openwrt/docs/future-improvements-ax1800.md

Future Improvements for AX1800 Barebones Firmware

After the initial successful build, several areas can be optimized to make the "Barebones" experience even better.

1. Performance & Resource Management

• Zram Integration: Enable zram-swap by default to better handle memory-intensive tasks like package updates or heavy VPN usage.
• Kernel Slimming: Review the default ipq60xx kernel configuration and disable unused filesystem drivers or legacy protocols to reduce the kernel footprint.
• SQM (Smart Queue Management): Add luci-app-sqm and cake for better bufferbloat management.

2. Security Enhancements

• SSH Hardening: Provide a profile that disables password authentication by default and injects a provided SSH key.
• WireGuard Optimization: Ensure kmod-wireguard is optimized for the IPQ6000's SIMD instructions if available.
• DNS-over-HTTPS/TLS: Include https-dns-proxy or unbound for encrypted DNS.

3. Storage & Partitioning

• U-Boot Custom Layout: Research if a larger overlay partition can be achieved by resizing the factory GL.iNet layout (requires careful U-Boot interaction).
• External Overlay: Create a script or guide for using a USB drive as overlayfs (ExtRoot).

4. Build Automation

• CI/CD Integration: Move the build process to a GitHub Action to ensure images are always up-to-date with the latest OpenWrt security patches.
• Local Repo: Host a local Opkg repository for custom packages like btop or mosh to avoid manual transfers.

5. UI/UX

• Modern Themes: Swap the default LuCI theme for something more modern like luci-theme-argon.
• Dashboard Utilities: Add luci-app-statistics for better monitoring.