config authguard 'global'
	option enabled '1'
	option interface 'br-lan'
	option auth_method 'splash'
	option session_timeout '3600'
	option idle_timeout '600'

config splash 'default'
	option enabled '1'
	option title 'Welcome'
	option message 'Please authenticate to access the network'
	option logo '/luci-static/resources/auth-guardian/logo.png'
	option background_color '#0f172a'
	option button_color '#3b82f6'
	option require_terms '1'

config oauth 'google'
	option enabled '0'
	option client_id ''
	option client_secret ''
	option redirect_uri '/auth/callback/google'

config oauth 'github'
	option enabled '0'
	option client_id ''
	option client_secret ''
	option redirect_uri '/auth/callback/github'

config bypass 'whitelist'
	list mac 'AA:BB:CC:DD:EE:FF'
	list ip '192.168.1.100'
	list domain 'allowed.example.com'

config voucher 'system'
	option enabled '1'
	option validity '86400'
	option bandwidth_limit '10000'
	option prefix 'WIFI'

config session 'policy'
	option max_sessions '100'
	option session_cookie 'authguard_session'
	option secure_cookie '1'
	option httponly '1'
	option samesite 'Strict'