# ForestVPN settings, one section (seam S2): written by LuCI (the app's rpcd ACL) and by this package's uci-defaults, read by
# /etc/init.d/forestvpn and by the kill switch (/lib/forestvpn/adapter.sh, which also reads dns, lan, table, rule_prio and
# notice_port with their defaults there, and writes offload_saved).
#
# NEVER here: an account number, a key, a pairing code, a ticket, a password. Those live in the daemon's state
# directory (/etc/forestvpn, mode 0600) or only in the replies of its control socket.
config forestvpn 'main'
	# 0 = the service is installed and configured but not started
	option enabled '1'
	# What the daemon registers as. `routeros` until the control plane maps `openwrt` (CP-1 is not deployed yet).
	option platform 'routeros'
	# The interfaces whose coming up makes sure the daemon runs, space separated.
	option wan 'wan'
	# 1 = the wizard is finished and the devices below go through ForestVPN; 0 = nothing is routed (a fresh install).
	option protect '0'
	# Who goes through ForestVPN: all (every device on the LAN), chosen (the devices routed `tunnel` below) or
	# except (every device but those routed `direct`).
	option mode 'all'
	# The kill switch: standard or strict.
	option killswitch 'standard'
	# One-tap updates: manual.
	option updates 'manual'
	# What uci-defaults added to network (and so what uninstall takes out again). Not a setting.
	option added ''
	# Packet size, if it must differ from the daemon's default:
	# option mtu '1416'

# One section per device the modes name, by MAC address:
# config device
#	option mac 'aa:bb:cc:dd:ee:ff'
#	option route 'tunnel'
