Document network operations and WireGuard maintenance

ansible/inventory/hosts.yml

@@ -45,6 +45,17 @@ all:
             backup:
               compose_args: [--no-deps, --force-recreate]
           service_reconcile_traefik_restart_targets: [poweradmin]
+        us4:
+          ansible_host: us4.wsvc.info
+          ansible_host_ipv4: 185.201.226.122
+          service_role: wireguard
+          compose_project_dir: /opt/wireguard
+          healthcheck_profile: wireguard
+          wireguard_image: >-
+            lscr.io/linuxserver/wireguard@sha256:ac43e1226878d2611315172d6ea357a95cb326ee73124b91108118efc8666889
+          service_reconcile_services:
+            wireguard:
+              compose_args: [--no-deps, --force-recreate]
     mailcow:
       hosts:
         mx2:
@@ -54,11 +65,15 @@ all:
     powerdns:
       hosts:
         hk2:
+    wireguard:
+      hosts:
+        us4:
     docker_hosts:
       children:
         mailcow:
         vaultwarden:
         powerdns:
+        wireguard:
     # Matrix is a dedicated K3s node and intentionally remains outside the
     # Docker-oriented managed group.
     k3s_servers: