mikrotik-config-gen

Generate secure MikroTik RouterOS v7 configurations from a plain-language description, or review and harden an existing /export. Use when the user asks to write, generate, build, audit, or harden a MikroTik / RouterOS config, firewall, NAT, PPPoE + RADIUS BNG, site-to-site WireGuard, hotspot captive portal, or ISP edge router. Always applies a security-hardening baseline, takes per-model port and interface names from devices/, and never invents IPs or secrets — it emits clearly marked placeholders plus a fill-in checklist.