osx launchd configuration to run a script every time system configuration (including networking) changes occur

network.watcher.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"
	"http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Label</key>
	<string>network.watcher</string>
	<key>ProgramArguments</key>
	<array>
		<string>/Users/danaqu/bin/docker-vpn-fix.sh</string>
	</array>
	<key>WatchPaths</key>
	<array>
		<string>/Library/Preferences/SystemConfiguration</string>
	</array>
</dict>
</plist>

setup.sh

# put file here and load it
# don't forget to update the executable path
sudo launchctl load /Library/LaunchDaemons/network.watcher.plist