From 59f551663b88a311a50dcd1f31b9e684a7af643a Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Tue, 14 Apr 2026 20:22:31 -0500 Subject: [PATCH] =?UTF-8?q?Switch=20gluetun=20to=20custom=20provider=20?= =?UTF-8?q?=E2=80=94=20use=20explicit=20WireGuard=20config=20for=20US-IL#2?= =?UTF-8?q?67?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Avoids gluetun's ProtonVPN server name lookup entirely. All WireGuard parameters (endpoint, peer key, client address, keepalive) come directly from the downloaded ProtonVPN config. --- servers/legion/k8s/media/fornax-workers.yaml | 18 ++++++++++-------- 1 file changed, 10 insertions(+), 8 deletions(-) diff --git a/servers/legion/k8s/media/fornax-workers.yaml b/servers/legion/k8s/media/fornax-workers.yaml index a22b3a3..d8141ac 100644 --- a/servers/legion/k8s/media/fornax-workers.yaml +++ b/servers/legion/k8s/media/fornax-workers.yaml @@ -92,7 +92,7 @@ spec: add: ["NET_ADMIN"] env: - name: VPN_SERVICE_PROVIDER - value: "protonvpn" + value: "custom" - name: VPN_TYPE value: "wireguard" - name: WIREGUARD_PRIVATE_KEY @@ -100,16 +100,16 @@ spec: secretKeyRef: name: fornax-worker-tx253-secrets key: PROTONVPN_PRIVATE_KEY - - name: SERVER_COUNTRIES - value: "United States" - name: WIREGUARD_PUBLIC_KEY value: "qT0lxDVbWEIyrL2A40FfCXRlUALvnryRz2aQdD6gUDs=" - name: WIREGUARD_ENDPOINT_IP value: "89.187.180.40" - name: WIREGUARD_ENDPOINT_PORT value: "51820" - - name: VPN_PORT_FORWARDING - value: "on" + - name: WIREGUARD_ADDRESSES + value: "10.2.0.2/32" + - name: WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL + value: "25s" - name: FIREWALL_OUTBOUND_SUBNETS value: "10.42.0.0/16,10.43.0.0/16" volumeMounts: @@ -304,7 +304,7 @@ spec: add: ["NET_ADMIN"] env: - name: VPN_SERVICE_PROVIDER - value: "protonvpn" + value: "custom" - name: VPN_TYPE value: "wireguard" - name: WIREGUARD_PRIVATE_KEY @@ -312,14 +312,16 @@ spec: secretKeyRef: name: fornax-worker-tx34-secrets key: PROTONVPN_PRIVATE_KEY - - name: SERVER_COUNTRIES - value: "United States" - name: WIREGUARD_PUBLIC_KEY value: "qT0lxDVbWEIyrL2A40FfCXRlUALvnryRz2aQdD6gUDs=" - name: WIREGUARD_ENDPOINT_IP value: "89.187.180.40" - name: WIREGUARD_ENDPOINT_PORT value: "51820" + - name: WIREGUARD_ADDRESSES + value: "10.2.0.2/32" + - name: WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL + value: "25s" - name: VPN_PORT_FORWARDING value: "on" - name: FIREWALL_OUTBOUND_SUBNETS