wg-mesh

Choose which peers this static peer's WireGuard config should tunnel to. Peers that already link to this peer (↤ italic in the table) are included in the downloaded config automatically — no need to add them here.

Copy this token now — it will not be shown again. Use it with:
wg-mesh-agent --server … --token <token>

Expires:

Scan with Google Authenticator, Authy, or any TOTP app. The secret is only shown once.

Move this peer to a different network. The overlay IP is preserved.
Nomad peers can also be unassigned (no active network).

⚠ To unassign, enable nomad mode first via ⇌ nomad.

A nomad peer detects its active network by matching local interface addresses against each network's LAN CIDRs, then connects via that network's gateway automatically.
If a public endpoint is set on the peer, gateway routing is skipped — it connects directly to all linked peers.

Networks without LAN CIDRs configured cannot be auto-detected — add LAN CIDRs under Networks → Edit.