diff options
| author | Pjotr Prins | 2025-03-06 11:18:31 +0100 |
|---|---|---|
| committer | Pjotr Prins | 2025-03-06 11:18:38 +0100 |
| commit | 37ad139a6a62886278687c3da93cd89d2dfd1672 (patch) | |
| tree | 415d50f7ca9b7b131504accb6d70364c7eb9f273 | |
| parent | 837314277125c5a39f97e79bad746ab2f0cdcec1 (diff) | |
| download | gn-gemtext-37ad139a6a62886278687c3da93cd89d2dfd1672.tar.gz | |
On VPN
| -rw-r--r-- | topics/deploy/uthsc-vpn-with-free-software.gmi | 5 | ||||
| -rw-r--r-- | topics/deploy/uthsc-vpn.scm | 4 |
2 files changed, 8 insertions, 1 deletions
diff --git a/topics/deploy/uthsc-vpn-with-free-software.gmi b/topics/deploy/uthsc-vpn-with-free-software.gmi index 43f6944..8320b33 100644 --- a/topics/deploy/uthsc-vpn-with-free-software.gmi +++ b/topics/deploy/uthsc-vpn-with-free-software.gmi @@ -10,6 +10,11 @@ $ openconnect-sso --server uthscvpn1.uthsc.edu --authgroup UTHSC ``` Note that openconnect-sso should be run as a regular user, not as root. After passing Duo authentication, openconnect-sso will try to gain root priviliges to set up the network routes. At that point, it will prompt you for your password using sudo. +## Recommended way + +The recommended way is to use Arun's g-expression setup using guix. See below. It should just work, provided you have the +chained certificate that you can get from the browser or one of us. + ## Avoid tunneling all your network traffic through the VPN (aka Split Tunneling) openconnect, by default, tunnels all your traffic through the VPN. This is not good for your privacy. It is better to tunnel only the traffic destined to the specific hosts that you want to access. This can be done using the vpn-slice script. diff --git a/topics/deploy/uthsc-vpn.scm b/topics/deploy/uthsc-vpn.scm index 73cb48b..c202273 100644 --- a/topics/deploy/uthsc-vpn.scm +++ b/topics/deploy/uthsc-vpn.scm @@ -9,7 +9,9 @@ ;; Put in the hosts you are interested in here. (define %hosts (list "octopus01" - "tux01.genenetwork.org")) + "tux01.genenetwork.org" + "tux03.genenetwork.org" + "tux04.genenetwork.org")) (define (ini-file name scm) "Return a file-like object representing INI file with @var{name} and |