Step-by-step deployment guides for common scenarios. Each example is self-contained and copy-pasteable.
| Guide | Scenario | Key Topics |
|---|---|---|
| DigitalOcean Quickstart | Cloud relay on DigitalOcean, 3 peers, exposed service | Droplet provisioning, peer management, tunnel-open |
| Home Lab | Local relay on Raspberry Pi or home server | Self-hosted, multiple device types, Home Assistant |
| Healthcare Clinic | Secure remote access to on-premises EHR | HIPAA compliance, audit logging, peer revocation, key rotation |
All examples assume:
- Bash 4.0+ on the relay machine
- WireGuard and jq installed (the setup script installs these automatically)
- An Ed25519 SSH key at
~/.ssh/id_ed25519 - The QP Tunnel repository cloned locally
Commands prefixed with relay# run on the relay server. Commands prefixed with local$ run on your workstation. Commands with no prefix run wherever you cloned the repository.