Aegis Node
Hardened WireGuard gateway with a VPN-only control plane.
Built end to end: Ansible provisioning, FastAPI peer operations, firewall/DNS policy, dashboard, and visibility for day-two operations.
- Single playbook hardens and provisions the gateway.
- Admin surface stays behind the VPN interface.
- Peer lifecycle covers keys, IPs, configs, and QR export.
- Health, traffic, WireGuard, and SSH signals are visible.