diff --git a/README.md b/README.md
index e69cb5e33ba4f393c2a6d880378b89b0132af24b..e84d79616ab89e8e0d40de2c89e0be60fb10a4d6 100644
--- a/README.md
+++ b/README.md
@@ -33,4 +33,10 @@ shitty raspi-vents prevent os start!
     - kubernetes runner uf da kubernetes runner vo gitlab umstella
 
 ## additional deployments
-- [TIG stack](https://github.com/alekece/tig-stack) for monitoring 
+- [TIG stack](https://github.com/alekece/tig-stack) for monitoring
+
+# VPN
+- [tutorial](https://www.howtoforge.com/how-to-install-openconnect-vpn-server-on-ubuntu-22-04/)
+  - [openssl](https://support.microfocus.com/kb/doc.php?id=7013103) instead of letsencrypt, since letsencrypt wants to make HTTP request onto the server (lb in the middle => letsencrypt gets encrypted traffic, since https is defined as backend protocol; could be resolved with multiple ingresses)
+  - in config comment out last lines with sample vhost config
+- [android app](https://play.google.com/store/apps/details?id=com.github.digitalsoftwaresolutions.openconnect&hl=en&gl=US)