Michael

Pip is not an option, but I found a link with a vpnc script which might work

When you set 0.0.0.0/0 in AllowedIPs in Endpoint, you tell wireguard to route all traffic through it (which creates 2 routes to force it 0.0.0.0/1 and 128.0.0.0/1). If this is...

But this is what you tell Wireguard to do. You tell Wireguard route everything through the tunnel. If you dont want this, tick "Disable Routes"

Hetzner Support might also find it's way in the new relase. Enclosed a PR (also by an OPN user) to see how add support to upstream: https://github.com/ddclient/ddclient/pull/406/files

Thats why auto sync is disabled when using a HA setup ;)

Honestly I have no idea how to implement such a huge change in an easy way, the HA setup is already here, stable, easy to understand :)

Restarting doesnt generate the config. You need to refresh UI and hit apply

configctl template reload OPNsense/Wireguard Just a guess, not at a computer. Just google for similar syntax

And what happens when you remove all configs? Usually its empty If it doesnt receive data.

This code is only for DiagnosticsController, it won't prevent false user handling. Maybe some constraints in the model would help here.