Networking

SOPs for KareTech networking infrastructure.

Topics

• WireGuard UISP Router — Persistent WireGuard VPN on UISP Routers via startup scripts
• UniFi Captive Portal — Troubleshooting UniFi guest portal issues

VPN Architecture

KareTech uses WG Easy (WireGuard) on Titan for site-to-site VPN.

• Server: wireguard.karetechsolutions.com:51820
• VPN Range: 10.8.0.0/22
• Management: WG Easy UI at vpn.karetechsolutions.com
• DB: /opt/docker/_network/wg-easy/wg-easy.db (SQLite)

UniFi Controller

• URL: https://unifi.karetechsolutions.com
• Note: UniFi OS runs as a Podman container managed by systemd, NOT Docker. Does not appear in docker ps.
• Service: uosserver.service
• JVM heap capped at -Xmx1024M via env-overrides (set 2026-03-12)
• Credentials: Infisical /credentials/unifi/