Force VPN Config

ForceVPN.mobileconfig

  <key>IKEv2</key>
  <dict>
    ***IKEv2 Configuration Info***
    <key>OnDemandEnabled</key>
        <integer>1</integer>
    <key>OnDemandRules</key>
        <array>
           <dict>
               <key>Action</key>
               <string>Connect</string>
               <key>URLStringProbe</key>
               <string>https://vpncheck.domain.com</string>
           </dict>
           <dict>
               <key>Action</key>
               <string>Disconnect</string>
               <key>URLStringProbe</key>
               <string>https://vpncheckint.domain.com</string>
           </dict>
           <dict>
               <key>Action</key>
               <string>Disconnect</string>
           </dict>
        </array>
    ***Remainder of IKEv2 Config***
  </dict>

VPNCheck.conf

server
{
        listen INTERFACE_IP:443;
        server_name vpncheck.domain.com vpncheckint.domain.com;

        access_log /var/log/nginx/vpncheck.domain.com.access.log combined buffer=16k;
        error_log /var/log/nginx/vpncheck.domain.com.error.log;

        include ssl.conf;

        location /
        {
                return 200 'VPN Up';
                add_header Content-Type text/plain;
                access_log off;
        }
}