WrtNova Firmware Builder

Firmware target

OpenWrt version

Device

Device mode

Mode

Router Access point

System

Hostname

Root password

Used for SSH login and AdGuard Home admin (hashed client-side).

SSH public keys

One key per line.

Timezone

Network

Default IP prefix

Default subnet

Networks

Guest network

IoT network

WireGuard VPN network

WireGuard VPN network creates a VLAN, a WiFi SSID, and activates the WireGuard client section. Leave WG fields blank to auto-register Cloudflare WARP.

WireGuard VPN client

Private key

Peer public key

Endpoint

Endpoint port

Preshared key

Client IPv4

Client IPv6

Allowed IPs

You can switch to a different provider or paste a different WireGuard config later via LuCI → Network → Interfaces → vpn → Edit → Load configuration. When importing a config, remember to enable Route Allowed IPs in Peers setting.

WAN

Connection type

DHCP PPPoE

WAN MAC address

WAN options

Tagged WAN VLAN (required by some ISPs) Enable secondary WAN (WAN-B)

WiFi

Country code

Dense environment Tighten roaming/steering thresholds

Wireless mesh backhaul

Enable wireless mesh

Enable only when this device can't be wired to its parent. Wired backhaul is preferred.

Network SSIDs

LAN

Leave blank to use default password: 12345678

Advanced channels & logging

2.4 GHz channel

5 GHz channel

6 GHz channel

WiFi log level

Port forwarding (IPv4)

Hostname	Last octet	Ports (space-separated)

IPv6 exposure

Hostname	Last octet	Ports (empty = all)

DDNS (Cloudflare)

Enable DDNS Start DDNS service on boot

Lookup hostname

Cloudflare API token

DDNS entries for IPv6-exposed hosts are derived from the IPv6 Exposure table — no extra config needed.

Failover

Cellular modem (MBIM)

Enable modem failover

USB tethering

Enable USB tethering (Android / iPhone, device usb0)

Additional packages

Packages

Appended to the final list as-is. Prefix with - to remove a default package.

Performance & misc

Software flow offload

On by default. Improves throughput. Disable if using QoS/SQM.

Hardware flow offload

Higher throughput where supported. Do not enable if using QoS/SQM. Implies software offload.

Block DoT/DoQ (port 853 at firewall)