WireGuard clients
./scripts/wg-dev-client.sh my-laptop# import output/wireguard-clients/my-laptop/wg-umkim.confUse the client to reach hub WireGuard IP services (console NodePort, optional LLDAP UI). Do not expose those NodePorts on the WAN.
Additional guidance lives in docs/wireguard-operator-clients.md in the umkim repo.