=== STEP_034D XSMAP ENDPOINT PLAN === timestamp=20260708-114359 mode=read-only / package only goal: fix permanent MGTS endpoint in access-map/XS Map, VM130 admin WG, VM121 admin WG, and WG Paid client endpoint source domain=wg-studio.secret-studio.ru public_ip=95.165.105.4 admin_wg_endpoint=wg-studio.secret-studio.ru:51820 wgpaid_endpoint=wg-studio.secret-studio.ru:51830 remote_changes=none === DNS check from router-ops === 95.165.105.4 wg-studio.secret-studio.ru === router-ops / VM130 access-map and WG inventory === --- host --- router-ops Wed Jul 8 11:43:59 UTC 2026 --- access-map files --- -rw-r--r-- 1 ops ops 1074 Jul 6 15:42 /opt/router-ops/inventory/README.md -rw-r--r-- 1 ops ops 5478 Jul 6 15:42 /opt/router-ops/inventory/access-map.md -rw-r--r-- 1 ops ops 14392 Jul 6 15:42 /opt/router-ops/inventory/access-map.yml --- access-map command --- /opt/router-ops/bin/access-map # Access Map — router-ops / WG Paid This file is the human-readable source of truth for access paths. No private keys. No public keys. No WireGuard client configs. No passwords or tokens. Allowed here: - machine names - roles - IP addresses - SSH aliases - key file paths - non-secret operational notes Rules: - Do not create new SSH/WG keys unless explicitly requested. - Before suggesting access commands, read /opt/router-ops/inventory/access-map.yml. - Prefer existing SSH aliases and existing key files. - Do not print private keys or WireGuard configs. - Use ssh -n for nested SSH from Proxmox to OpenWRT inside heredocs. ============================================================ MAIN ACCESS PATH TO PVE-WG-PAID ============================================================ router-ops WG router-ops-mgts 10.250.100.4/32 -> VM100 wg_remote 10.250.100.1/24 -> Proxmox pve-wg-paid 10.71.100.222 Command from router-ops: ssh pve-mgts Expected SSH path: source: 10.250.100.4 target: 10.71.100.222 ============================================================ MACHINES ============================================================ router-ops ---------- Role: operations VM User: ops Known address: 192.168.30.84 WG interface: router-ops-mgts WG address: 10.250.100.4/32 Systemd service: wg-quick@router-ops-mgts Expected service state: enabled active ------------------------------------------------------------ pve-wg-paid ----------- Role: Proxmox host for WG Paid / MGTS deployment SSH alias from router-ops: pve-mgts SSH user: root Management IP: 10.71.100.222 SSH key path on router-ops: ~/.ssh/router_ops_pve_mgts_ed25519 Network: vmbr0: WAN bridge, no IPv4 on Proxmox host vmbr1: 10.71.100.222/24 internal LAN vmbr2: 192.168.99.1/24 emergency vmbr3: transit VPN bridge, no host IP vmbr4: transit direct bridge, no host IP Route back to WG admin net: 10.250.100.0/24 via 10.71.100.1 dev vmbr1 Old temporary DDN IP: 192.168.30.249 Old temporary DDN IP status: deprecated do not rely on it ------------------------------------------------------------ MGTS VM100 core --------------- VMID: 100 Hostname: VM100-OpenWRT-core Role: OpenWRT core router for pve-wg-paid SSH from Proxmox: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 Addresses: br-lan: 10.71.100.1/24 wg_remote: 10.250.100.1/24 direct transit: 10.201.0.1/24 vpn transit: 10.200.0.1/24 wg_remote: listen UDP: 51820 wg_remote peers: support-mgts: 10.250.100.2/32 owner-mgts: 10.250.100.3/32 router-ops-mgts: 10.250.100.4/32 Snapshots: MGTS_RESTORED_BEFORE_FIRST_BOOT MGTS_INTERNAL_LAN_RENUMBERED_OK MGTS_VM100_WG_REMOTE_ROTATED_OK MGTS_VM100_ROUTER_OPS_WG_PEER_OK ------------------------------------------------------------ MGTS VM101 edge --------------- VMID: 101 Hostname: VM101-OpenWRT-edge Role: OpenWRT edge / WAN / VPN egress for pve-wg-paid SSH from Proxmox: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 Addresses: WAN eth0: DHCP behind vmbr0 mgmt eth2: 10.71.100.2/24 vpn_in eth1: 10.200.0.2/24 direct_in eth3: 10.201.0.2/24 Route back to admin WG: 10.250.100.0/24 via 10.71.100.1 dev eth2 Snapshots: MGTS_RESTORED_BEFORE_FIRST_BOOT MGTS_INTERNAL_LAN_RENUMBERED_OK MGTS_VM101_CURRENT_20260702_OK ============================================================ TEMPORARY NOTES ============================================================ router-ops-mgts currently uses temporary DDN test endpoint: 192.168.30.218:51820 On MGTS site, update endpoint to real public IP/DNS or MGTS router forward/DMZ address. HideMyName/AWG keys still need future replacement before production use. --- ## VM121 direct MGTS admin access Status: confirmed. Recorded: 2026-07-06T15:42:33 Purpose: VM121 wg-access-dev has its own direct administrative WireGuard access to MGTS 10.71.100.0/24. VM130/router-ops is only an operator/control node. VM130 is not a transit router for VM121. Direct admin WireGuard: VM121 interface: wg-mgts VM121 WG address: 10.250.100.121/32 MGTS server side: VM100 wg_remote MGTS WG server addr: 10.250.100.1/24 MGTS LAN reachable: 10.71.100.0/24 Confirmed reachable targets from VM121: 10.71.100.1 MGTS VM100 OpenWRT core 10.71.100.2 MGTS VM101 OpenWRT edge 10.71.100.222 MGTS Proxmox pve-wg-paid SSH access paths: router-ops -> pve-mgts: command: ssh pve-mgts --- grep MGTS/old/new endpoints in router-ops inventory/configs --- /opt/router-ops/inventory/access-map.yml:21: wg_address: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml:27: ssh_alias_from_router_ops: pve-mgts /opt/router-ops/inventory/access-map.yml:29: management_ip: 10.71.100.222 /opt/router-ops/inventory/access-map.yml:34: vmbr1: 10.71.100.222/24 internal LAN /opt/router-ops/inventory/access-map.yml:39: - 10.250.100.0/24 via 10.71.100.1 dev vmbr1 /opt/router-ops/inventory/access-map.yml:47: host: 10.71.100.1 /opt/router-ops/inventory/access-map.yml:50: br_lan: 10.71.100.1/24 /opt/router-ops/inventory/access-map.yml:51: wg_remote: 10.250.100.1/24 /opt/router-ops/inventory/access-map.yml:55: listen_udp: 51820 /opt/router-ops/inventory/access-map.yml:57: support-mgts: 10.250.100.2/32 /opt/router-ops/inventory/access-map.yml:58: owner-mgts: 10.250.100.3/32 /opt/router-ops/inventory/access-map.yml:59: router-ops-mgts: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml:72: host: 10.71.100.2 /opt/router-ops/inventory/access-map.yml:76: mgmt_eth2: 10.71.100.2/24 /opt/router-ops/inventory/access-map.yml:79: route_back_to_admin_wg: 10.250.100.0/24 via 10.71.100.1 dev eth2 /opt/router-ops/inventory/access-map.yml:89: address: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml:92: current_test_endpoint: 192.168.30.218:51820 /opt/router-ops/inventory/access-map.yml:93: server: mgts_vm100_core wg_remote 10.250.100.1 UDP 51820 /opt/router-ops/inventory/access-map.yml:95: - 10.250.100.0/24 /opt/router-ops/inventory/access-map.yml:96: - 10.71.100.0/24 /opt/router-ops/inventory/access-map.yml:104: command: ssh pve-mgts /opt/router-ops/inventory/access-map.yml:105: alias: pve-mgts /opt/router-ops/inventory/access-map.yml:106: expected_target: 10.71.100.222 /opt/router-ops/inventory/access-map.yml:107: expected_source: 10.250.100.4 /opt/router-ops/inventory/access-map.yml:114: command: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 /opt/router-ops/inventory/access-map.yml:121: command: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 /opt/router-ops/inventory/access-map.yml:127: alias: pve-mgts-old-ddn /opt/router-ops/inventory/access-map.yml:150: cidr: 10.71.100.0/24 /opt/router-ops/inventory/access-map.yml:154: cidr: 10.250.100.0/24 /opt/router-ops/inventory/access-map.yml:247: wg_remote_udp: 51820 /opt/router-ops/inventory/access-map.yml:272: command: ssh pve-mgts /opt/router-ops/inventory/access-map.yml:274: ssh_connection: 10.250.100.4 -> 10.71.100.222:22 /opt/router-ops/inventory/access-map.yml:338: listen_port: 51830 /opt/router-ops/inventory/access-map.yml:382: interface_on_vm121: "wg-mgts" /opt/router-ops/inventory/access-map.yml:383: vm121_wg_address: "10.250.100.121/32" /opt/router-ops/inventory/access-map.yml:385: server_wg_address: "10.250.100.1/24" /opt/router-ops/inventory/access-map.yml:387: - "10.71.100.0/24" /opt/router-ops/inventory/access-map.yml:391: ip: "10.71.100.1" /opt/router-ops/inventory/access-map.yml:393: ssh_from: "pve-mgts" /opt/router-ops/inventory/access-map.yml:394: ssh_command: "ssh root@10.71.100.1" /opt/router-ops/inventory/access-map.yml:396: ip: "10.71.100.2" /opt/router-ops/inventory/access-map.yml:398: ssh_from: "pve-mgts" /opt/router-ops/inventory/access-map.yml:399: ssh_command: "ssh root@10.71.100.2" /opt/router-ops/inventory/access-map.yml:401: ip: "10.71.100.222" /opt/router-ops/inventory/access-map.yml:404: ssh_alias: "pve-mgts" /opt/router-ops/inventory/access-map.yml:407: pve_mgts: "ssh pve-mgts" /opt/router-ops/inventory/access-map.yml:414: listen_port_udp: 51830 /opt/router-ops/inventory/access-map.yml:436: admin_wg_interface: "wg-mgts" /opt/router-ops/inventory/access-map.yml:437: admin_wg_address: "10.250.100.121/32" /opt/router-ops/inventory/access-map.yml:440: management_lan: "10.71.100.0/24" /opt/router-ops/inventory/access-map.yml:442: wg_remote_server_ip: "10.71.100.1" /opt/router-ops/inventory/access-map.yml:443: wg_remote_server_address: "10.250.100.1/24" /opt/router-ops/inventory/access-map.yml:447: ip: "10.71.100.1" /opt/router-ops/inventory/access-map.yml:449: ssh_from_pve_mgts: "ssh -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1" /opt/router-ops/inventory/access-map.yml:451: ip: "10.71.100.2" /opt/router-ops/inventory/access-map.yml:453: ssh_from_pve_mgts: "ssh -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2" /opt/router-ops/inventory/access-map.yml:455: ip: "10.71.100.222" /opt/router-ops/inventory/access-map.yml:457: ssh_alias_from_router_ops: "pve-mgts" /opt/router-ops/inventory/access-map.yml:464: listen_port_udp: 51830 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:21: wg_address: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:27: ssh_alias_from_router_ops: pve-mgts /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:29: management_ip: 10.71.100.222 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:34: vmbr1: 10.71.100.222/24 internal LAN /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:39: - 10.250.100.0/24 via 10.71.100.1 dev vmbr1 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:47: host: 10.71.100.1 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:50: br_lan: 10.71.100.1/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:51: wg_remote: 10.250.100.1/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:55: listen_udp: 51820 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:57: support-mgts: 10.250.100.2/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:58: owner-mgts: 10.250.100.3/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:59: router-ops-mgts: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:72: host: 10.71.100.2 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:76: mgmt_eth2: 10.71.100.2/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:79: route_back_to_admin_wg: 10.250.100.0/24 via 10.71.100.1 dev eth2 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:89: address: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:92: current_test_endpoint: 192.168.30.218:51820 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:93: server: mgts_vm100_core wg_remote 10.250.100.1 UDP 51820 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:95: - 10.250.100.0/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:96: - 10.71.100.0/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:104: command: ssh pve-mgts /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:105: alias: pve-mgts /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:106: expected_target: 10.71.100.222 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:107: expected_source: 10.250.100.4 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:114: command: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:121: command: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:127: alias: pve-mgts-old-ddn /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:150: cidr: 10.71.100.0/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:154: cidr: 10.250.100.0/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:247: wg_remote_udp: 51820 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:272: command: ssh pve-mgts /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:274: ssh_connection: 10.250.100.4 -> 10.71.100.222:22 /opt/router-ops/inventory/access-map.yml.bak-20260706-134252:338: listen_port: 51830 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:12:VM121 wg-access-dev has its own direct admin WireGuard access to MGTS 10.71.100.0/24. /opt/router-ops/inventory/access-map-wg-paid-mgts.md:20:MGTS management LAN: 10.71.100.0/24 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:21:MGTS VM100 OpenWRT core: 10.71.100.1 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:22:MGTS VM101 OpenWRT edge: 10.71.100.2 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:23:MGTS Proxmox pve-wg-paid: 10.71.100.222 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:25:Admin WG remote network: 10.250.100.0/24 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:26:VM121 direct admin peer: 10.250.100.121/32 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:30:MGTS VM100 wg_paid port: UDP 51830 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:35:### router-ops -> pve-mgts /opt/router-ops/inventory/access-map-wg-paid-mgts.md:40:ssh alias: pve-mgts /opt/router-ops/inventory/access-map-wg-paid-mgts.md:42:ssh target: pve-mgts /opt/router-ops/inventory/access-map-wg-paid-mgts.md:77:### VM121 -> MGTS over wg-mgts /opt/router-ops/inventory/access-map-wg-paid-mgts.md:82:VM121 wg interface: wg-mgts /opt/router-ops/inventory/access-map-wg-paid-mgts.md:83:VM121 wg address: 10.250.100.121/32 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:84:MGTS wg_remote server: 10.250.100.1 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:85:Reachable MGTS targets: 10.71.100.1, 10.71.100.2, 10.71.100.222 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:88:Collected VM121 wg-mgts facts: /opt/router-ops/inventory/access-map-wg-paid-mgts.md:94:### pve-mgts -> VM100 / VM101 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:99:ssh root@10.71.100.1 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:100:ssh root@10.71.100.2 /opt/router-ops/inventory/access-map-wg-paid-mgts.md:103:Collected pve-mgts facts and SSH key fingerprints: /opt/router-ops/inventory/access-map-wg-paid-mgts.md:106:ssh: Could not resolve hostname pve-mgts: Name or service not known /opt/router-ops/inventory/access-map-wg-paid-mgts.md:114:VM121 -> 10.71.100.1 OK /opt/router-ops/inventory/access-map-wg-paid-mgts.md:115:VM121 -> 10.71.100.2 OK /opt/router-ops/inventory/access-map-wg-paid-mgts.md:116:VM121 -> 10.71.100.222 OK /opt/router-ops/inventory/access-map-wg-paid-mgts.md:119:10.250.100.121 via wg-mgts /opt/router-ops/inventory/access-map-wg-paid-mgts.md:149:VM121 must keep direct wg-mgts access to MGTS 10.71.100.0/24. /opt/router-ops/inventory/ssh-access-audit.sh:65: "pve-mgts|alias|ssh pve-mgts" /opt/router-ops/inventory/ssh-access-audit.sh:85: echo "--- pve-mgts via configured alias ---" /opt/router-ops/inventory/ssh-access-audit.sh:86: ssh -o BatchMode=yes -o ConnectTimeout=5 pve-mgts \ /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:21: wg_address: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:27: ssh_alias_from_router_ops: pve-mgts /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:29: management_ip: 10.71.100.222 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:34: vmbr1: 10.71.100.222/24 internal LAN /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:39: - 10.250.100.0/24 via 10.71.100.1 dev vmbr1 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:47: host: 10.71.100.1 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:50: br_lan: 10.71.100.1/24 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:51: wg_remote: 10.250.100.1/24 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:55: listen_udp: 51820 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:57: support-mgts: 10.250.100.2/32 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:58: owner-mgts: 10.250.100.3/32 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:59: router-ops-mgts: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:72: host: 10.71.100.2 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:76: mgmt_eth2: 10.71.100.2/24 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:79: route_back_to_admin_wg: 10.250.100.0/24 via 10.71.100.1 dev eth2 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:89: address: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:92: current_test_endpoint: 192.168.30.218:51820 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:93: server: mgts_vm100_core wg_remote 10.250.100.1 UDP 51820 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:95: - 10.250.100.0/24 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:96: - 10.71.100.0/24 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:104: command: ssh pve-mgts /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:105: alias: pve-mgts /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:106: expected_target: 10.71.100.222 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:107: expected_source: 10.250.100.4 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:114: command: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:121: command: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 /opt/router-ops/inventory/access-map.yml.before-extend-all-20260706_131706:127: alias: pve-mgts-old-ddn /opt/router-ops/inventory/README.md:33:VM121 has direct wg-mgts access to MGTS 10.71.100.0/24. /opt/router-ops/inventory/README.md:45: VM121 has direct wg-mgts access to MGTS 10.71.100.0/24. /opt/router-ops/inventory/access-map.md:30: WG router-ops-mgts 10.250.100.4/32 /opt/router-ops/inventory/access-map.md:31: -> VM100 wg_remote 10.250.100.1/24 /opt/router-ops/inventory/access-map.md:32: -> Proxmox pve-wg-paid 10.71.100.222 /opt/router-ops/inventory/access-map.md:36: ssh pve-mgts /opt/router-ops/inventory/access-map.md:40: source: 10.250.100.4 /opt/router-ops/inventory/access-map.md:41: target: 10.71.100.222 /opt/router-ops/inventory/access-map.md:63: 10.250.100.4/32 /opt/router-ops/inventory/access-map.md:81: pve-mgts /opt/router-ops/inventory/access-map.md:87: 10.71.100.222 /opt/router-ops/inventory/access-map.md:94: vmbr1: 10.71.100.222/24 internal LAN /opt/router-ops/inventory/access-map.md:100: 10.250.100.0/24 via 10.71.100.1 dev vmbr1 /opt/router-ops/inventory/access-map.md:125: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 /opt/router-ops/inventory/access-map.md:128: br-lan: 10.71.100.1/24 /opt/router-ops/inventory/access-map.md:129: wg_remote: 10.250.100.1/24 /opt/router-ops/inventory/access-map.md:134: listen UDP: 51820 /opt/router-ops/inventory/access-map.md:137: support-mgts: 10.250.100.2/32 /opt/router-ops/inventory/access-map.md:138: owner-mgts: 10.250.100.3/32 /opt/router-ops/inventory/access-map.md:139: router-ops-mgts: 10.250.100.4/32 /opt/router-ops/inventory/access-map.md:163: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 /opt/router-ops/inventory/access-map.md:167: mgmt eth2: 10.71.100.2/24 /opt/router-ops/inventory/access-map.md:172: 10.250.100.0/24 via 10.71.100.1 dev eth2 /opt/router-ops/inventory/access-map.md:185: 192.168.30.218:51820 /opt/router-ops/inventory/access-map.md:199: VM121 wg-access-dev has its own direct administrative WireGuard access to MGTS 10.71.100.0/24. /opt/router-ops/inventory/access-map.md:205: VM121 interface: wg-mgts /opt/router-ops/inventory/access-map.md:206: VM121 WG address: 10.250.100.121/32 /opt/router-ops/inventory/access-map.md:208: MGTS WG server addr: 10.250.100.1/24 /opt/router-ops/inventory/access-map.md:209: MGTS LAN reachable: 10.71.100.0/24 /opt/router-ops/inventory/access-map.md:213: 10.71.100.1 MGTS VM100 OpenWRT core /opt/router-ops/inventory/access-map.md:214: 10.71.100.2 MGTS VM101 OpenWRT edge /opt/router-ops/inventory/access-map.md:215: 10.71.100.222 MGTS Proxmox pve-wg-paid /opt/router-ops/inventory/access-map.md:219: router-ops -> pve-mgts: /opt/router-ops/inventory/access-map.md:220: command: ssh pve-mgts /opt/router-ops/inventory/access-map.md:221: target: 10.71.100.222 /opt/router-ops/inventory/access-map.md:229: pve-mgts -> MGTS VM100: /opt/router-ops/inventory/access-map.md:230: command: ssh -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 /opt/router-ops/inventory/access-map.md:232: pve-mgts -> MGTS VM101: /opt/router-ops/inventory/access-map.md:233: command: ssh -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 /opt/router-ops/inventory/access-map.md:237: VM121 -> 10.71.100.1 OK /opt/router-ops/inventory/access-map.md:238: VM121 -> 10.71.100.2 OK /opt/router-ops/inventory/access-map.md:239: VM121 -> 10.71.100.222 OK /opt/router-ops/inventory/STATUS-ACCESS-MAP-OK.txt:16: access-map pve-mgts-check /opt/router-ops/inventory/STATUS-ACCESS-MAP-OK.txt:19: router-ops -> pve-wg-paid uses ssh alias pve-mgts /opt/router-ops/inventory/STATUS-ACCESS-MAP-OK.txt:20: pve-mgts HostName is 10.71.100.222 /opt/router-ops/inventory/STATUS-ACCESS-MAP-OK.txt:22: router-ops WG address is 10.250.100.4/32 /opt/router-ops/inventory/STATUS-ACCESS-MAP-OK.txt:23: SSH path to Proxmox is 10.250.100.4 -> 10.71.100.222:22 /opt/router-ops/inventory/STATUS-ACCESS-MAP-OK.txt:25: Proxmox vmbr1 is 10.71.100.222/24 /opt/router-ops/inventory/STATUS-ACCESS-MAP-OK.txt:26: Proxmox route back to WG admin net is 10.250.100.0/24 via 10.71.100.1 /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt:9:Host pve-mgts /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt:10: HostName 10.71.100.222 /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt:16:Host pve-mgts-old-ddn /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt:31:256 SHA256:VioyXWj0uRI3X1JCLxz/hqP9KgeYujWbl/84FotLrys router-ops-to-pve-mgts (ED25519) /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt:46:10.71.100.0/24 dev router-ops-mgts scope link /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt:49:10.250.100.0/24 dev router-ops-mgts scope link /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt:63:--- pve-mgts via configured alias --- /opt/router-ops/inventory/ssh-access-audit-20260706_131850.txt:65:SSH_CONNECTION=10.250.100.4 43620 10.71.100.222 22 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:21: wg_address: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:27: ssh_alias_from_router_ops: pve-mgts /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:29: management_ip: 10.71.100.222 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:34: vmbr1: 10.71.100.222/24 internal LAN /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:39: - 10.250.100.0/24 via 10.71.100.1 dev vmbr1 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:47: host: 10.71.100.1 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:50: br_lan: 10.71.100.1/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:51: wg_remote: 10.250.100.1/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:55: listen_udp: 51820 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:57: support-mgts: 10.250.100.2/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:58: owner-mgts: 10.250.100.3/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:59: router-ops-mgts: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:72: host: 10.71.100.2 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:76: mgmt_eth2: 10.71.100.2/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:79: route_back_to_admin_wg: 10.250.100.0/24 via 10.71.100.1 dev eth2 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:89: address: 10.250.100.4/32 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:92: current_test_endpoint: 192.168.30.218:51820 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:93: server: mgts_vm100_core wg_remote 10.250.100.1 UDP 51820 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:95: - 10.250.100.0/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:96: - 10.71.100.0/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:104: command: ssh pve-mgts /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:105: alias: pve-mgts /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:106: expected_target: 10.71.100.222 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:107: expected_source: 10.250.100.4 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:114: command: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.1 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:121: command: ssh -n -i /root/.ssh/pve_to_openwrt_mgts_ed25519 root@10.71.100.2 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:127: alias: pve-mgts-old-ddn /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:150: cidr: 10.71.100.0/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:154: cidr: 10.250.100.0/24 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:247: wg_remote_udp: 51820 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:272: command: ssh pve-mgts /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:274: ssh_connection: 10.250.100.4 -> 10.71.100.222:22 /opt/router-ops/inventory/access-map.yml.bak-20260706-134742:338: listen_port: 51830 /opt/router-ops/inventory/ssh-access-audit.sh.before-key-filter-20260706_132249:68: "pve-mgts|alias|ssh pve-mgts" /opt/router-ops/inventory/ssh-access-audit.sh.before-key-filter-20260706_132249:88: echo "--- pve-mgts via configured alias ---" /opt/router-ops/inventory/ssh-access-audit.sh.before-key-filter-20260706_132249:89: ssh -o BatchMode=yes -o ConnectTimeout=5 pve-mgts \ /opt/router-ops/instances/mgts-main/instance.yml:12: wg_admin_ip: 10.250.100.4 /opt/router-ops/instances/mgts-main/instance.yml:15: alias: pve-mgts /opt/router-ops/instances/mgts-main/instance.yml:16: host: 10.71.100.222 /opt/router-ops/instances/mgts-main/instance.yml:28: - vm101_dnat_udp_51820_to_vm100_wg_remote /opt/router-ops/instances/mgts-main/instance.yml:29: - vm101_dnat_udp_51830_to_vm100_wg_paid /opt/router-ops/instances/mgts-main/networks.yml:3: cidr: 10.71.100.0/24 /opt/router-ops/instances/mgts-main/networks.yml:4: gateway: 10.71.100.1 /opt/router-ops/instances/mgts-main/networks.yml:5: vm100_ip: 10.71.100.1 /opt/router-ops/instances/mgts-main/networks.yml:6: vm101_ip: 10.71.100.2 /opt/router-ops/instances/mgts-main/networks.yml:7: proxmox_ip: 10.71.100.222 /opt/router-ops/instances/mgts-main/networks.yml:11: cidr: 10.250.100.0/24 /opt/router-ops/instances/mgts-main/networks.yml:13: server_ip: 10.250.100.1 /opt/router-ops/instances/mgts-main/networks.yml:14: listen_port: 51820 /opt/router-ops/instances/mgts-main/networks.yml:16: support_mgts: 10.250.100.2/32 /opt/router-ops/instances/mgts-main/networks.yml:17: owner_mgts: 10.250.100.3/32 /opt/router-ops/instances/mgts-main/networks.yml:18: router_ops_mgts: 10.250.100.4/32 /opt/router-ops/instances/mgts-main/networks.yml:19: vm121_wg_mgts: 10.250.100.121/32 /opt/router-ops/instances/mgts-main/networks.yml:26: listen_port: 51830 /opt/router-ops/instances/mgts-main/networks.yml:44: current_observed_ip: 95.165.105.4/20 /opt/router-ops/instances/mgts-main/networks.yml:49: ip: 10.71.100.2/24 /opt/router-ops/instances/mgts-main/networks.yml:50: route_back_to_admin_wg: 10.250.100.0/24 via 10.71.100.1 /opt/router-ops/instances/mgts-main/hosts.yml:5: ip: 10.71.100.222 /opt/router-ops/instances/mgts-main/hosts.yml:6: ssh_alias: pve-mgts /opt/router-ops/instances/mgts-main/hosts.yml:11: ip: 10.71.100.1 /opt/router-ops/instances/mgts-main/hosts.yml:22: ip: 10.71.100.2 /opt/router-ops/instances/mgts-main/hosts.yml:35: wg_mgts_ip: 10.250.100.121 /opt/router-ops/product/egress/docs/OPERATIONS.md:8:- VM101 DNAT UDP 51820 to VM100 wg_remote. /opt/router-ops/product/egress/docs/OPERATIONS.md:9:- VM101 DNAT UDP 51830 to VM100 wg_paid. /opt/router-ops/product/egress/docs/OPERATIONS.md:12:- VM121 direct admin access via wg-mgts. /home/ops/.ssh/config:2:Host pve-mgts /home/ops/.ssh/config:3: HostName 10.71.100.222 /home/ops/.ssh/config:9:Host pve-mgts-old-ddn --- local WG configs heads, redacted --- === VM121 WG/admin endpoint inventory === --- host --- wg-access-dev Wed Jul 8 11:43:59 UTC 2026 --- DNS check VM121 --- 95.165.105.4 wg-studio.secret-studio.ru --- wg interfaces --- wg-mgts UNKNOWN 10.250.100.121/32 interface: wg-mgts public key: DH9S3NewxZZjIhlshl9saO+5EdXafebWjxSkzNBkZEU= private key: listening port: 39845 peer: uTNh8zWnLbORIY2DZeKJMV+ygB+ii69hmDckI/T3h3Y= endpoint: 95.165.105.4:51820 allowed ips: 10.71.100.0/24, 10.250.100.1/32 latest handshake: 3 seconds ago transfer: 167.64 KiB received, 1.27 MiB sent persistent keepalive: every 25 seconds --- wg configs / endpoint refs --- /etc/wireguard/wg-step019b.conf:8:Endpoint = 192.168.30.1:51830 /etc/wireguard/wg-step020d.conf:8:Endpoint = 192.168.30.1:51830 /etc/wireguard/wg-step017.conf:8:Endpoint = 192.168.30.1:51830 /etc/wireguard/wg-step021c.conf:8:Endpoint = 192.168.30.1:51830 /etc/wireguard/wg-step022b.conf:8:Endpoint = 192.168.30.1:51830 /etc/wireguard/wg-mgts.conf:3:Address = 10.250.100.121/32 /etc/wireguard/wg-mgts.conf:7:Endpoint = 192.168.30.218:51820 /etc/wireguard/wg-mgts.conf:8:AllowedIPs = 10.71.100.0/24, 10.250.100.1/32 /opt/wg-access/DEFERRED_TASKS.md:8: WG_CLIENT_ENDPOINT=10.71.100.1:51830 /opt/wg-access/DEFERRED_TASKS.md:12: VM101 DNAT UDP 51830 -> MGTS VM100 10.71.100.1:51830 /opt/wg-access/STATUS-STEP-013_WG_HANDSHAKE_VM121_TO_VM100_OK.txt:19: listen_port: 51830 /opt/wg-access/STATUS-STEP-013_WG_HANDSHAKE_VM121_TO_VM100_OK.txt:23: 192.168.30.1:51830 /opt/wg-access/.env:13:WG_CLIENT_ENDPOINT=10.71.100.1:51830 /opt/wg-access/STATUS-STEP-016_CLIENT_CONFIG_RESPONSE_OK.txt:16: WG_CLIENT_ENDPOINT=192.168.30.1:51830 /opt/wg-access/STATUS-STEP-010_AGENT_SSH_TO_VM100_OK.txt:25: listen_port: 51830 /opt/wg-access/STATUS-STEP-011_MANUAL_WG_SET_VM100_OK.txt:27: listen_port: 51830 /opt/wg-access/agent/logs/agent.log:21: listening port: 51830 /opt/wg-access/agent/logs/agent.log:34: listening port: 51830 /opt/wg-access/agent/logs/agent.log:47: listening port: 51830 /opt/wg-access/agent/logs/agent.log:60: listening port: 51830 /opt/wg-access/agent/logs/agent.log:66: listening port: 51830 /opt/wg-access/agent/logs/agent.log:75: listening port: 51830 /opt/wg-access/agent/logs/agent.log:85: listening port: 51830 /opt/wg-access/agent/logs/agent.log:100: listening port: 51830 /opt/wg-access/agent/logs/agent.log:114: listening port: 51830 /opt/wg-access/agent/logs/agent.log:132: listening port: 51830 /opt/wg-access/agent/logs/agent.log:152: listening port: 51830 /opt/wg-access/agent/logs/agent.log:170: listening port: 51830 /opt/wg-access/agent/logs/agent.log:196: listening port: 51830 /opt/wg-access/agent/logs/agent.log:202: listening port: 51830 /opt/wg-access/agent/logs/agent.log:209: listening port: 51830 /opt/wg-access/agent/logs/agent.log:216: listening port: 51830 /opt/wg-access/agent/logs/agent.log:225: listening port: 51830 /opt/wg-access/agent/logs/agent.log:235: listening port: 51830 /opt/wg-access/agent/logs/agent.log:249: listening port: 51830 /opt/wg-access/agent/logs/agent.log:255: listening port: 51830 /opt/wg-access/agent/logs/agent.log:263: listening port: 51830 /opt/wg-access/agent/logs/agent.log:270: listening port: 51830 /opt/wg-access/agent/logs/agent.log:277: listening port: 51830 /opt/wg-access/agent/logs/agent.log:284: listening port: 51830 /opt/wg-access/agent/logs/agent.log:291: listening port: 51830 /opt/wg-access/agent/logs/agent.log:298: listening port: 51830 /opt/wg-access/agent/logs/agent.log:305: listening port: 51830 /opt/wg-access/agent/logs/agent.log:312: listening port: 51830 /opt/wg-access/agent/logs/agent.log:319: listening port: 51830 /opt/wg-access/agent/logs/agent.log:326: listening port: 51830 /opt/wg-access/agent/logs/agent.log:333: listening port: 51830 /opt/wg-access/agent/logs/agent.log:340: listening port: 51830 /opt/wg-access/agent/logs/agent.log:347: listening port: 51830 /opt/wg-access/agent/logs/agent.log:354: listening port: 51830 /opt/wg-access/agent/logs/agent.log:361: listening port: 51830 /opt/wg-access/agent/logs/agent.log:368: listening port: 51830 /opt/wg-access/agent/logs/agent.log:375: listening port: 51830 /opt/wg-access/agent/logs/agent.log:382: listening port: 51830 /opt/wg-access/agent/logs/agent.log:389: listening port: 51830 /opt/wg-access/agent/logs/agent.log:396: listening port: 51830 /opt/wg-access/agent/logs/agent.log:403: listening port: 51830 /opt/wg-access/agent/logs/agent.log:410: listening port: 51830 /opt/wg-access/agent/logs/agent.log:417: listening port: 51830 /opt/wg-access/agent/logs/agent.log:425: listening port: 51830 /opt/wg-access/agent/logs/agent.log:435: listening port: 51830 /opt/wg-access/agent/logs/agent.log:449: listening port: 51830 /opt/wg-access/agent/logs/agent.log:462: listening port: 51830 /opt/wg-access/agent/logs/agent.log:478: listening port: 51830 /opt/wg-access/agent/logs/agent.log:494: listening port: 51830 /opt/wg-access/agent/logs/agent.log:500: listening port: 51830 /opt/wg-access/agent/logs/agent.log:508: listening port: 51830 /opt/wg-access/agent/logs/agent.log:515: listening port: 51830 /opt/wg-access/agent/logs/agent.log:522: listening port: 51830 /opt/wg-access/agent/logs/agent.log:529: listening port: 51830 /opt/wg-access/agent/logs/agent.log:536: listening port: 51830 /opt/wg-access/agent/logs/agent.log:543: listening port: 51830 /opt/wg-access/agent/logs/agent.log:550: listening port: 51830 /opt/wg-access/agent/logs/agent.log:557: listening port: 51830 /opt/wg-access/agent/logs/agent.log:564: listening port: 51830 /opt/wg-access/agent/logs/agent.log:571: listening port: 51830 /opt/wg-access/agent/logs/agent.log:578: listening port: 51830 /opt/wg-access/agent/logs/agent.log:585: listening port: 51830 /opt/wg-access/agent/logs/agent.log:592: listening port: 51830 /opt/wg-access/agent/logs/agent.log:599: listening port: 51830 /opt/wg-access/agent/logs/agent.log:606: listening port: 51830 /opt/wg-access/agent/logs/agent.log:613: listening port: 51830 /opt/wg-access/agent/logs/agent.log:620: listening port: 51830 /opt/wg-access/agent/logs/agent.log:627: listening port: 51830 /opt/wg-access/agent/logs/agent.log:635: listening port: 51830 /opt/wg-access/agent/logs/agent.log:645: listening port: 51830 /opt/wg-access/agent/logs/agent.log:659: listening port: 51830 /opt/wg-access/agent/logs/agent.log:665: listening port: 51830 /opt/wg-access/agent/logs/agent.log:673: listening port: 51830 /opt/wg-access/agent/logs/agent.log:680: listening port: 51830 /opt/wg-access/agent/logs/agent.log:687: listening port: 51830 /opt/wg-access/agent/logs/agent.log:694: listening port: 51830 /opt/wg-access/agent/logs/agent.log:701: listening port: 51830 /opt/wg-access/agent/logs/agent.log:708: listening port: 51830 /opt/wg-access/agent/logs/agent.log:715: listening port: 51830 /opt/wg-access/agent/logs/agent.log:722: listening port: 51830 /opt/wg-access/agent/logs/agent.log:729: listening port: 51830 /opt/wg-access/agent/logs/agent.log:736: listening port: 51830 /opt/wg-access/agent/logs/agent.log:744: listening port: 51830 /opt/wg-access/agent/logs/agent.log:754: listening port: 51830 /opt/wg-access/agent/logs/agent.log:768: listening port: 51830 /opt/wg-access/agent/logs/agent.log:774: listening port: 51830 /opt/wg-access/agent/logs/agent.log:782: listening port: 51830 /opt/wg-access/agent/logs/agent.log:789: listening port: 51830 /opt/wg-access/agent/logs/agent.log:796: listening port: 51830 /opt/wg-access/agent/logs/agent.log:803: listening port: 51830 /opt/wg-access/agent/logs/agent.log:810: listening port: 51830 /opt/wg-access/agent/logs/agent.log:817: listening port: 51830 /opt/wg-access/agent/logs/agent.log:824: listening port: 51830 /opt/wg-access/agent/logs/agent.log:831: listening port: 51830 /opt/wg-access/agent/logs/agent.log:838: listening port: 51830 /opt/wg-access/agent/logs/agent.log:845: listening port: 51830 /opt/wg-access/agent/logs/agent.log:852: listening port: 51830 /opt/wg-access/agent/logs/agent.log:859: listening port: 51830 /opt/wg-access/agent/logs/agent.log:866: listening port: 51830 /opt/wg-access/agent/logs/agent.log:873: listening port: 51830 /opt/wg-access/agent/logs/agent.log:880: listening port: 51830 /opt/wg-access/agent/logs/agent.log:887: listening port: 51830 /opt/wg-access/agent/logs/agent.log:894: listening port: 51830 /opt/wg-access/agent/logs/agent.log:901: listening port: 51830 /opt/wg-access/agent/logs/agent.log:908: listening port: 51830 /opt/wg-access/agent/logs/agent.log:915: listening port: 51830 /opt/wg-access/agent/logs/agent.log:922: listening port: 51830 /opt/wg-access/agent/logs/agent.log:929: listening port: 51830 /opt/wg-access/agent/logs/agent.log:936: listening port: 51830 /opt/wg-access/agent/logs/agent.log:943: listening port: 51830 /opt/wg-access/agent/logs/agent.log:950: listening port: 51830 /opt/wg-access/agent/logs/agent.log:957: listening port: 51830 /opt/wg-access/agent/logs/agent.log:964: listening port: 51830 /opt/wg-access/agent/logs/agent.log:971: listening port: 51830 /opt/wg-access/agent/logs/agent.log:978: listening port: 51830 /opt/wg-access/agent/logs/agent.log:985: listening port: 51830 /opt/wg-access/agent/logs/agent.log:992: listening port: 51830 /opt/wg-access/agent/logs/agent.log:999: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1006: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1013: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1020: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1027: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1034: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1041: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1048: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1055: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1062: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1069: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1076: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1083: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1090: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1097: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1104: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1111: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1118: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1125: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1132: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1139: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1146: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1153: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1160: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1167: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1174: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1181: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1188: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1195: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1202: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1209: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1216: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1223: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1230: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1237: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1244: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1251: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1258: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1265: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1272: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1279: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1286: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1293: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1300: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1308: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1318: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1332: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1338: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1346: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1353: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1360: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1367: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1374: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1381: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1388: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1396: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1406: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1420: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1426: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1434: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1441: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1448: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1455: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1462: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1469: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1476: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1483: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1490: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1497: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1504: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1511: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1518: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1525: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1532: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1539: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1546: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1553: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1560: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1567: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1574: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1581: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1588: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1595: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1602: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1609: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1616: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1623: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1630: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1637: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1644: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1651: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1658: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1665: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1672: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1679: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1686: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1693: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1700: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1707: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1714: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1721: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1728: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1735: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1742: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1749: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1756: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1763: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1770: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1777: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1784: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1791: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1798: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1805: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1812: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1819: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1826: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1833: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1840: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1847: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1854: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1861: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1868: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1875: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1882: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1889: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1897: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1907: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1921: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1927: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1935: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1942: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1949: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1956: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1963: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1970: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1977: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1984: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1991: listening port: 51830 /opt/wg-access/agent/logs/agent.log:1998: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2005: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2012: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2019: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2026: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2033: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2040: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2047: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2054: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2061: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2068: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2075: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2083: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2093: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2107: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2113: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2121: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2128: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2135: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2142: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2149: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2156: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2163: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2170: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2177: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2184: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2191: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2198: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2205: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2212: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2219: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2226: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2233: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2240: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2247: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2254: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2261: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2268: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2275: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2282: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2289: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2296: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2303: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2310: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2317: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2324: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2331: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2338: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2345: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2352: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2359: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2366: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2373: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2380: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2387: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2394: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2401: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2408: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2415: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2422: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2429: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2436: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2443: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2450: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2457: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2464: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2471: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2478: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2485: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2492: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2499: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2506: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2513: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2520: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2527: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2534: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2541: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2548: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2555: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2562: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2569: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2576: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2583: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2590: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2597: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2604: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2611: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2618: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2625: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2632: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2639: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2646: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2653: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2660: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2667: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2674: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2681: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2688: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2695: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2702: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2709: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2716: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2723: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2730: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2737: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2744: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2751: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2758: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2765: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2772: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2779: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2786: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2793: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2800: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2807: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2814: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2821: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2828: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2835: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2842: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2849: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2856: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2863: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2870: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2877: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2884: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2891: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2898: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2905: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2912: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2919: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2926: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2933: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2940: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2947: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2954: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2961: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2968: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2975: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2982: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2989: listening port: 51830 /opt/wg-access/agent/logs/agent.log:2996: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3003: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3010: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3017: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3024: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3031: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3038: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3045: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3052: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3059: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3066: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3073: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3080: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3087: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3094: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3101: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3108: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3115: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3122: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3129: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3136: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3143: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3150: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3157: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3164: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3171: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3178: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3185: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3192: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3199: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3206: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3213: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3220: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3227: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3234: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3241: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3248: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3255: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3262: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3269: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3276: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3283: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3290: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3297: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3304: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3311: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3318: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3325: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3332: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3339: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3346: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3353: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3360: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3367: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3374: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3381: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3388: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3395: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3402: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3409: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3416: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3423: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3430: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3437: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3444: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3451: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3458: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3465: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3472: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3479: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3486: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3493: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3500: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3507: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3514: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3521: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3528: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3535: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3542: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3549: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3556: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3563: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3570: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3577: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3584: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3591: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3598: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3605: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3612: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3619: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3626: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3633: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3640: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3647: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3654: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3661: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3668: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3675: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3682: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3689: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3696: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3703: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3710: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3717: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3724: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3731: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3738: listening port: 51830 /opt/wg-access/agent/logs/agent.log:3745: listening port: 51830 --- candidate config heads, redacted --- ### /etc/wireguard/wg-mgts.conf [Interface] PrivateKey = Address = 10.250.100.121/32 [Peer] PublicKey = uTNh8zWnLbORIY2DZeKJMV+ygB+ii69hmDckI/T3h3Y= Endpoint = 192.168.30.218:51820 AllowedIPs = 10.71.100.0/24, 10.250.100.1/32 PersistentKeepalive = 25 ### /etc/wireguard/wg-step017.conf [Interface] PrivateKey = Address = 10.253.1.16/32 [Peer] PublicKey = rNdcZimQJKT6nb4wPmUFN/95bZfKDDsXsp1ie8nn1SU= PresharedKey = Endpoint = 192.168.30.1:51830 AllowedIPs = 10.253.1.1/32 PersistentKeepalive = 25 ### /etc/wireguard/wg-step019b.conf [Interface] PrivateKey = Address = 10.253.1.10/32 [Peer] PublicKey = rNdcZimQJKT6nb4wPmUFN/95bZfKDDsXsp1ie8nn1SU= PresharedKey = Endpoint = 192.168.30.1:51830 AllowedIPs = 10.253.1.1/32 PersistentKeepalive = 25 ### /etc/wireguard/wg-step020d.conf [Interface] PrivateKey = Address = 10.253.1.10/32 [Peer] PublicKey = rNdcZimQJKT6nb4wPmUFN/95bZfKDDsXsp1ie8nn1SU= PresharedKey = Endpoint = 192.168.30.1:51830 AllowedIPs = 10.253.1.1/32 PersistentKeepalive = 25 ### /etc/wireguard/wg-step021c.conf [Interface] PrivateKey = Address = 10.253.1.10/32 [Peer] PublicKey = rNdcZimQJKT6nb4wPmUFN/95bZfKDDsXsp1ie8nn1SU= PresharedKey = Endpoint = 192.168.30.1:51830 AllowedIPs = 10.253.1.1/32 PersistentKeepalive = 25 ### /etc/wireguard/wg-step022b.conf [Interface] PrivateKey = Address = 10.253.1.10/32 [Peer] PublicKey = rNdcZimQJKT6nb4wPmUFN/95bZfKDDsXsp1ie8nn1SU= PresharedKey = Endpoint = 192.168.30.1:51830 AllowedIPs = 10.253.1.1/32 PersistentKeepalive = 25 --- WG Access env/compose endpoint-related keys only --- ### /opt/wg-access/.env 12:WG_SERVER_PUBLIC_KEY=FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY= 13:WG_CLIENT_ENDPOINT=10.71.100.1:51830 14:WG_CLIENT_ALLOWED_IPS=0.0.0.0/0 15:WG_CLIENT_POOL_CIDR=10.253.0.0/16 16:WG_CLIENT_FIRST_IP=10.253.1.10 ### /opt/wg-access/.env.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636 ### /opt/wg-access/.env.BEFORE_MGTS_CLIENTCFG_20260706-185027 12:WG_SERVER_PUBLIC_KEY=rNdcZimQJKT6nb4wPmUFN/95bZfKDDsXsp1ie8nn1SU= 13:WG_CLIENT_ENDPOINT=192.168.30.1:51830 14:WG_CLIENT_ALLOWED_IPS=10.253.1.1/32 15:WG_CLIENT_POOL_CIDR=10.253.0.0/16 16:WG_CLIENT_FIRST_IP=10.253.1.10 ### /opt/wg-access/.env.BEFORE_MGTS_CLIENTCFG_20260706-185140 12:WG_SERVER_PUBLIC_KEY=FD1J+KVZ965pCjgtO0YWxJsKANY9uz6v1P54JLkiZzY= 13:WG_CLIENT_ENDPOINT=10.71.100.1:51830 14:WG_CLIENT_ALLOWED_IPS=0.0.0.0/0 15:WG_CLIENT_POOL_CIDR=10.253.0.0/16 16:WG_CLIENT_FIRST_IP=10.253.1.10 ### /opt/wg-access/agent/agent.env 2:NODE_ID=ddn-test 6:REMOTE_HOST=10.71.100.1 9:REMOTE_WG_INTERFACE=wg_paid ### /opt/wg-access/docker-compose.yml ### /opt/wg-access/tmp/mgts-smoke-20260706-184120/smoke.env 5:PUBLIC_KEY=zUUEdc+Lac9C6fmMDVosuO3ZIYHIUDWi34UVgdjhbCU= --- backend source endpoint-related grep --- /opt/wg-access/backend/app/models/core.py:85: # uq_peers_node_tunnel_ip_enabled (node_id, tunnel_ip) WHERE enabled = true, /opt/wg-access/backend/app/models/core.py:91: node_id: Mapped[str] = mapped_column(String(64), default="ddn-test", nullable=False, index=True) /opt/wg-access/backend/app/models/core.py:110: node_id: Mapped[str] = mapped_column(String(64), nullable=False, index=True) /opt/wg-access/backend/app/services/wireguard.py:41:def next_tunnel_ip(db: Session, node_id: str) -> str: /opt/wg-access/backend/app/services/wireguard.py:47: pool_cidr = os.environ.get("WG_CLIENT_POOL_CIDR", "10.253.0.0/16").strip() /opt/wg-access/backend/app/services/wireguard.py:48: first_client_ip = os.environ.get("WG_CLIENT_FIRST_IP", "10.253.1.10").strip() /opt/wg-access/backend/app/services/wireguard.py:54: raise RuntimeError(f"WG_CLIENT_FIRST_IP {first_client_ip} is outside {pool_cidr}") /opt/wg-access/backend/app/services/wireguard.py:59: Peer.node_id == node_id, /opt/wg-access/backend/app/services/wireguard.py:77:def build_client_config(private_key: , tunnel_ip: str, preshared_key: str) -> str: /opt/wg-access/backend/app/services/wireguard.py:78: server_public_key = os.environ.get("WG_SERVER_PUBLIC_KEY", "").strip() /opt/wg-access/backend/app/services/wireguard.py:79: endpoint = os.environ.get("WG_CLIENT_ENDPOINT", "").strip() /opt/wg-access/backend/app/services/wireguard.py:80: allowed_ips = os.environ.get("WG_CLIENT_ALLOWED_IPS", "10.253.1.1/32").strip() /opt/wg-access/backend/app/services/wireguard.py:81: dns = os.environ.get("WG_CLIENT_DNS", "").strip() /opt/wg-access/backend/app/services/wireguard.py:83: if not server_public_key: /opt/wg-access/backend/app/services/wireguard.py:84: raise RuntimeError("WG_SERVER_PUBLIC_KEY is not configured") /opt/wg-access/backend/app/services/wireguard.py:85: if not endpoint: /opt/wg-access/backend/app/services/wireguard.py:86: raise RuntimeError("WG_CLIENT_ENDPOINT is not configured") /opt/wg-access/backend/app/services/wireguard.py:100: f"PublicKey = {server_public_key}", /opt/wg-access/backend/app/services/wireguard.py:102: f"Endpoint = {endpoint}", /opt/wg-access/backend/app/api/admin.py:17: build_client_config, /opt/wg-access/backend/app/api/admin.py:66: node_id: str /opt/wg-access/backend/app/api/admin.py:88: node_id: str = "ddn-test" /opt/wg-access/backend/app/api/admin.py:97: node_id: str /opt/wg-access/backend/app/api/admin.py:103: client_config: str /opt/wg-access/backend/app/api/admin.py:108: # MVP admin/manual subscription endpoint. /opt/wg-access/backend/app/api/admin.py:127: tunnel_ip = next_tunnel_ip(db, payload.node_id) /opt/wg-access/backend/app/api/admin.py:130: client_config = build_client_config(private_key, tunnel_ip, preshared_key) /opt/wg-access/backend/app/api/admin.py:134: node_id=payload.node_id, /opt/wg-access/backend/app/api/admin.py:145: node_id=payload.node_id, /opt/wg-access/backend/app/api/admin.py:169: node_id=peer.node_id, /opt/wg-access/backend/app/api/admin.py:175: client_config=client_config, /opt/wg-access/backend/app/api/admin.py:219: node_id=peer.node_id, /opt/wg-access/backend/app/api/admin.py:282: node_id=peer.node_id, /opt/wg-access/backend/app/api/admin.py:313: node_id: str /opt/wg-access/backend/app/api/admin.py:330: node_id=peer.node_id, /opt/wg-access/backend/app/api/admin.py:348: node_id=peer.node_id, /opt/wg-access/backend/app/api/admin.py:358: node_id: str /opt/wg-access/backend/app/api/admin.py:392: node_id: str /opt/wg-access/backend/app/api/admin.py:406: node_id: str /opt/wg-access/backend/app/api/dev.py.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636:22: node_id: str = "ddn-test" /opt/wg-access/backend/app/api/dev.py.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636:63:def next_tunnel_ip(db: Session, node_id: str) -> str: /opt/wg-access/backend/app/api/dev.py.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636:66: select(func.count()).select_from(Peer).where(Peer.node_id == node_id) /opt/wg-access/backend/app/api/dev.py.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636:78: tunnel_ip = next_tunnel_ip(db, payload.node_id) /opt/wg-access/backend/app/api/dev.py.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636:85: node_id=payload.node_id, /opt/wg-access/backend/app/api/dev.py.BEFORE_CLIENT_CONFIG_RESPONSE.20260704-151636:96: node_id=payload.node_id, /opt/wg-access/backend/app/api/dev.py:15: build_client_config, /opt/wg-access/backend/app/api/dev.py:29: node_id: str = "ddn-test" /opt/wg-access/backend/app/api/dev.py:41: client_config: str /opt/wg-access/backend/app/api/dev.py:50: # Dev-only endpoint. /opt/wg-access/backend/app/api/dev.py:58: tunnel_ip = next_tunnel_ip(db, payload.node_id) /opt/wg-access/backend/app/api/dev.py:62: client_config = build_client_config(private_key, tunnel_ip, preshared_key) /opt/wg-access/backend/app/api/dev.py:66: node_id=payload.node_id, /opt/wg-access/backend/app/api/dev.py:77: node_id=payload.node_id, /opt/wg-access/backend/app/api/dev.py:104: client_config=client_config, /opt/wg-access/backend/app/api/dev.py.BEFORE_REAL_WG_KEYS.20260704-132545:19: node_id: str = "ddn-test" /opt/wg-access/backend/app/api/dev.py.BEFORE_REAL_WG_KEYS.20260704-132545:36:def next_tunnel_ip(db: Session, node_id: str) -> str: /opt/wg-access/backend/app/api/dev.py.BEFORE_REAL_WG_KEYS.20260704-132545:39: select(func.count()).select_from(Peer).where(Peer.node_id == node_id) /opt/wg-access/backend/app/api/dev.py.BEFORE_REAL_WG_KEYS.20260704-132545:51: tunnel_ip = next_tunnel_ip(db, payload.node_id) /opt/wg-access/backend/app/api/dev.py.BEFORE_REAL_WG_KEYS.20260704-132545:55: node_id=payload.node_id, /opt/wg-access/backend/app/api/dev.py.BEFORE_REAL_WG_KEYS.20260704-132545:66: node_id=payload.node_id, /opt/wg-access/backend/app/api/agent.py:23: node_id: str /opt/wg-access/backend/app/api/agent.py:36: node_id: str, /opt/wg-access/backend/app/api/agent.py:42: .where(Peer.node_id == node_id) /opt/wg-access/backend/app/api/agent.py:52: node_id: str /opt/wg-access/backend/app/api/agent.py:70: node_id: str, /opt/wg-access/backend/app/api/agent.py:77: .where(ProvisioningJob.node_id == node_id) /opt/wg-access/backend/app/api/admin.py.BEFORE_DISABLE_PEER.20260704-151253:59: node_id: str /opt/wg-access/backend/app/api/admin.py.BEFORE_DISABLE_PEER.20260704-151253:78: node_id: str /opt/wg-access/backend/app/api/agent.py.BEFORE_AGENT_PEERS_SYNC.20260704-133954:23: node_id: str /opt/wg-access/backend/app/api/agent.py.BEFORE_AGENT_PEERS_SYNC.20260704-133954:41: node_id: str, /opt/wg-access/backend/app/api/agent.py.BEFORE_AGENT_PEERS_SYNC.20260704-133954:48: .where(ProvisioningJob.node_id == node_id) --- API node/peer samples, redacted --- peer_count 20 [ { "id": "267835b6-84b6-4527-bd47-eee963e7a5c9", "user_id": "6a7eeddb-d012-403c-bf31-ea29a82c1d13", "node_id": "ddn-test", "public_key": "gXUwVRUraYFaUDv1BJ6GdxbZi6IoliYNBUe8wYRNERU=", "tunnel_ip": "10.253.1.10", "paid_until": "2026-09-02T16:19:03.151534Z", "enabled": false, "created_at": "2026-07-04T16:19:03.152686Z" }, { "id": "6a5f1655-8ebe-435e-bba6-1af2412d40c2", "user_id": "46a582e8-3822-4686-b9b9-8751061fde97", "node_id": "ddn-test", "public_key": "TuuRNB7urYUrpRq9gHqqMlqWfte0jSJooLXjZIIYKjs=", "tunnel_ip": "10.253.1.10", "paid_until": "2026-09-02T16:01:57.735658Z", "enabled": false, "created_at": "2026-07-04T16:01:57.736841Z" }, { "id": "9298ec04-26cf-44a7-8079-7a13664612fa", "user_id": "9bc16072-f8e5-489f-8817-c6778237d6d0", "node_id": "ddn-test", "public_key": "CJMx+fPoiz5TUmUHKF7JcKo9IrxBZZMEDk7aS/Temwk=", "tunnel_ip": "10.253.1.10", "paid_until": "2026-09-02T15:56:30.168829Z", "enabled": false, "created_at": "2026-07-04T15:56:30.178510Z" }, { "id": "1b19ed83-1cad-4d57-be9f-fded5270213c", "user_id": "2109fe84-fde0-4856-8268-030a43112782", "node_id": "ddn-test", "public_key": "mh6GsB55dOEZZCxiWy5PHGxcNSRcBLLNAUfgq4NV3jg=", "tunnel_ip": "10.253.1.16", "paid_until": "2026-09-02T15:26:17.089248Z", "enabled": false, "created_at": "2026-07-04T15:26:17.090574Z" }, { "id": "13543224-39f7-4cfc-917d-66a16e2e0e55", "user_id": "d360d32e-c7db-4688-846b-ecef626f12db", "node_id": "ddn-test", "public_key": "cMqUn9gKKZo0oh7vNotjs7s/UtuKVbl081arn6BPKik=", "tunnel_ip": "10.253.1.15", "paid_until": "2026-09-02T15:17:46.085909Z", "enabled": false, "created_at": "2026-07-04T15:17:46.096446Z" }, { "id": "813515db-bf25-46c9-bc83-c9c45d51ba68", "user_id": "ade5215e-4229-4e83-9012-f09f4691b4e6", "node_id": "ddn-test", "public_key": "TdYIwRgGjStiQW1gyZjgsaPP+/6WE1U0NcmK0eVEVXM=", "tunnel_ip": "10.253.1.14", "paid_until": "2026-09-02T13:28:02.954738Z", "enabled": false, "created_at": "2026-07-04T13:28:02.964577Z" }, { "id": "754b76bd-0e69-4184-ac0b-a9c5706dbf19", "user_id": "8c8e9a3f-740d-4f24-baa1-801904b4b50e", "node_id": "ddn-test", "public_key": "pub_cdnODJUM3pZBIS_Z3dOyBsHVi-Jq-4j_WiDuve84qDw", "tunnel_ip": "10.253.1.13", "paid_until": "2026-08-03T10:41:13.816901Z", "enabled": false, "created_at": "2026-07-04T10:41:13.818018Z" }, { "id": "4b39aa87-4b59-4c71-950b-cf2dca3e606f", "user_id": "1f0b0e4a-e3ea-4d11-89d1-18d0db370ba7", "node_id": "ddn-test", "public_key": "pub_BFUhgsp-ejx-tAwttmNzzPupN-c0-5sSS3YRaevqpes", "tunnel_ip": "10.253.1.12", "paid_until": "2026-08-03T10:37:34.525170Z", "enabled": false, "created_at": "2026-07-04T10:37:34.530114Z" }, { "id": "37361fae-0ad5-4a7a-8096-a59e1dde2d78", "user_id": "abe41583-990e-4d08-9572-a586acaf816f", "node_id": "ddn-test", "public_key": "pub_X1c2s8NhHk-msYA4Pe25gvmnZmhSRSsmrVob-exBUaw", "tunnel_ip": "10.253.1.11", "paid_until": "2026-09-02T10:28:54.187046Z", "enabled": false, "created_at": "2026-07-04T10:28:54.188090Z" }, { "id": "1c152b56-8f35-4bee-bdd7-154ff551077e", "user_id": "10de9cee-ffc9-4065-96fe-401ec593e250", "node_id": "ddn-test", "public_key": "pub_2aWI36SAPwbgiUQLZCVeTmoOAPSd2gjMX_uVNgYN1ag", "tunnel_ip": "10.253.1.10", "paid_until": "2026-09-02T10:28:02.539201Z", "enabled": false, "created_at": "2026-07-04T10:28:02.545211Z" } ] --- UCI/pending not applicable, local app pending check --- vm121_inventory_done=1 === Build apply package === === STEP_034D RESULT === dns_or_domain_lines=8 old_local_endpoint_lines=8 temp_public_ip_lines=5 final_domain_lines=5 access_map_related_lines=228 vm121_inventory_done_lines=1 wgpay_endpoint_related_lines=547 package=/opt/router-ops/apply-packages/20260708-114359_step034d_xsmap_endpoint_plan decision=PASS_XSMAP_ENDPOINT_PLAN_READY