Recover: WireGuard (Home1 <-> VIN)
No signal criticalPrivate link carrying replication, control plane traffic and agent heartbeats.
- Owner
- homelab-operator
- Target RTO
- 15m
- Last heartbeat
- never
- Dependent entities
- 1
Recovery readiness20/100
Procedure
Read fully before acting.- Tunnel loss makes Home1 look down from VIN even when Home1 is fine — confirm from the LAN side before declaring a node outage.
- Check the home-side public IP: a dynamic IP change breaks the peer endpoint.
- Do not modify firewall rules to 'test' connectivity; verify handshake timestamps instead.
Bring-up order
Dependencies first — starting out of order is a common second incident.- VIN / VPS Node
- ISP Uplink Dependency
- WireGuard (Home1 <-> VIN) Tunnel target
What this affects
Impacted if this stays down, or while you restart it.
Downstream
Postgres (replica)
Readiness breakdown
- Documented runbook 20 pts
- No backup configured 50 pts
- No failover target configured 30 pts