Initial commit: SSL proxy / firewall appliance

Flask WebUI behind nginx reverse proxy with zone-based firewall, DHCP,
WireGuard, and ACME certificate management.

system/wireguard.conf

@@ -0,0 +1,29 @@
+# Auto-generated by vacuum-wall at {{ timestamp }}
+
+[Interface]
+  PrivateKey = {{ interface.private_key }}
+  Address = {{ interface.addresses | join(',') }}
+  ListenPort = {{ interface.listen_port }}
+{% if interface.post_up %}
+  PostUp = {{ interface.post_up }}
+{% endif %}
+{% if interface.post_down %}
+  PostDown = {{ interface.post_down }}
+{% endif %}
+{% for peer_name, peer in peers.items() %}
+
+[Peer]  # {{ peer_name }}
+  PublicKey = {{ peer.public_key }}
+{% if peer.preshared_key %}
+  PresharedKey = {{ peer.preshared_key }}
+{% endif %}
+{% if peer.endpoint %}
+  Endpoint = {{ peer.endpoint }}
+{% endif %}
+{% if peer.allowed_ips %}
+  AllowedIPs = {{ peer.allowed_ips | join(',') }}
+{% endif %}
+{% if peer.persistent_keepalive is not none %}
+  PersistentKeepalive = {{ peer.persistent_keepalive }}
+{% endif %}
+{% endfor %}