See the blog (Chinese) for how to build an Openconnect VPN Gateway for all the other devices in the same network. Via this gateway you can easily connect to the sources behind the VPN. VPN is managed by the RPi and will be always connected.
English version will be available soon (if I have time..)
A CLI tool to generate Duo 2FA passcode.
Get QR URL first. Add a new device for Duo, choose
Add a new device –
I have Duo Mobile installed, when the QR code show up, right click it and copy the image URL, then run the following cmd, you will get a 6 digit passcode.
python3 duo.py -qr <Duo QR URL>
After the first time:
Use openconnect to connect to VPN with only one line command.
Use systemd to keep your VPN connection always alive.
From official clash doc.
Use systemd to keep your clash always alive.
Clash config example.