Templates
Save and manage your RouterOS configuration templates
MikroTik RouterOS Hardening Baseline
firewallDefault
Default hardening template: disables unused services, changes management ports, restricts IP Services to trusted management IPs, and adds Mangle/RAW DDoS protection.
# MikroTik RouterOS Hardening Baseline
# Replace variables before deploying:
# {{MANAGEMENT_SUBNET}} example: 192.168.88.0/24 or 203.0.113.10/32
# {{WINBOX_PORT}} example: 58291
# {{SSH_PORT}} example...WireGuard Mesh Baseline
vpnDefault
Default WireGuard mesh template for RouterOS: creates a WireGuard interface, assigns a mesh IP, opens the UDP port, and includes peer placeholders for multi-router mesh deployments.
# Routerly WireGuard Mesh Baseline
# Recommended: use WireGuard Mesh Orchestrator for automatic key exchange across routers.
# Replace variables before manual deployment:
# {{WG_PRIVATE_KEY}}, {{WG_ME...