WrtNova Firmware Builder

Firmware target

OpenWrt version

Device

Mode

Router Access point

System

Hostname

Root password

Used for SSH login and AdGuard Home admin.

SSH public keys

One key per line.

Timezone

Network

Default IP prefix

Default subnet

Networks

Guest network

IoT network

WireGuard VPN network

WireGuard VPN network creates a VLAN, a WiFi SSID, and activates the WireGuard client section. Leave WG fields blank to auto-register Cloudflare WARP.

WireGuard VPN client

Private key

Peer public key

Endpoint

Endpoint port

Preshared key

Client IPv4

Client IPv6

Allowed IPs

You can switch to a different WireGuard config later via LuCI → Network → Interfaces → vpn → Edit → Load configuration. When importing a config, remember to enable Route Allowed IPs in Peers setting.

WAN

Connection type

DHCP PPPoE

WAN MAC address

WAN options

Tagged WAN VLAN (required by some ISPs) Enable secondary WAN (WAN-B)

WiFi

Country code

Dense environment Tighten roaming/steering thresholds

Wireless mesh

Enable 802.11s mesh backhaul

Note: Wired backhaul is always better when feasible

Network SSIDs

LAN

Leave blank to use default password: 12345678

Advanced channels & logging

2.4 GHz channel

5 GHz channel

6 GHz channel

WiFi log level

Port forwarding (IPv4)

Hostname	Last octet	Ports (space-separated)

Each row create a static DHCPv4 lease and add port forwarding from WAN. Ports must be unique.

IPv6 exposure

Hostname	Last octet	Ports (empty = all)

Each row create a static hostid (IPv6 Token) in DHCP leases, IPv6 firewall forward rule, and Cloudflare DDNS entry. After boot, go to Network -> DHCP Leases and update the DUID for each host to match the actual client DUID.

DDNS (Cloudflare)

Enable DDNS

Lookup hostname

Cloudflare API token

DDNS entries for IPv6-exposed hosts are derived from the IPv6 Exposure table — no extra config needed.

Failover

Cellular modem (MBIM)

Enable modem failover

USB tethering

Enable USB tethering (Android / iPhone, device usb0)

Additional packages

Auto-added

Extra packages

Appended to the final list. Prefix with - to remove an auto-added package.

Performance & misc

Software flow offload

Can increases network throughput.

Hardware flow offload

Higher network throughput and lower CPU usage where supported.
Do not enable if using QoS/SQM.

Block DoT and DoQ

Enforce ad blocking on stubborn client devices.