# ana-wg

WireGuard VPN gateway at the Anaheim colo.

## Network

- **LAN IP:** 10.250.50.252
- **SSH:** `root@ana-wg` (LXC — root via key)

## Infrastructure

- **Hypervisor:** `pfi-pve` (**LXC 113**)
- **Type:** LXC container
- **Site:** Anaheim (PFI colo)

## Role

WireGuard server providing VPN access into the PFI Anaheim network.
Config lives at `/etc/wireguard/` inside the LXC.

## Backup coverage

- **VM-image:** ✅ vzdump on pfi-pve (daily) — captures the LXC rootfs
  which contains the wireguard config + peer keys. Sufficient for
  disaster recovery.
- **File-level restic:** ❌ not needed — no DB, no high-churn state,
  config is small and recoverable from vzdump.

## Refresh state

```bash
scripts/refresh-server-info.sh ana-wg
```

## Discovered via

FortiGate DHCP (MAC `bc:24:11:d7:e4:b7`).