Add VPN documentation and WireGuard templates

2026-07-21 21:02:54 -04:00
parent 69651afb45
commit b12e0fd163
5 changed files with 120 additions and 0 deletions
@@ -0,0 +1,37 @@
+# VPN Topology
+
+## Systems
+
+### edge01
+
+- Provider: DreamHost
+- Role: Public VPS and WireGuard server
+- Public address: 208.113.210.193
+- WireGuard interface: wg0
+
+### infra01
+
+- Role: Home network WireGuard endpoint
+- LAN address: 192.168.161.10
+- Home gateway: 192.168.161.1
+- WireGuard interface: wg0
+
+## Traffic Flow
+
+Internet client
+    |
+    v
+edge01
+    |
+    | WireGuard tunnel
+    v
+infra01
+    |
+    v
+Home networks and selected internal services
+
+## Design Notes
+
+- infra01 initiates the tunnel because the home Internet connection does not require a static public IP.
+- edge01 provides the stable public endpoint.
+- Routing and firewall rules should expose only explicitly approved internal services.