wireguard-lab-overlay/docs/operations.md

Operations Manual

Daily Operations

Health Checks

ansible-playbook playbooks/health-check.yml

Rolling Updates

ansible-playbook playbooks/rolling-update.yml

Emergency Procedures

Emergency Shutdown

ansible-playbook playbooks/emergency-shutdown.yml

Restore After Shutdown

ansible-playbook playbooks/restore-lab.yml

Adding/Removing Components

Add New Lab Network

1. Edit terraform/terraform.tfvars
2. Run terraform apply
3. Run ansible-playbook playbooks/site.yml

Add Gateway to Existing Lab

1. Edit terraform/terraform.tfvars
2. Run terraform apply
3. Run ansible-playbook playbooks/add-gateway.yml

Remove Gateway

ansible-playbook playbooks/remove-gateway.yml

Troubleshooting

WireGuard Tunnel Down

1. Check WireGuard status: wg show
2. Verify peer connectivity: ping <peer_wg_ip>
3. Check firewall rules
4. Restart WireGuard: systemctl restart wg-quick@wg-labXXX

DHCP Not Working

1. Check DHCP server status
2. Verify bridge is up
3. Check DHCP lease file
4. Test with static IP first

VXLAN Issues

1. Verify WireGuard tunnels are up first
2. Check VXLAN interface: ip -d link show vxlanXXX
3. Verify FDB entries: bridge fdb show