Reengineed the code. Generalized the package. Cloud configurators are modules.

debian-package/debian/control

@@ -1,4 +1,4 @@
-Source: cloud-router
+Source: vpn-router
 Section: net
 Priority: optional
 Maintainer: Sławomir Koszewski <slawek@koszewscy.waw.pl>
@@ -6,7 +6,7 @@ Build-Depends: debhelper-compat (= 13)
 Standards-Version: 4.6.2
 Rules-Requires-Root: no
 
-Package: cloud-router
+Package: vpn-router
 Architecture: all
 Depends: ${misc:Depends},
          strongswan-swanctl,
@@ -17,13 +17,23 @@ Depends: ${misc:Depends},
          ufw,
          debconf,
          openssl,
-         python3-jinja2
-Description: Linux cloud router with IPSec and optional WireGuard
- Configures a Linux host as a cloud router providing site-to-site IKEv2
- IPSec (strongSwan swanctl) and road-warrior P2S VPN (EAP-TLS). WireGuard
- is optionally enabled. Includes a PKI helper library (simple-ca.sh) for
- managing the road-warrior certificate authority.
+         python3,
+         python3-jinja2,
+         iproute2,
+         systemd-resolved
+Description: Linux VPN router with IPSec, road-warrior and WireGuard support
+ Configures a Linux host or virtual machine as a VPN router: site-to-site
+ IKEv2 IPSec (strongSwan swanctl), optional road-warrior access using EAP-TLS,
+ optional WireGuard, and the routing, NAT, MSS clamping and firewall rules a
+ router needs. Nothing in the package is specific to a cloud provider.
  .
- Site-specific values are collected via debconf at install time and written
- to /etc/default/cloud-router. A one-shot systemd service (cloud-router-setup)
- applies UFW rules and WireGuard keys on first boot.
+ Settings live in /etc/vpn-router/vpn-router.conf, which is created on first
+ install and owned by the administrator afterwards. Editing it and restarting
+ vpn-router-setup applies the change; the same service reconciles the system
+ at every boot. It is built on two inputs, the external and internal interface
+ names; the addresses on them are read from the system rather than configured
+ again, and nothing is auto-detected.
+ .
+ Platform-specific additions are provided by modules under
+ /usr/lib/vpn-router, selected explicitly by the platform setting. Modules for
+ Azure and GCP are included.