checkpoint: implement wgcloak v1 foundations

examples/server.advanced.toml

@@ -0,0 +1,49 @@
+# Advanced server example. Values are placeholders, not credentials.
+
+[server]
+listen = "0.0.0.0:51830"
+
+[backend]
+target = "127.0.0.1:51820"
+
+[transports.direct_udp]
+enabled = true
+port = 51830
+
+[transports.quic]
+enabled = true
+port = 443
+
+[transports.http3]
+enabled = true
+port = 443
+path = "/tunnel"
+
+[transports.tls_tcp]
+enabled = true
+port = 443
+
+# Required when TLS-capable transports are enabled.
+[tls]
+certificate = "/etc/letsencrypt/live/vpn.example.invalid/fullchain.pem"
+private_key = "/etc/letsencrypt/live/vpn.example.invalid/privkey.pem"
+
+[session]
+idle_timeout_secs = 120
+
+[limits]
+max_sessions = 1024
+max_sessions_per_ip = 32
+max_pending_handshakes = 256
+handshake_timeout_ms = 3000
+
+[[auth.clients]]
+id = "laptop"
+secret_file = "/etc/wgcloak/clients/laptop.secret"
+
+[[auth.clients]]
+id = "desktop"
+secret_file = "/etc/wgcloak/clients/desktop.secret"
+
+[logging]
+level = "info"