The project was developed for personal use and tested for the joint use of server (ocserv-server) and client (openconnect-client-mikrotik) parts, and is also compatible with a mobile client. Linux server under the general control of the Angia webserver.
Container envs:
| Variable | Description |
|---|---|
URL | Server address, including ?secret for camouflage (required) |
VPN_USER / VPN_PASS | Username/password (required) |
AUTH_GROUP | Authorization group (optional) |
OTP | TOTP secret, if 2FA is enabled |
SERVER_CERT_HASH | Optional: certificate pin, needed only for self-signed servers |
SEARCH_DOMAINS | DNS servers/domains separated by space |
EXTRA_ARGS | Any additional openconnect flags |
RECONNECT_DELAY | Pause (sec) before reconnecting after a drop. Default is 5 |
GATEWAY | RouterOS veth gateway IP. If set, forces a clean default route restoration before each connection attempt — protects against leftover routes after an emergency SIGKILL |
LOCAL_NETWORKS | Comma/space-separated: this router's own LAN that should go through GATEWAY/veth rather than leaking into the tunnel during a full-tunnel. Requires GATEWAY |
TUNNEL_NETWORKS | Comma/space-separated: subnets that MUST go into the tunnel even if vpnc-script itself excluded them via a wide safety route (relevant if a network behind another router uses the same private range) |
Content type
Image
Digest
sha256:f373dbea0…
Size
12.2 MB
Last updated
3 days ago
docker pull anvarsoft/openconnect-client-mikrotik