From 214afed0a2d67139b6cf7dd585d3491e7ce9eb9d Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Tue, 14 Apr 2026 22:04:36 -0500 Subject: [PATCH] Set DNS_UPSTREAM_RESOLVER_TYPE=plain to actually disable DoT in gluetun MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit DOT=off alone does not override DNS_UPSTREAM_RESOLVER_TYPE in this version of gluetun — it defaults to DoT regardless, causing DNS failures through ProtonVPN (port 853 connection reset). Setting the resolver type directly fixes plain DNS routing to k8s CoreDNS. --- servers/legion/k8s/fornax/worker/base/deployment.yaml | 2 ++ servers/legion/k8s/media/fornax-workers.yaml | 4 ++++ 2 files changed, 6 insertions(+) diff --git a/servers/legion/k8s/fornax/worker/base/deployment.yaml b/servers/legion/k8s/fornax/worker/base/deployment.yaml index b5c729e..24a8542 100644 --- a/servers/legion/k8s/fornax/worker/base/deployment.yaml +++ b/servers/legion/k8s/fornax/worker/base/deployment.yaml @@ -81,6 +81,8 @@ spec: value: "51820" - name: DOT value: "off" + - name: DNS_UPSTREAM_RESOLVER_TYPE + value: "plain" - name: DNS_UPSTREAM_PLAIN_ADDRESSES value: "10.43.0.10:53" - name: HEALTH_TARGET_ADDRESS diff --git a/servers/legion/k8s/media/fornax-workers.yaml b/servers/legion/k8s/media/fornax-workers.yaml index e03ef5c..2f89d6f 100644 --- a/servers/legion/k8s/media/fornax-workers.yaml +++ b/servers/legion/k8s/media/fornax-workers.yaml @@ -110,6 +110,8 @@ spec: value: "51820" - name: DOT value: "off" + - name: DNS_UPSTREAM_RESOLVER_TYPE + value: "plain" - name: DNS_UPSTREAM_PLAIN_ADDRESSES value: "10.43.0.10:53" - name: HEALTH_TARGET_ADDRESS @@ -326,6 +328,8 @@ spec: value: "51820" - name: DOT value: "off" + - name: DNS_UPSTREAM_RESOLVER_TYPE + value: "plain" - name: DNS_UPSTREAM_PLAIN_ADDRESSES value: "10.43.0.10:53" - name: HEALTH_TARGET_ADDRESS