initial commit

ap/nftables.conf

@@ -0,0 +1,11 @@
+#!/usr/sbin/nft -f
+# van-router NAT — masquerade LAN out whatever the WAN of the moment is
+# (anything that is NOT the AP interface: ethernet/Starlink, wifi, future 4G)
+table ip van_router_nat
+delete table ip van_router_nat
+table ip van_router_nat {
+    chain postrouting {
+        type nat hook postrouting priority srcnat; policy accept;
+        ip saddr 10.42.0.0/24 oifname != "wlxc83a35a4ee55" masquerade
+    }
+}