A token can be issued for a machine's tunnel key, and it joins through the tunnel

token issue --overlay-key records the key the machine made, binds the
token to it, gives the machine its address and makes it a peer of the
hub, pushing the hub before the token is shown. The token carries the
hub's tunnel and the bus at its holder's address on the private network,
and enrolment refuses any other key (novox/hq ADR 0169). The bus is no
longer public, so a machine outside the mesh can join only this way; a
token without a key is still what the machine running the bus joins its
own mesh with. Also a token verb, which says it replaces running the
command by hand and adding a peer to the hub with wg.

This commit is contained in:

jschoubben

2026-10-08 02:06:19 +02:00

committed by

jochen

parent 174e06ed08

commit b05ac4f4b2

13 changed files with 293 additions and 2 deletions

									
										module.json
									
		+1
		
												View File
												
				@@ -49,6 +49,7 @@

				    "push",

				    "rotate",

				    "issue",

				    "token",

				    "settings",

				    "command",

				    "queue",