Set DNS_UPSTREAM_RESOLVER_TYPE=plain to actually disable DoT in gluetun

DOT=off alone does not override DNS_UPSTREAM_RESOLVER_TYPE in this version
of gluetun — it defaults to DoT regardless, causing DNS failures through
ProtonVPN (port 853 connection reset). Setting the resolver type directly
fixes plain DNS routing to k8s CoreDNS.

servers/legion/k8s/fornax/worker/base/deployment.yaml

@@ -81,6 +81,8 @@ spec:
               value: "51820"
             - name: DOT
               value: "off"
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: "plain"
             - name: DNS_UPSTREAM_PLAIN_ADDRESSES
               value: "10.43.0.10:53"
             - name: HEALTH_TARGET_ADDRESS

servers/legion/k8s/media/fornax-workers.yaml

@@ -110,6 +110,8 @@ spec:
               value: "51820"
             - name: DOT
               value: "off"
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: "plain"
             - name: DNS_UPSTREAM_PLAIN_ADDRESSES
               value: "10.43.0.10:53"
             - name: HEALTH_TARGET_ADDRESS
@@ -326,6 +328,8 @@ spec:
               value: "51820"
             - name: DOT
               value: "off"
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: "plain"
             - name: DNS_UPSTREAM_PLAIN_ADDRESSES
               value: "10.43.0.10:53"
             - name: HEALTH_TARGET_ADDRESS