travel router

ansible/group_vars/vpnhub.example.yml

@@ -39,6 +39,16 @@ technitium_admin_password: ""
 # "" to disable registration.
 vpn_dns_zone: roam.atlashorizon.net
 
+# ── Travel routers (GL.iNet etc.) as roaming WireGuard peers ──
+# Each gets a /32 from 172.31.9.0/24 (hub is 172.31.9.1). Generate the
+# keypair on the router (or wg genkey) and paste the PUBLIC key here.
+# The init job also registers <name>.<vpn_dns_zone> A + PTR records.
+wg_travel_peers: []
+#wg_travel_peers:
+#  - { name: glinet-1, public_key: "xxxx=", ip: 172.31.9.11 }
+#  - { name: glinet-2, public_key: "yyyy=", ip: 172.31.9.12 }
+#  - { name: glinet-3, public_key: "zzzz=", ip: 172.31.9.13 }
+
 # ── Optional ──
 # Pin for deterministic Duo updates (e.g. "6.5.1"); bumping it forces a
 # refetch of the tarball on the next rebuild.