rego-tunnel: parameterize net + add DHCP static lease

apps/rego-tunnel/config.json

@@ -28,6 +28,78 @@
       "placeholder": "4",
       "required": true,
       "env_variable": "WINDOWS_CPU_CORES"
+    },
+    {
+      "type": "text",
+      "label": "VM IP (internal)",
+      "hint": "Internal VM IP on the tap/bridge network",
+      "placeholder": "100.100.0.2",
+      "required": true,
+      "env_variable": "VM_NET_IP"
+    },
+    {
+      "type": "text",
+      "label": "VM MAC",
+      "hint": "Used for DHCP reservation (VM must use DHCP)",
+      "placeholder": "52:54:00:12:34:56",
+      "required": true,
+      "env_variable": "VM_MAC"
+    },
+    {
+      "type": "text",
+      "label": "Bridge name",
+      "hint": "Linux bridge created inside the container for VM networking",
+      "placeholder": "br-rego-vpn",
+      "required": true,
+      "env_variable": "BRIDGE_NAME"
+    },
+    {
+      "type": "text",
+      "label": "TAP name",
+      "hint": "Tap interface name used by QEMU",
+      "placeholder": "tap0",
+      "required": true,
+      "env_variable": "TAP_NAME"
+    },
+    {
+      "type": "text",
+      "label": "Bridge CIDR",
+      "hint": "Bridge address/CIDR assigned inside the container",
+      "placeholder": "100.100.0.1/24",
+      "required": true,
+      "env_variable": "BRIDGE_CIDR"
+    },
+    {
+      "type": "text",
+      "label": "VM subnet",
+      "hint": "Subnet that should be NATed out of the container",
+      "placeholder": "100.100.0.0/24",
+      "required": true,
+      "env_variable": "VM_SUBNET"
+    },
+    {
+      "type": "text",
+      "label": "Target IP (routed via VM)",
+      "hint": "Traffic to this IP is routed via the VM (VPN inside the VM)",
+      "placeholder": "10.35.33.230",
+      "required": true,
+      "env_variable": "TARGET_IP"
+    },
+    {
+      "type": "text",
+      "label": "DNS servers",
+      "hint": "DNS servers offered to the VM via DHCP",
+      "placeholder": "1.1.1.1,8.8.8.8",
+      "required": true,
+      "env_variable": "DNS_SERVERS"
+    },
+    {
+      "type": "text",
+      "label": "DHCP lease time",
+      "hint": "Lease duration (dnsmasq format, e.g. 12h)",
+      "placeholder": "12h",
+      "required": true,
+      "env_variable": "LEASE_TIME"
     }
   ],
   "supported_architectures": ["amd64"]