See the blog (Chinese) for how to build an Openconnect VPN Gateway for all the other devices in the same network. Via this gateway you can easily connect to the sources behind the VPN. VPN is managed by the RPi and will be always connected.

English version will be available soon (if I have time..)

A CLI tool to generate Duo 2FA passcode.


First time:

Get QR URL first. Add a new device for Duo, choose Add a new deviceTabletAndroidI have Duo Mobile installed, when the QR code show up, right click it and copy the image URL, then run the following cmd, you will get a 6 digit passcode.

python3 -qr <Duo QR URL>

After the first time:


Use openconnect to connect to VPN with only one line command.


Use systemd to keep your VPN connection always alive.


From official clash doc.

Use systemd to keep your clash always alive.


Clash config example.


View Github