agent

type Options struct {
	CoordinatorURL string
	// AuthKey enrolls the node if it is not registered yet (or its token was
	// revoked). It may be empty for an already-registered node.
	AuthKey            string
	Hostname           string
	StateDir           string
	ListenPort         uint16
	Interface          string
	AdvertiseEndpoints []netip.AddrPort
	// AdvertisePublicPorts are UDP ports forwarded to this node on a router
	// with a changing public IP; they are advertised with the current public
	// address as STUN reports it.
	AdvertisePublicPorts []uint16
	// Userspace runs WireGuard over an in-process network stack instead of
	// a kernel TUN interface: no root or NET_ADMIN needed, but programs reach
	// the mesh only through the SOCKS5 proxy.
	Userspace bool
	// SOCKS5 is the listen address of the SOCKS5 proxy into the mesh;
	// empty disables it.
	SOCKS5 string
	// AdvertiseRoutes are subnets this node offers to forward to; with
	// AdvertiseExitNode it also offers to forward to the internet. Both need
	// approval (by an admin or the policy) and TUN mode on Linux.
	AdvertiseRoutes   []netip.Prefix
	AdvertiseExitNode bool
	// AcceptRoutes installs other nodes' approved subnet routes.
	AcceptRoutes bool
	// ExitNode names a peer (by name or mesh IP) to send internet traffic
	// through.
	ExitNode string
	// AcceptDNS points the OS resolver at MagicDNS for mesh names and split
	// DNS domains (TUN mode).
	AcceptDNS bool
	Log       *slog.Logger
}