Add file logging to VPN container for diagnostics

Logs to /home/yyamashita/vpn-logs/charon.log (readable without root)
to diagnose iPhone IKEv2 connection failures.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

1 files changed, 8 insertions, 0 deletions

diff --git a/vpn/strongswan.conf b/vpn/strongswan.conf
index eeed46c..d207c49 100644
--- a/vpn/strongswan.conf
+++ b/vpn/strongswan.conf
@@ -10,6 +10,14 @@ charon {
             cfg = 3
             knl = 2
         }
+        /var/log/strongswan/charon.log {
+            default = 1
+            ike = 4
+            cfg = 3
+            knl = 2
+            append = yes
+            flush_line = yes
+        }
     }
     send_vendor_id = no
 }