will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix gluetun healthcheck targets and DNS env var on fornax workers

Browse Source 
Change HEALTH_TARGET_ADDRESS to ProtonVPN API endpoints so TLS startup
check doesn't fail against cloudflare.com/github.com (rejected from
ProtonVPN exit IPs). Rename deprecated DNS_ADDRESS to
DNS_UPSTREAM_PLAIN_ADDRESSES in fornax-workers.yaml.
This commit is contained in:
Will Anderson
2026-04-14 21:58:52 -05:00
parent a1623eda39
commit 10dd561ec0
2 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/fornax/worker/base/deployment.yaml
+3 -1
View File
@@ -81,8 +81,10 @@ spec:
value: "51820" value: "51820"
- name: DOT - name: DOT
value: "off" value: "off"
- name: DNS_ADDRESS - name: DNS_UPSTREAM_PLAIN_ADDRESSES
value: "10.43.0.10" value: "10.43.0.10"
- name: HEALTH_TARGET_ADDRESS
value: "api.protonvpn.ch:443,account.proton.me:443"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: 10.42.0.0/16,10.43.0.0/16 value: 10.42.0.0/16,10.43.0.0/16
ports: ports:
servers/legion/k8s/media/fornax-workers.yaml
+6 -2
View File
@@ -110,8 +110,10 @@ spec:
value: "51820" value: "51820"
- name: DOT - name: DOT
value: "off" value: "off"
- name: DNS_ADDRESS - name: DNS_UPSTREAM_PLAIN_ADDRESSES
value: "10.43.0.10" value: "10.43.0.10"
- name: HEALTH_TARGET_ADDRESS
value: "api.protonvpn.ch:443,account.proton.me:443"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: "10.42.0.0/16,10.43.0.0/16" value: "10.42.0.0/16,10.43.0.0/16"
volumeMounts: volumeMounts:
@@ -324,8 +326,10 @@ spec:
value: "51820" value: "51820"
- name: DOT - name: DOT
value: "off" value: "off"
- name: DNS_ADDRESS - name: DNS_UPSTREAM_PLAIN_ADDRESSES
value: "10.43.0.10" value: "10.43.0.10"
- name: HEALTH_TARGET_ADDRESS
value: "api.protonvpn.ch:443,account.proton.me:443"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: "10.42.0.0/16,10.43.0.0/16" value: "10.42.0.0/16,10.43.0.0/16"
volumeMounts: volumeMounts: