TZ=Europe/Amsterdam
# Per-site WireGuard private key + cloud peer config live in config/wg0.conf