{"id":20671641,"url":"https://github.com/ravensystem/alwaysathome","last_synced_at":"2025-04-19T18:40:25.362Z","repository":{"id":110172525,"uuid":"470929373","full_name":"RavenSystem/AlwaysAtHome","owner":"RavenSystem","description":"VPN solution based on IPSec IKEv2 for Apple devices","archived":false,"fork":false,"pushed_at":"2023-02-15T10:34:55.000Z","size":42,"stargazers_count":13,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-03-29T11:51:40.517Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RavenSystem.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"custom":["https://paypal.me/ravensystem"]}},"created_at":"2022-03-17T09:36:04.000Z","updated_at":"2024-02-04T19:19:23.000Z","dependencies_parsed_at":null,"dependency_job_id":"f3946314-e5a3-4e39-9ae2-eca2a73e9b21","html_url":"https://github.com/RavenSystem/AlwaysAtHome","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RavenSystem%2FAlwaysAtHome","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RavenSystem%2FAlwaysAtHome/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RavenSystem%2FAlwaysAtHome/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RavenSystem%2FAlwaysAtHome/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RavenSystem","download_url":"https://codeload.github.com/RavenSystem/AlwaysAtHome/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":249766749,"owners_count":21322650,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-16T20:28:40.409Z","updated_at":"2025-04-19T18:40:25.356Z","avatar_url":"https://github.com/RavenSystem.png","language":"Shell","funding_links":["https://paypal.me/ravensystem"],"categories":[],"sub_categories":[],"readme":"# AAH - Always At Home\n\n[![Donate](https://img.shields.io/badge/donate-PayPal-blue.svg)](https://paypal.me/ravensystem)\n\n[![Twitter](https://img.shields.io/twitter/follow/RavenSystem.svg?style=social)](https://twitter.com/RavenSystem)\n\n[![Chat](https://img.shields.io/discord/594630635696553994?style=social)](https://discord.gg/v8hyxj2)\n\nVPN solution based on IPSec IKEv2 for Apple devices.\n\nMain goal of this solution is to use native Apple VPN IPSec IKEv2 support with AES128 and SHA256, and on-demand feature to connect to VPN server automatically.\n\nAn IPSec compatible router with AsusWRT-Merlin firmware installed is needed. Check [AsusWRT-Merlin supported devices](https://github.com/RMerl/asuswrt-merlin.ng/wiki/Supported-Devices)\n\nTested AsusWRT-Merlin routers:\n- GT-AX6000\n- RT-AX88U\n- RT-AX86U\n- RT-AX58U\n- RT-AC5300\n- RT-AC86U\n- ~~RT-AC68U~~ does NOT support IPSec.\n\n## Installation on Asus-Merlin routers\n\nYou need a router running a recent version of [AsusWRT-Merlin-NG Firmware](https://www.asuswrt-merlin.net) with `Administration -\u003e System -\u003e Enable JFFS custom scripts and configs` sets to `Yes`.\n\n### 1. DDNS\n\nSetup a DDNS service to access to your public IP address from Internet using a hostname.\n\nIn router web, go to `WAN -\u003e DDNS` and configure as needed.\n\nIf Asus router is not connected directly to Internet, you must select `External` for `Method to retrieve WAN IP` and configure NAT UDP-4500 port to it, or DMZ.\n\n### 2. IPSec Setup\n\nEnter to router using SSH access, and exec following command:\n\n```shell\ncurl -o /jffs/scripts/ipsec.postconf https://raw.githubusercontent.com/RavenSystem/AlwaysAtHome/main/ipsec.postconf \u0026\u0026 chmod a+x /jffs/scripts/ipsec.postconf\n```\n\n### 3. Configure VPN users\n\nIn router web, go to `VPN -\u003e VPN Server -\u003e IPSec VPN`:\n- Set `Enable IPSec VPN Server` to `ON`.\n- Fill `Pre-shared Key` with any very strong pass-phrase. However, this field will not be used to connect to VPN Server. Use only alphanumeric characters to avoid compatibility issues with different code character sets.\n- At bottom, create all users with their passwords (use very strong passwords), using `+` button, and selecting `V1\u0026V2` for `Supported IKE version`. Use only alphanumeric characters to avoid compatibility issues with different code character sets.\n- When finish, click on `Apply`.\n\nIt is not possible to connect more than one device using same user at same time.\n\n## iOS/iPadOS/macOS Installation\n\nIn order to work with this VPN Server, a mobile profile is needed.\n\nDownload [AlwaysAtHome.mobileconfig template](https://github.com/RavenSystem/AlwaysAtHome/raw/main/AlwaysAtHome.mobileconfig)\n\nYou must edit template with a text editor, replacing these fields:\n- AAH_USERNAME: VPN Username\n- AAH_PASSWORD: VPN Password\n- AAH_HOSTNAME: DDNS Hostname (Warning, it appears twice).\n- AAH_MYWIFI_1, AAH_MYWIFI_2: SSID of WiFi networks where VPN is disabled. It is mandatory to add WiFi where this VPN Server is running.\n\nIt is possible to add more WiFi networks, addind more lines\n```xml\n\u003cstring\u003eAAH_MYWIFI\u003c/string\u003e\n```\n\nWhen finish, copy file to iPhone/iPad/macOS using AirDrop or similar, and install it from Settings.\n\n## Update a current installation\n\nDo step [2. IPSec Setup](#2-ipsec-setup) and then go to `VPN -\u003e VPN Server -\u003e IPSec VPN` in router web and click on `Apply`.\n\n## Uninstall\n\nEnter to router using SSH access, and exec following command:\n\n```shell\nrm -f /jffs/scripts/ipsec.postconf\n```\nThen, go to `VPN -\u003e VPN Server -\u003e IPSec VPN` in router web and click on `Apply`.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fravensystem%2Falwaysathome","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fravensystem%2Falwaysathome","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fravensystem%2Falwaysathome/lists"}