# TODO
 - Wildcard ssl certificate with dns challenge
    https://github.com/BackBenchDevs/certbot-dns-hostinger
 - Create a routing peer as a docker container with netbird client
 - Make traefik dashboard available

Dockerize every service
To make service privately available
  - make the container accessible via netbird Network Route
  - add routing rules on docker host
  - manage ACL in netbird to grant access to selected machines/users
To make service publicly available
  - if it's already on server, than add traefik router to route https connections (no need for netbird encryption or forwarding)
  - if not on server or want additional auth, than use a netbird proxy


# Subdomain diagram:
p2net.cloud - public, main suffix
bird.p2net.cloud - public, netbird dashboard
*.bird.p2net.cloud - wg private, netbird peers
*.mesh.p2net.cloud - wg private, custom netbird dns zone, distributed to peers
*.proxy.p2net.cloud - public, netbird reverse proxy, custom domains, automatic ssl certs
*.home.p2net.cloud - private local dns, resolve to ips in home network


# Subnet masks:
 - 100.80.0.0/16 - Kyivstar ISP CGNat (last ip was 100.80.17.78)
 - 100.66.0.0/16 - Netbird peers
 - 172.30.0.0/24 - Docker network on the server
 - 192.168.50.0/8 - Home network