Skip to main content

WireGuard VPN

Recorded deployment: CT 103

WireGuard provides encrypted access back to private LAN services. An Orbi router WireGuard configuration has also been explored.

Verification example​

wg show

Run this inside the relevant LXC, after confirming the application is installed and the command applies.

Security and operations​

Never publish private keys or client configurations with embedded secrets.

Documentation checklist​

  1. Record service purpose and dependencies.
  2. Save a redacted Compose file in Forgejo.
  3. Describe persistent volumes and backups.
  4. Add a health monitor in Uptime Kuma.
  5. Record upgrade and rollback procedures.