fix: correct DNS records, peer dashboard field names, and services API response

- network_manager: api/webui DNS records now point to Caddy (172.20.0.2)
  instead of their container IPs so Caddy can reverse-proxy correctly
- ip_utils: add webui.dev block to generated Caddyfile
- config/caddy/Caddyfile: regenerated with webui.dev block
- config/dns/Corefile: simplify to single forward zone (remove duplicate)
- app.py peer_dashboard: rename peer_name→name, rx_bytes→transfer_rx,
  tx_bytes→transfer_tx to match PeerDashboard.jsx; add service_urls dict
- app.py peer_services: fix DNS (10.0.0.1→real CoreDNS IP), CalDAV URL
  (radicale.dev:5232→calendar.dev), email structure (flat→nested smtp/imap
  objects), rename webdav→files, add WireGuard config text, add username field
- PeerDashboard.jsx: render service icon links from service_urls

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

api/app.py

@@ -32,7 +32,7 @@ import contextvars
 API_START_TIME = time.time()
 
 from network_manager import NetworkManager
-from wireguard_manager import WireGuardManager
+from wireguard_manager import WireGuardManager, _resolve_peer_dns
 from peer_registry import PeerRegistry
 from email_manager import EmailManager
 from calendar_manager import CalendarManager
@@ -3086,14 +3086,27 @@ def peer_dashboard():
 
     peer_ip = peer.get('ip', '')
     allowed_ips = f"{peer_ip.split('/')[0]}/32" if peer_ip else ''
+    domain = _configured_domain()
+    _svc_url_map = {
+        'calendar': f'http://calendar.{domain}',
+        'files':    f'http://files.{domain}',
+        'mail':     f'http://mail.{domain}',
+        'webdav':   f'http://webdav.{domain}',
+    }
+    service_urls = {
+        svc: _svc_url_map[svc]
+        for svc in peer.get('service_access', [])
+        if svc in _svc_url_map
+    }
 
     return jsonify({
-        'peer_name': peer_name,
+        'name': peer_name,
         'ip': peer_ip,
         'service_access': peer.get('service_access', []),
+        'service_urls': service_urls,
         'online': wg_stats.get('online'),
-        'rx_bytes': wg_stats.get('transfer_rx', 0),
-        'tx_bytes': wg_stats.get('transfer_tx', 0),
+        'transfer_rx': wg_stats.get('transfer_rx', 0),
+        'transfer_tx': wg_stats.get('transfer_tx', 0),
         'last_handshake': wg_stats.get('last_handshake'),
         'allowed_ips': peer.get('allowed_ips', allowed_ips),
     })
@@ -3112,32 +3125,51 @@ def peer_services():
 
     server_public_key = ''
     wg_port = 51820
+    server_endpoint = ''
     try:
         server_public_key = wireguard_manager.get_keys().get('public_key', '')
         wg_port = config_manager.configs.get('_identity', {}).get('wireguard_port', 51820)
+        srv = wireguard_manager.get_server_config()
+        server_endpoint = srv.get('endpoint') or '<SERVER_IP>'
     except Exception:
         pass
 
+    wg_config = ''
+    peer_private_key = peer.get('private_key', '')
+    if peer_private_key:
+        try:
+            internet_access = peer.get('internet_access', True)
+            allowed_ips = wireguard_manager.FULL_TUNNEL_IPS if internet_access else wireguard_manager.get_split_tunnel_ips()
+            wg_config = wireguard_manager.get_peer_config(
+                peer_name=peer_name,
+                peer_ip=peer_ip,
+                peer_private_key=peer_private_key,
+                server_endpoint=server_endpoint,
+                allowed_ips=allowed_ips,
+            )
+        except Exception:
+            pass
+
     return jsonify({
+        'username': peer_name,
         'wireguard': {
             'ip': peer_ip,
             'server_public_key': server_public_key,
             'endpoint_port': wg_port,
-            'dns': '10.0.0.1',
+            'dns': _resolve_peer_dns(),
+            'config': wg_config,
         },
         'email': {
-            'username': f'{peer_name}@{domain}',
-            'imap_host': f'mail.{domain}',
-            'smtp_host': f'mail.{domain}',
-            'imap_port': 993,
-            'smtp_port': 587,
+            'address': f'{peer_name}@{domain}',
+            'smtp': {'host': f'mail.{domain}', 'port': 587},
+            'imap': {'host': f'mail.{domain}', 'port': 993},
         },
         'caldav': {
-            'url': f'http://radicale.{domain}:5232',
+            'url': f'http://calendar.{domain}',
             'username': peer_name,
         },
-        'webdav': {
-            'url': f'http://webdav.{domain}',
+        'files': {
+            'url': f'http://files.{domain}',
             'username': peer_name,
         },
     })