#+TITLE: WireGuard configs — not tracked
#+AUTHOR: Craig Jennings

This directory backs the installer's =import-wireguard-configs.sh=.

*This repo is public* (cgit at git.cjennings.net serves it over unauthenticated
https). Plaintext =*.conf= files carry live Proton =PrivateKey= material and are
gitignored here — never commit them.

Configs are supplied out-of-band: drop the plaintext =*.conf= into this
directory locally at install time (they stay gitignored), or fetch them from a
private store. Nothing here is tracked except this note and the .gitignore.

History: ten plaintext configs were committed and publicly exposed from
2026-07-05 to 2026-07-20. The keys were expired at Proton and every config was
purged from git history (filter-repo + server gc). See the closed WireGuard
security task in todo.org.