@rob, we may need a bit of help with this from you

I was looking for this too, and actually started to play with the code of the module to get this feature in a few weeks ago. I've submitted my changes as a draft PR on Github. I've been playing with managing my VyOS config from SCM for my home lab. It's important when I for example remove a firewall rule, it is also deleted in the running config, instead of being orphaned. It seems to work pretty well in my setup, but I am uncertain if nothing breaks in other workflows.

Ready for review.

I've got a fix for this in the works.

For support requests, use forum.vyos.io

Use forum.vyos.io for support requests

When trying to make a non-working peer via the command reset vpn ipsec site-to-site peer RIGHT
Gives an error

PR https://github.com/vyos/vyos-build/pull/839

As covered in last comment, all matters have been addressed, but for (then) open question re firewall migration. If that recurs, or still present, we will open a specific task.

As discussed a workaround is available, and preferable to the danger over usefulness of backporting to 1.3.x.

Adding that the long standing issue in T6543 is being addressed in the work of T6718, which provides a replacement to legacy loadConfig; the legacy code will not be corrected.

The only piece remaining here is a backport for Equuleus.

The specific high priority issue here was addressed in T6131; the general question of support for ZeroTier is in T6455. Closing this task as stated.

This will have a simple solution as a corollary of the work T6718: put on hold for now, pending restatement in terms of that work.

I simply added hostname/fqdn to address and here is my test result: