init

config/nodes.php

@@ -0,0 +1,14 @@
+<?php
+
+return [
+    'client-01' => [
+        'node_type' => 'client',
+        'token' => 'CHANGE_ME',
+        'allowed_cidrs' => [
+            '192.168.0.0/16',
+            '10.10.0.0/16',
+        ],
+        'allowed_ports' => [22, 80, 443, 3306, 5432],
+        'enabled' => true,
+    ],
+];

config/policies.php

@@ -0,0 +1,22 @@
+<?php
+
+return [
+    [
+        'policy_id' => 'public-web-egress',
+        'users' => ['normal-user', 'admin', 'devops'],
+        'target_hosts' => ['*'],
+        'target_ports' => [80, 443],
+        'protocol' => 'tcp',
+        'route_type' => 'direct',
+        'enabled' => true,
+    ],
+    [
+        'policy_id' => 'public-udp-egress',
+        'users' => ['normal-user', 'admin', 'devops'],
+        'target_hosts' => ['*'],
+        'target_ports' => [53, 123, 443],
+        'protocol' => 'udp',
+        'route_type' => 'direct',
+        'enabled' => true,
+    ],
+];

config/routes.php

@@ -0,0 +1,5 @@
+<?php
+
+return [
+    'default' => 'deny',
+];