WireGuard clients
This content is for 0.1.0. Switch to the latest version for up-to-date documentation.
Create an operator client from the tagged checkout:
./scripts/wg-dev-client.sh <operator-name>The generated configuration and private key grant management-network access. Treat them as sensitive credentials: transfer them only to the intended device, protect local storage, revoke access when no longer needed, and never commit them.
Use the overlay for console and management APIs. Do not expose their NodePorts on the WAN. See Security and ports.