will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: revert to protonvpn provider, use server name from secret

Browse Source
This commit is contained in:
Will Anderson
2026-04-14 00:07:11 +00:00
parent 1cc783e704
commit 4a0ebededf
4 changed files with 5 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/fornax/worker/base/deployment.yaml
+3 -12
View File
@@ -63,7 +63,7 @@ spec:
- NET_ADMIN - NET_ADMIN
env: env:
- name: VPN_SERVICE_PROVIDER - name: VPN_SERVICE_PROVIDER
value: custom value: protonvpn
- name: VPN_TYPE - name: VPN_TYPE
value: wireguard value: wireguard
- name: WIREGUARD_PRIVATE_KEY - name: WIREGUARD_PRIVATE_KEY
@@ -71,22 +71,13 @@ spec:
secretKeyRef: secretKeyRef:
name: fornax-worker-WORKER_ID-secrets name: fornax-worker-WORKER_ID-secrets
key: PROTONVPN_PRIVATE_KEY key: PROTONVPN_PRIVATE_KEY
- name: WIREGUARD_PUBLIC_KEY - name: SERVER_NAMES
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: fornax-worker-WORKER_ID-secrets name: fornax-worker-WORKER_ID-secrets
key: PROTONVPN_PUBLIC_KEY key: PROTONVPN_SERVER
- name: WIREGUARD_ENDPOINT_IP
valueFrom:
secretKeyRef:
name: fornax-worker-WORKER_ID-secrets
key: PROTONVPN_ENDPOINT_IP
- name: WIREGUARD_ENDPOINT_PORT
value: "51820"
- name: VPN_PORT_FORWARDING - name: VPN_PORT_FORWARDING
value: "on" value: "on"
- name: VPN_PORT_FORWARDING_PROVIDER
value: protonvpn
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: 10.42.0.0/16,10.43.0.0/16 value: 10.42.0.0/16,10.43.0.0/16
ports: ports:
servers/legion/k8s/fornax/worker/base/externalsecret.yaml
+2 -6
View File
@@ -16,11 +16,7 @@ spec:
remoteRef: remoteRef:
key: secret/data/fornax/worker-WORKER_ID key: secret/data/fornax/worker-WORKER_ID
property: private_key property: private_key
- secretKey: PROTONVPN_ENDPOINT_IP - secretKey: PROTONVPN_SERVER
remoteRef: remoteRef:
key: secret/data/fornax/worker-WORKER_ID key: secret/data/fornax/worker-WORKER_ID
property: endpoint_ip property: server
- secretKey: PROTONVPN_PUBLIC_KEY
remoteRef:
key: secret/data/fornax/worker-WORKER_ID
property: public_key
servers/legion/k8s/fornax/worker/overlays/worker-tx253/kustomization.yaml
-6
View File
@@ -26,9 +26,6 @@ patches:
- op: replace - op: replace
path: /spec/template/spec/containers/0/env/3/valueFrom/secretKeyRef/name path: /spec/template/spec/containers/0/env/3/valueFrom/secretKeyRef/name
value: fornax-worker-tx253-secrets value: fornax-worker-tx253-secrets
- op: replace
path: /spec/template/spec/containers/0/env/4/valueFrom/secretKeyRef/name
value: fornax-worker-tx253-secrets
- op: replace - op: replace
path: /spec/template/spec/volumes/1/persistentVolumeClaim/claimName path: /spec/template/spec/volumes/1/persistentVolumeClaim/claimName
value: fornax-worker-tx253-config value: fornax-worker-tx253-config
@@ -68,6 +65,3 @@ patches:
- op: replace - op: replace
path: /spec/data/1/remoteRef/key path: /spec/data/1/remoteRef/key
value: secret/data/fornax/worker-tx253 value: secret/data/fornax/worker-tx253
- op: replace
path: /spec/data/2/remoteRef/key
value: secret/data/fornax/worker-tx253
servers/legion/k8s/fornax/worker/overlays/worker-tx34/kustomization.yaml
-6
View File
@@ -26,9 +26,6 @@ patches:
- op: replace - op: replace
path: /spec/template/spec/containers/0/env/3/valueFrom/secretKeyRef/name path: /spec/template/spec/containers/0/env/3/valueFrom/secretKeyRef/name
value: fornax-worker-tx34-secrets value: fornax-worker-tx34-secrets
- op: replace
path: /spec/template/spec/containers/0/env/4/valueFrom/secretKeyRef/name
value: fornax-worker-tx34-secrets
- op: replace - op: replace
path: /spec/template/spec/volumes/1/persistentVolumeClaim/claimName path: /spec/template/spec/volumes/1/persistentVolumeClaim/claimName
value: fornax-worker-tx34-config value: fornax-worker-tx34-config
@@ -68,6 +65,3 @@ patches:
- op: replace - op: replace
path: /spec/data/1/remoteRef/key path: /spec/data/1/remoteRef/key
value: secret/data/fornax/worker-tx34 value: secret/data/fornax/worker-tx34
- op: replace
path: /spec/data/2/remoteRef/key
value: secret/data/fornax/worker-tx34