config network-modes 'config'
	option current_mode 'router'
	option last_change ''
	option backup_config '1'

config mode 'sniffer'
	option name 'Sniffer / Passthrough'
	option description 'Transparent bridge for network analysis'
	option enabled '0'
	option bridge_interface 'br-lan'
	option capture_interface 'eth0'
	option netifyd_enabled '1'
	option promiscuous '1'

config mode 'accesspoint'
	option name 'Access Point'
	option description 'WiFi access point with optimizations'
	option enabled '0'
	option upstream_interface 'eth0'
	option dhcp_client '1'
	option wifi_channel 'auto'
	option wifi_htmode 'VHT80'
	option wifi_txpower '20'
	option roaming_enabled '1'
	option band_steering '1'

config mode 'relay'
	option name 'Relay / Extender'
	option description 'Network relay with WireGuard optimization'
	option enabled '0'
	option relay_interface 'wlan0'
	option lan_interface 'eth0'
	option wireguard_enabled '1'
	option wireguard_interface 'wg0'
	option mtu_optimization '1'
	option mss_clamping '1'

config mode 'router'
	option name 'Router'
	option description 'Full router with WAN, proxy and HTTPS frontends'
	option enabled '1'
	option wan_interface 'eth1'
	option wan_protocol 'dhcp'
	option lan_interface 'br-lan'
	option nat_enabled '1'
	option firewall_enabled '1'
	option proxy_enabled '0'
	option proxy_type 'squid'
	option https_frontend '0'
	option frontend_type 'nginx'
	list frontend_domains ''

config mode 'doublenat'
	option name 'Double NAT'
	option description 'Behind ISP box with isolated LAN'
	option enabled '0'
	option wan_interface 'eth1'
	option lan_interface 'br-lan'
	option wan_protocol 'dhcp'
	option lan_ip '10.10.0.1'
	option lan_netmask '255.255.255.0'
	option guest_network 'br-guest'
	option isolate_guest '1'
	option upnp_enabled '0'
	option dmz_host ''

config mode 'travel'
	option name 'Travel Router'
	option description 'Portable router with WiFi client uplink and personal hotspot'
	option enabled '0'
	option client_radio 'radio1'
	option client_interface 'wlan1'
	option hotspot_radio 'radio0'
	option hotspot_interface 'wlan0'
	option ssid ''
	option password ''
	option encryption 'sae-mixed'
	option hotspot_ssid 'SecuBox-Travel'
	option hotspot_password 'TravelSafe123!'
	option clone_mac ''
	option lan_subnet '10.77.0.1'
	option lan_netmask '255.255.255.0'

config mode 'multiwan'
	option name 'Multi-WAN Controller'
	option description 'Dual-WAN bonding with health tracking'
	option enabled '0'
	option policy 'balanced'
	option wan_primary 'eth1'
	option wan_secondary 'wwan0'
	option tracking_host '8.8.8.8'
	option tracking_interval '30'
	option failover_hold '45'
	option load_balance '1'
	option use_mwan3 '0'

config mode 'vpnrelay'
	option name 'VPN Relay'
	option description 'Site-to-site VPN relay with policy routing'
	option enabled '0'
	option vpn_type 'wireguard'
	option vpn_provider 'Mullvad'
	option wg_interface 'wg0'
	option openvpn_profile ''
	option upstream_interface 'wan'
	option policy_routing '1'
	option dns_override '1'
	option kill_switch '1'
	option lan_bypass '0'