feat: add ESP32 embedded agent + namespace VRF reference docs + update android-agent submodule

- apps/device-agent-embedded/: ESP32 WireGuard agent (C, ESP-IDF, mbedTLS) - reference/namespace-vrf/: Linux namespace/VRF network isolation docs - apps/android-agent: VPN permission check, StartResult sealed class
2026-09-13 14:39:24 +07:00
parent 88fa60901e
commit e523398fa8
31 changed files with 6766 additions and 1 deletions
@@ -0,0 +1,77 @@
+# NexusGuard Embedded Agent Configuration
+
+# Target
+CONFIG_IDF_TARGET="esp32"
+
+# WiFi
+CONFIG_ESP_WIFI_SSID=""
+CONFIG_ESP_WIFI_PASSWORD=""
+CONFIG_ESP_WIFI_AUTHMODE=WPA2_PSK
+CONFIG_ESP_WIFI_SCAN_TYPE=ACTIVE
+CONFIG_ESP_WIFI_CONNECT_TIMEOUT_MS=10000
+
+# HTTP Client
+CONFIG_ESP_HTTP_CLIENT_ENABLE_HTTPS=y
+CONFIG_ESP_HTTP_CLIENT_ENABLE_TLS=y
+CONFIG_ESP_TLS_USING_MBEDTLS=y
+
+# NVS
+CONFIG_NVS_ENCRYPTION=n
+CONFIG_NVS_PARTITION_ENCRYPTED=n
+
+# FreeRTOS
+CONFIG_FREERTOS_HZ=1000
+CONFIG_FREERTOS_TIMER_TASK_STACK_DEPTH=4096
+CONFIG_FREERTOS_TASK_FUNCTION_WRAPPER=n
+
+# LWIP
+CONFIG_LWIP_IP4_NAPT=n
+CONFIG_LWIP_NETIF_LOOPBACK=y
+
+# mbedTLS
+CONFIG_MBEDTLS_SSL_PROTO_TLS1_2=y
+CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_RSA=y
+CONFIG_MBEDTLS_AES_C=y
+CONFIG_MBEDTLS_GCM_C=y
+CONFIG_MBEDTLS_SHA256_C=y
+
+# Log Level
+CONFIG_LOG_DEFAULT_LEVEL=3
+CONFIG_LOG_DEFAULT_LEVEL_INFO=y
+
+# Stack Size
+CONFIG_ESP_MAIN_TASK_STACK_SIZE=8192
+CONFIG_ESP_SYSTEM_EVENT_TASK_STACK_SIZE=4096
+
+# Power Management
+CONFIG_PM_ENABLE=n
+CONFIG_PM_DFS_INIT_AUTO=y
+CONFIG_PM_DFS_APB_MAX_FREQ=80
+
+# Flash
+CONFIG_ESPTOOLPY_FLASHSIZE_4MB=y
+CONFIG_ESPTOOLPY_FLASHMODE=QIO
+CONFIG_ESPTOOLPY_FLASHFREQ_80M=y
+
+# Partition Table
+CONFIG_PARTITION_TABLE_SINGLE_APP=y
+CONFIG_PARTITION_TABLE_CUSTOM=n
+
+# Watchdog
+CONFIG_ESP_TASK_WDT=y
+CONFIG_ESP_TASK_WDT_TIMEOUT_S=10
+CONFIG_ESP_TASK_WDT_CHECK_IDLE_TASK_CPU0=y
+
+# HTTPS Server (for OTA in future)
+CONFIG_HTTPD_MAX_REQ_HDR_LEN=1024
+CONFIG_HTTPD_MAX_URI_LEN=512
+
+# Application Version
+CONFIG_NEXUSGUARD_AGENT_VERSION="1.0.0"
+
+# NexusGuard Server Configuration
+CONFIG_NEXUS_SERVER_URL="https://api-nexus.datadunia.com"
+CONFIG_NEXUS_REG_TOKEN=""
+CONFIG_NEXUS_SERVER_SALT=""
+CONFIG_NEXUS_WIFI_SSID=""
+CONFIG_NEXUS_WIFI_PASSWORD=""