Lemonade-Nexus

A self-hosted, cryptographically secure WireGuard mesh VPN with zero-trust architecture, federated relay servers, and democratic governance.

Documentation

Getting Started

• Getting Started — Build, install, configure, connect
• FAQ — Frequently asked questions
• Why Use This? — What makes Lemonade-Nexus different

Architecture

• Architecture — System design, CRTP, gossip, data storage
• Network Architecture — Topology diagrams, traffic flows
• DNS Discovery — SEIP/EP subdomains, NS slots, client discovery

Reference

• Ports and Firewall — All ports, iptables, MikroTik, UFW rules
• IP Ranges — IPAM allocation, client/server/backbone ranges
• Configuration — CLI flags, environment variables, JSON config

Security

• Security — Cryptography, TEE, binary attestation, credentials
• Security Model — Layered security architecture deep dive
• Zero Trust — Trust tiers, attestation tokens, democratic governance

Development

• SDK Guide — C++ and C API reference with examples and best practices
• Client SDK — SDK overview and linking
• Frameworks and Libraries — Tech stack and dependencies
• Building — Build instructions for all platforms

Quick Links

• Current version: v0.8.5-alpha
• Repository: github.com/lemonade-sdk/lemonade-nexus
• Issues: GitHub Issues