feat: add host-level WireGuard client via networking.wireguard

- Add wg0 interface config with agenix-managed secrets
- Revert compose submodule to remove NET_ADMIN from Hermes
- WireGuard runs at host level, all containers inherit the tunnel
This commit is contained in:
2026-05-05 02:11:41 +00:00
parent b9289a149d
commit cf279c4fb0
2 changed files with 36 additions and 1 deletions