From 06da418ded2b88e8d83fd02cb0f9bb7bd3c826bc Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Wed, 1 Jul 2026 17:35:43 +0900
Subject: Add file logging to VPN container for diagnostics

Logs to /home/yyamashita/vpn-logs/charon.log (readable without root)
to diagnose iPhone IKEv2 connection failures.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 vpn/strongswan.conf | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'vpn/strongswan.conf')

diff --git a/vpn/strongswan.conf b/vpn/strongswan.conf
index eeed46c..d207c49 100644
--- a/vpn/strongswan.conf
+++ b/vpn/strongswan.conf
@@ -10,6 +10,14 @@ charon {
             cfg = 3
             knl = 2
         }
+        /var/log/strongswan/charon.log {
+            default = 1
+            ike = 4
+            cfg = 3
+            knl = 2
+            append = yes
+            flush_line = yes
+        }
     }
     send_vendor_id = no
 }
-- 
cgit v1.2.3