25 lines
671 B
Markdown
25 lines
671 B
Markdown
# VPN Infrastructure
|
|
|
|
This directory documents the WireGuard tunnel between:
|
|
|
|
- `edge01` — DreamHost VPS
|
|
- `infra01` — Home network tunnel endpoint
|
|
|
|
## Goals
|
|
|
|
- Secure bidirectional connectivity between edge01 and the home network
|
|
- Allow selected services on the home network to be reached through edge01
|
|
- Keep configuration reproducible
|
|
- Never store private keys or pre-shared keys in Git
|
|
|
|
## Security
|
|
|
|
The following must never be committed:
|
|
|
|
- WireGuard private keys
|
|
- Pre-shared keys
|
|
- Complete production configuration files containing secrets
|
|
- Passwords, API tokens, or credentials
|
|
|
|
Only sanitized configuration templates and public keys may be stored here.
|