General & Simple Mode
[misc]
This section contains miscellaneous system-level settings.
| Key | Type | Description | Default |
|---|---|---|---|
tun-mtu | Integer | The MTU for the TUN interface. | |
exclude-lan-networks | Boolean | If true, local area networks will be excluded from the VPN. | false |
log-level | String | Runtime logging level; use the app's supported choices. |
Example:
[misc]
tun-mtu=1420
exclude-lan-networks=true
[simple-mode]
Select one typed output for ordinary client traffic. Saved advanced routing rules remain available when returning to Rules Mode; Simple Mode does not erase them.
[simple-mode]
enabled=true
output=type:DIRECT
For a configured VPN use output=type:L3VPN,target:my-wireguard; for a proxy use output=type:L4PROXY,target:my-proxy. The target must exist and be usable under the current entitlement. An unauthenticated Tailscale interface may temporarily use Direct during enrollment; inspect Tailscale status before treating it as protected. See the Tailscale FAQ.