# pfi-ana-webhost

General-purpose webhost at the Anaheim colo.

## Network

- **LAN IP:** 10.250.50.52
- **SSH:** `lkraven@pfi-ana-webhost` (key auth — verify on first run)

## Infrastructure

- **Hypervisor:** `pfi-pve` (VMID **110**)
- **Type:** Linux VM
- **Site:** Anaheim (PFI colo)

## Role

Web-facing workload host. DNS name includes `pfi-ana-webhost.phasefinal.com`.
Specific services running here aren't catalogued in this workspace yet —
refresh the snapshot and inspect.

## Backup coverage

- **VM-image:** ✅ vzdump on pfi-pve (daily, per the 2026-04-20 audit)
- **File-level restic:** ❌ not yet configured

If this host starts carrying any state worth per-file restore (app
configs, TLS certs, DBs), add a `configs/restic/pfi-ana-webhost/`
profile following the ana-ml2 template.

## Refresh state

```bash
scripts/refresh-server-info.sh pfi-ana-webhost
```

## Discovered via

`scripts/discover-fortigate.sh 10.250.250.1` on 2026-04-21 —
FortiGate DHCP lease (MAC `e6:f9:3a:c9:61:2a`).