Документация и UX установки: полный production-fix по fix32

config.example.toml

@@ -2,6 +2,11 @@
 container_names = ["amnezia-awg2", "amnezia-awg"]
 interface_candidates = ["awg0", "wg0", "amnezia0", "tun0"]
 interface_patterns = ["awg*", "wg*", "amnezia*", "tun*"]
+# VPN peer subnet.
+# Verify with:
+#   C="$(docker ps --format '{{.Names}}' | grep -E '^(amnezia-awg2|amnezia-awg)$' | head -n1)"
+#   docker exec "$C" ip -4 addr
+#   docker exec "$C" wg show
 peer_ipv4_cidr = "10.8.1.0/24"
 
 [traffic]
@@ -15,7 +20,10 @@ ifb_name = "ifb0"
 
 [host_firewall]
 enabled = true
+# Must match the real sshd port before apply-firewall.
 ssh_port = 2323
+# Must match the published Docker/Amnezia UDP port.
+# Verify with: docker port amnezia-awg2 2>/dev/null || docker port amnezia-awg
 amnezia_port = 443
 amnezia_protocols = ["udp"]
 allow_icmp = true
@@ -24,6 +32,7 @@ default_input_policy = "drop"
 [anti_torrent]
 enabled = true
 max_connections_per_peer = 150
+# Usually the same subnet as [amnezia].peer_ipv4_cidr.
 peer_ipv4_cidr = "10.8.1.0/24"
 apply_in_amnezia_netns = true