config interface 'loopback'
    option device 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option packet_steering '1'

# === BRIDGES ===
config device
    option name 'br-lan'
    option type 'bridge'
    list ports 'lan1'
    list ports 'lan2'
    list ports 'lan3'
    list ports 'lan4'

config device
    option type 'bridge'
    option name 'br-mgmt'
    list ports 'lan5'

# === BRIDGE VLANs ===
config bridge-vlan
    option device 'br-lan'
    option vlan '1'
    list ports 'lan1'
    list ports 'lan2'
    list ports 'lan3'
    list ports 'lan4'
    list ports 'phy0-ap0'
    list ports 'phy1-ap0'

config bridge-vlan
    option device 'br-lan'
    option vlan '2'
    list ports 'lan2:t'

# === L3 INTERFACES ===
config interface 'lan'
    option device 'br-lan.1'
    option proto 'static'
    option ipaddr '192.168.0.1'
    option netmask '255.255.255.0'

config interface 'vlan2_vms'
    option proto 'static'
    option ipaddr '172.16.10.254'
    option netmask '255.255.255.0'
    option device 'br-lan.2'

config interface 'management'
    option proto 'static'
    option device 'br-mgmt'
    option ipaddr '192.168.1.1'
    option netmask '255.255.255.0'

config interface 'wan'
    option device 'eth1'
    option proto 'dhcp'

config interface 'lte'
    option proto 'mbim'
    option device '/dev/cdc-wdm0'
    option apn 'internet.mts.ru'
    option metric '20'

config interface 'zerotier'
    option proto 'none'
    option device 'zt7t5aodqt'

# === AMNEZIAWG SERVER ===
config interface 'awg0'
    option proto 'amneziawg'
    option private_key '***REDACTED***'
    option listen_port '51820'
    list addresses '10.10.10.1/24'
    option awg_jc '4'
    option awg_jmin '40'
    option awg_jmax '70'
    option awg_s1 '0'
    option awg_s2 '0'
    option awg_h1 '1'
    option awg_h2 '2'
    option awg_h3 '3'
    option awg_h4 '4'
    option mtu '1280'

config amneziawg_awg0
    option description 'Phone'
    option public_key '1c1KX8pjJ70aNFRha3w6+I5g9n4dZnJSMoiz3gJ0BV8='
    option preshared_key '***REDACTED***'
    list allowed_ips '10.10.10.2/32'
    option persistent_keepalive '25'