Release v1.1.0

crates/nx9-wg-db/README.md

@@ -22,7 +22,7 @@ Every connection opened by `Store` enforces:
 2. `sessions` — Admin web sessions (`ON DELETE CASCADE`).
 3. `login_attempts` — IP-based login attempt tracking for brute-force rate limiting.
 4. `api_tokens` — Hashed API tokens for automation (`ON DELETE CASCADE`).
-5. `interfaces` — Desired WireGuard interfaces (`wg0`, `wg1`, etc.), private/public keys, listen port, IPv4/IPv6 CIDRs, MTU, DNS.
+5. `interfaces` — Desired WireGuard interfaces (`wg0`, `proton0`, etc.), role (`overlay`, `upstream`), private/public keys, optional listen port (`NULL` for dynamic kernel allocation), IPv4/IPv6 CIDRs, MTU, DNS.
 6. `peers` — Desired WireGuard peer definitions, classifications (`road_warrior`, `site_gateway`, `server`, `relay`), states (`active`, `disabled`, `revoked`, `expired`), profiles (`full_tunnel`, `split_tunnel`, `custom`), public/private/preshared keys, AllowedIPs, endpoints, and persistent keepalives (`ON DELETE CASCADE`).
 7. `networks` — Named network CIDRs for routing and organization.
 8. `routes` — Desired kernel routing rules (`ON DELETE SET NULL`).
@@ -34,7 +34,12 @@ Every connection opened by `Store` enforces:
 
 ## Migration Strategy
 
-- Migrations are defined in `crates/nx9-wg-db/migrations/` and embedded at compile time via `sqlx::migrate!("./migrations")`.
+- Migrations are defined in `crates/nx9-wg-db/migrations/` and embedded at compile time via `sqlx::migrate!("./migrations")`:
+  - `0001_initial_schema.sql` — Initial relational schema.
+  - `0002_wiregui_schema.sql` — WireGUI capabilities and profile structures.
+  - `0003_server_endpoint_settings.sql` — Persistent server endpoint settings.
+  - `0004_interface_roles.sql` — Interface roles (`overlay` and `upstream`).
+  - `0005_optional_listen_port.sql` — Nullable `listen_port` for ephemeral kernel port selection.
 - Migrations are executed automatically via `store.migrate().await?`.
 - Migrations are tracked in the `_sqlx_migrations` table for idempotency.