#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
SKILL_ROOT="$(dirname "$(dirname "$SCRIPT_DIR")")"
source "$SKILL_ROOT/scripts/_common.sh"

main() {
  require_root
  confirm_gate
  log_warn "Stopping and disabling WireGuard wg0"
  systemctl disable --now wg-quick@wg0 >/dev/null 2>&1 || true
  log_info "WireGuard disabled. Config remains at /etc/wireguard/wg0.conf (remove manually if desired)."
}
main "$@"