From 06da418ded2b88e8d83fd02cb0f9bb7bd3c826bc Mon Sep 17 00:00:00 2001 From: yyamashita Date: Wed, 1 Jul 2026 17:35:43 +0900 Subject: Add file logging to VPN container for diagnostics Logs to /home/yyamashita/vpn-logs/charon.log (readable without root) to diagnose iPhone IKEv2 connection failures. Co-Authored-By: Claude Sonnet 4.6 --- vpn/docker-compose.yml | 1 + vpn/strongswan.conf | 8 ++++++++ 2 files changed, 9 insertions(+) diff --git a/vpn/docker-compose.yml b/vpn/docker-compose.yml index 1961a99..da62cac 100644 --- a/vpn/docker-compose.yml +++ b/vpn/docker-compose.yml @@ -11,5 +11,6 @@ services: - ./certs/server-chain.crt:/etc/swanctl/x509ca/server-chain.crt:ro - ./certs/server.key:/etc/swanctl/private/server.key:ro - ./users.conf:/etc/strongswan/users.conf:ro + - /home/yyamashita/vpn-logs:/var/log/strongswan environment: - VPN_DOMAIN=vpn.yyamashita.com diff --git a/vpn/strongswan.conf b/vpn/strongswan.conf index eeed46c..d207c49 100644 --- a/vpn/strongswan.conf +++ b/vpn/strongswan.conf @@ -10,6 +10,14 @@ charon { cfg = 3 knl = 2 } + /var/log/strongswan/charon.log { + default = 1 + ike = 4 + cfg = 3 + knl = 2 + append = yes + flush_line = yes + } } send_vendor_id = no } -- cgit v1.2.3