Initial commit: SSL proxy / firewall appliance

Flask WebUI behind nginx reverse proxy with zone-based firewall, DHCP,
WireGuard, and ACME certificate management.

system/nginx/ssl_snippet.conf

@@ -0,0 +1,10 @@
+# Vacuum Wall — shared SSL settings
+# Regenerated automatically — do not edit manually
+
+ssl_protocols {{ ssl.protocols }};
+ssl_prefer_server_ciphers {{ "on" if ssl.prefer_server_ciphers else "off" }};
+ssl_ciphers {{ ssl.ciphers }};
+
+ssl_session_timeout 1d;
+ssl_session_cache   shared:TLS:10m;
+ssl_session_tickets off;