Doku: Horus Internet-Gateway (Handy + OPNsense LAN).

Road-Warrior-Setup mit UFW wg0→eth0 und pixel7-Config; OPNsense-LAN-Exit
über HORUS_GW + Outbound-SNAT 10.1.1.22 als verifizierter Breakpoint.

Co-authored-by: Cursor <cursoragent@cursor.com>

horus/clients/pixel7-client.conf

@@ -0,0 +1,15 @@
+# Horus WireGuard — Client pixel7 (Road Warrior, Internet-Gateway)
+# Quelle: /etc/wireguard/clients/pixel7/client.conf auf Horus
+# Stand: 2026-06-28 — AllowedIPs inkl. 0.0.0.0/0 für Internet via Horus
+
+[Interface]
+PrivateKey = EPwmQ19R5xUjV7Ve9IpJ/39mFDflHUmpVNkXTgjuSkM=
+Address = 10.1.1.15/32
+DNS = 1.1.1.1, 1.0.0.1
+
+[Peer]
+PublicKey = qXxhgerS2ORypVadhKCBuxgIX5Pu4J75nSWazdtd+Qk=
+PresharedKey = /zmUIQ9QW3W9Q3PuZNuMZ1t6xOzdSTRt7qBFCHxQcik=
+AllowedIPs = 10.1.1.0/24, 192.168.2.0/24, 10.1.2.0/24, 10.8.0.0/24, 0.0.0.0/0
+Endpoint = 207.180.222.207:61951
+PersistentKeepalive = 15