[Feature]: ignore cert for local or private ips

[shakibamoshiri]

Before you submit

• I searched existing issues and did not find the same request.
• This request is about PasarGuard itself, not support for my deployment.

Problem

It would be better to ignore certs (check and generation) when a node listens on private ips or localhosts

• 127.0.0.1/8
• 10.0.0.0/8
• 192.168.0.0/16
• etc

---

Proposed solution

node

if the NODE_HOST=PRIVATE_IP , variables SLL_*_FILE be ignored
no need to generate certs

panel

no need to add cert

There are cases a host running both panel and a node, or there are existing vpn tunnels over private ips (e.g tinc, nebula, etc) and it makes sense to ignore cert check and generation

---

Alternatives considered

there is no alternative

Area

Nodes

---

Impact

Nice to have

---

Examples or references

No response

Additional context

No response