chore: docker-compose, setup.sh, nexusguard.conf.example, update submodule

docker-compose.yml

@@ -50,6 +50,8 @@ services:
       - NFTABLES_TABLE=nexusguard
       - IPAM_POOL=10.172.0.0/16
       - GIN_MODE=release
+    volumes:
+      - ./nexusguard.conf:/etc/nexusguard/nexusguard.conf:ro
     depends_on:
       postgres:
         condition: service_healthy

nexusguard.conf.example

@@ -0,0 +1,25 @@
+# NexusGuard Server Configuration
+# This file is optional. Environment variables take precedence.
+# Format: export KEY=VALUE
+
+# Database
+# export DB_HOST=127.0.0.1
+# export DB_PORT=5432
+# export DB_USER=nexusguard
+# export DB_PASSWORD=nexusguard
+# export DB_NAME=nexusguard
+
+# Redis
+# export REDIS_ADDR=127.0.0.1:6379
+
+# Security
+# export JWT_SECRET=changeme
+# export SERVER_SALT=changeme
+
+# WireGuard
+# export NFTABLES_TABLE=nexusguard
+# export IPAM_POOL=10.172.0.0/16
+
+# Logging
+# export LOG_LEVEL=info
+# export GIN_MODE=release

setup.sh

@@ -28,6 +28,17 @@ else
     echo "[+] .env file already exists. Skipping environment generation."
 fi
 
+# 2. Config file generation
+if [ ! -f nexusguard.conf ]; then
+    if [ -f nexusguard.conf.example ]; then
+        echo "[+] Auto-generating nexusguard.conf from nexusguard.conf.example..."
+        cp nexusguard.conf.example nexusguard.conf
+        echo "[+] Config file created. All settings are commented out (env vars take precedence)."
+    fi
+else
+    echo "[+] nexusguard.conf already exists. Skipping config generation."
+fi
+
 # Make sure Docker Compose v2 is available
 if ! docker compose version &> /dev/null; then
     echo "[-] ERROR: docker compose (v2) is not available. Please install Docker and Docker Compose plugin."