chore: update device-agent submodule + docker-compose + portfolio docs

2026-07-13 07:52:29 +07:00
parent 45d2e51062
commit f95763ae42
5 changed files with 52 additions and 6 deletions
@@ -220,6 +220,15 @@ Device health polled every 10 seconds:
 └─────────────────────────────────────────┘
 ```

+### Server-Side Config Sync
+
+Config changes (firewall rules, AllowedIPs, DNS, endpoint) are detected via SHA256 hash comparison:
+
+- Server computes `config_hash = SHA256(tunnelFields) + ":" + SHA256(forwards)`
+- Agent compares with previous hash → if different → tunnel rebuilds automatically
+- Works over both HTTP heartbeat (30s) and gRPC (immediate)
+- Agent never caches config — server loads fresh from DB each heartbeat
+
 ### QR Code Setup

 Generate QR codes for mobile WireGuard clients: