# VPN Topology

## Systems

### edge01

- Provider: DreamHost
- Role: Public VPS and WireGuard server
- Public address: 208.113.210.193
- WireGuard interface: wg0

### infra01

- Role: Home network WireGuard endpoint
- LAN address: 192.168.161.10
- Home gateway: 192.168.161.1
- WireGuard interface: wg0

## Traffic Flow

Internet client
    |
    v
edge01
    |
    | WireGuard tunnel
    v
infra01
    |
    v
Home networks and selected internal services

## Design Notes

- infra01 initiates the tunnel because the home Internet connection does not require a static public IP.
- edge01 provides the stable public endpoint.
- Routing and firewall rules should expose only explicitly approved internal services.