Gateway / VPN issues

Symptom	Check
Dashboard dead	systemctl status kaonic-gateway; ports 80 and 443; wait ~1 min after boot; you are on STA IP not .1; browser blocking the device certificate
Radio page empty	commd 9090; firewall; keepalive
VPN no packets	forwarding; advertised routes; peer hash typo; 10.20.0.0/16 vs LAN overlap
Plugin missing	installer 8682; journal; sha256 mismatch