentation - Simplify Docker requirements (no /dev/kvm needed) Benefits: - No QEMU/VM overhead - runs natively in Docker - Full Cisco Secure Client 5.1.14.145 with GUI - Auto-login with TOTP support - Auto-reconnect on disconnect Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
47 lines
1.9 KiB
YAML
Executable File
47 lines
1.9 KiB
YAML
Executable File
services:
|
|
rego-tunnel:
|
|
image: git.alexzaw.dev/alexz/cisco-vpn:latest
|
|
restart: unless-stopped
|
|
networks:
|
|
rego-tunnel_runtipi_network:
|
|
gw_priority: 0
|
|
tipi_main_network:
|
|
gw_priority: 1
|
|
environment:
|
|
VPN_EMAIL: ${VPN_EMAIL}
|
|
VPN_PASSWORD: ${VPN_PASSWORD}
|
|
VPN_TOTP_SECRET: ${VPN_TOTP_SECRET}
|
|
VPN_HOST: ${VPN_HOST}
|
|
VPN_AUTO_CONNECT: ${VPN_AUTO_CONNECT}
|
|
VNC_PASSWORD: ${VNC_PASSWORD}
|
|
TZ: ${TZ}
|
|
ports:
|
|
- ${APP_PORT}:6080
|
|
volumes:
|
|
- ${APP_DATA_DIR}/config:/config
|
|
- /etc/runtipi/user-config/runtipi/rego-tunnel/shared:/shared
|
|
labels:
|
|
generated: true
|
|
traefik.enable: true
|
|
traefik.docker.network: runtipi_tipi_main_network
|
|
traefik.http.middlewares.rego-tunnel-runtipi-web-redirect.redirectscheme.scheme: https
|
|
traefik.http.services.rego-tunnel-runtipi.loadbalancer.server.port: "6080"
|
|
traefik.http.routers.rego-tunnel-runtipi-insecure.rule: Host(`${APP_DOMAIN}`)
|
|
traefik.http.routers.rego-tunnel-runtipi-insecure.entrypoints: web
|
|
traefik.http.routers.rego-tunnel-runtipi-insecure.service: rego-tunnel-runtipi
|
|
traefik.http.routers.rego-tunnel-runtipi-insecure.middlewares: rego-tunnel-runtipi-web-redirect
|
|
traefik.http.middlewares.rego-tunnel-runtipi-auth.basicauth.users: "${BASICAUTH_USERS}"
|
|
traefik.http.routers.rego-tunnel-runtipi.rule: Host(`${APP_DOMAIN}`)
|
|
traefik.http.routers.rego-tunnel-runtipi.entrypoints: websecure
|
|
traefik.http.routers.rego-tunnel-runtipi.service: rego-tunnel-runtipi
|
|
traefik.http.routers.rego-tunnel-runtipi.tls.certresolver: myresolver
|
|
traefik.http.routers.rego-tunnel-runtipi.middlewares: rego-tunnel-runtipi-auth
|
|
runtipi.managed: true
|
|
runtipi.appurn: rego-tunnel:runtipi
|
|
cap_add:
|
|
- NET_ADMIN
|
|
devices:
|
|
- /dev/net/tun
|
|
privileged: true
|
|
stop_grace_period: 30s
|