alexz
cfb6b04563
Some checks failed
Test / test (push) Has been cancelled
- Add systemd, dbus packages to Dockerfile - Pre-install Cisco Secure Client 5.1.14.145 binaries - Add hosts entries for VPN servers at runtime - Add cgroup volume mount for systemd support - Start dbus daemon in entrypoint for Cisco client 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Rego Tunnel
OpenConnect-SSO VPN client running in a container with noVNC for browser-based access.
Features
- OpenConnect-SSO: Cisco AnyConnect VPN with SSO/SAML authentication
- TOTP Support: Automatic 2FA via keyring integration
- Auto-reconnect: Automatically reconnects on disconnection
- noVNC: Browser-based VNC access on port 8806
- NAT/Masquerade: Routes traffic through VPN tunnel
- Cloudflared: Optional Cloudflare tunnel support
- SSH Tunnels: Optional SSH port forwarding
Runtipi Installation
- Install from the app store or custom repo
- Configure the required environment variables
- Start the app via Runtipi dashboard
First-time SSO Login
- Open noVNC at
http://<host>:8806 - Enter VNC password
- Complete SSO login in the browser window
- VPN will connect and auto-reconnect on disconnect
Source Files
source/Dockerfile: Container build filesource/entrypoint.sh: Container entrypoint with auto-reconnect
Environment Variables
| Variable | Required | Description |
|---|---|---|
| OC_URL | Yes | VPN server URL |
| OC_SERVERCERT | Yes | Server certificate pin |
| OC_USER | No | Username (enables hidden browser mode) |
| VNC_PASSWORD | Yes | noVNC access password |
| OC_TOTP_SECRET | No | TOTP secret for auto 2FA |
| NOVNC_PORT | No | noVNC port (default: 6901) |