10a9ae2eac
feat(port-forward): sync port forwards to nftables + update docs
...
- server-core: DNAT + forward rules for TCP/UDP port forwarding
- AGENTS.md: update device-agent description (systray support)
2026-06-17 06:38:04 +07:00
281ac48d28
docs: update AGENTS.md, archive plans
NexusGuard CI / server-core-test (push) Failing after 3m30s
NexusGuard CI / server-core-build (push) Has been skipped
NexusGuard CI / device-agent-test (push) Failing after 3s
NexusGuard CI / device-agent-cross-build (amd64, linux) (push) Has been skipped
NexusGuard CI / device-agent-cross-build (amd64, windows) (push) Has been skipped
NexusGuard CI / device-agent-cross-build (arm64, linux) (push) Has been skipped
NexusGuard CI / dashboard-test (push) Failing after 3s
NexusGuard CI / dashboard-dist (push) Has been skipped
2026-06-07 06:14:46 +07:00
155536d2c0
docs: add INPUT vs FORWARD chain architecture to AGENTS.md
NexusGuard CI / server-core-test (push) Failing after 4s
NexusGuard CI / server-core-build (push) Has been skipped
NexusGuard CI / device-agent-test (push) Failing after 3s
NexusGuard CI / device-agent-cross-build (amd64, linux) (push) Has been skipped
NexusGuard CI / device-agent-cross-build (amd64, windows) (push) Has been skipped
NexusGuard CI / device-agent-cross-build (arm64, linux) (push) Has been skipped
NexusGuard CI / dashboard-test (push) Failing after 5s
NexusGuard CI / dashboard-dist (push) Has been skipped
2026-06-04 20:02:36 +07:00
c23814bcda
docs: add WireGuard AllowedIPs server vs client architecture rule
...
NexusGuard CI / server-core-test (push) Failing after 4s
NexusGuard CI / server-core-build (push) Has been skipped
NexusGuard CI / device-agent-test (push) Failing after 3s
NexusGuard CI / device-agent-cross-build (amd64, linux) (push) Has been skipped
NexusGuard CI / device-agent-cross-build (amd64, windows) (push) Has been skipped
NexusGuard CI / device-agent-cross-build (arm64, linux) (push) Has been skipped
NexusGuard CI / dashboard-test (push) Failing after 4s
NexusGuard CI / dashboard-dist (push) Has been skipped
Documents the critical distinction between server-side (kernel routing table)
and client-side (conf file) AllowedIPs to prevent the same bug from recurring.
Server-side: always InternalIP/32 per peer.
Client-side: use EndpointAllowedIPs from DB.
2026-06-04 11:23:03 +07:00
045099faff
chore: docs, plans archive, script updates, submodule refs
2026-05-31 08:20:46 +07:00
64e29609b3
chore: update .gitignore, add docs site, plan docs
2026-05-23 04:16:13 +07:00
datadunia