https://github.com/lennartbrandin/tailscale-vpn
Docker script to make vpns availabe as subnet routers or exit routes
https://github.com/lennartbrandin/tailscale-vpn
openconnect openconnect-vpn-client tailscale vpn wireguard
Last synced: 3 months ago
JSON representation
Docker script to make vpns availabe as subnet routers or exit routes
- Host: GitHub
- URL: https://github.com/lennartbrandin/tailscale-vpn
- Owner: lennartbrandin
- Created: 2024-10-22T10:08:56.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2025-07-13T11:37:34.000Z (3 months ago)
- Last Synced: 2025-07-13T13:21:01.961Z (3 months ago)
- Topics: openconnect, openconnect-vpn-client, tailscale, vpn, wireguard
- Language: Shell
- Homepage:
- Size: 4.88 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
This project provides a docker image to running tailscale alongside a vpn client. (Currently wireguard, openconnect, openvpn).
## Usage
Set the files as described below and run `docker compose up -d`.
Run `docker compose logs -f` to see the logs and find the tailscale login link.
### Wireguard
Specify `compose.yaml`, example:
```yaml
services:
myfavoritevpn0:
build:
context: .
args:
# ! This makes up the name of the vpn config file e.g wireguard-myv
- VPN_TYPE=wireguard
- VPN_NAME=myvpn # This is also the tailscale node name
volumes:
- ./myvpn0-data:/var/lib/tailscale
cap_add:
- NET_ADMIN
privileged: true
restart: unless-stopped
```
Put your config file as `wireguard-myvpn.conf` in the same directory as `compose.yaml`.
### Openconnect
Specify `compose.yaml`, example:
```yaml
services:
myfavoritevpn1:
build:
context: .
args:
# ! This makes up the name of the vpn config file e.g openconnect-myvpn.conf
- VPN_TYPE=openconnect
- VPN_NAME=myvpn # This is also the tailscale node name
env_file:
- openconnect-myvpn.conf
cap_add:
- NET_ADMIN
volumes:
- ./myvpn1-data:/var/lib/tailscale
privileged: true
restart: unless-stopped
```
Put your config file as `openconnect-myvpn.conf` in the same directory as `compose.yaml`.
If you use a CA cert, also save it as `openconnect-myvpn.pem` in the same directory.
E.g:
```bash
User=myusername
Password=mypassword
Server=myvpn.example.com
CACert=/vpn/mycert.pem # Change only name, /vpn/ is inside the container
Protocol=anyconnect # Keep this
```
### OpenVPN
Specify `compose.yaml`, example:
```yaml
services:
myfavoritevpn2:
build:
context: .
args:
# ! This makes up the name of the vpn config file e.g openvpn-myv
- VPN_TYPE=openvpn
- VPN_NAME=myvpn # This is also the tailscale node name
cap_add:
- NET_ADMIN
volumes:
- ./myvpn2-data:/var/lib/tailscale
privileged: true
restart: unless-stopped
```
Put your config file as `openvpn-myvpn.ovpn` in the same directory as `compose.yaml`.
This i only tested for user-pass auth, create a file `openvpn-myvpn.auth` with the following content:
```
username
password
```