will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Switch gluetun to custom provider — use explicit WireGuard config for US-IL#267

Browse Source 
Avoids gluetun's ProtonVPN server name lookup entirely. All WireGuard
parameters (endpoint, peer key, client address, keepalive) come directly
from the downloaded ProtonVPN config.
This commit is contained in:
Will Anderson
2026-04-14 20:22:31 -05:00
parent 9a523da831
commit 59f551663b
1 changed files with 10 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/media/fornax-workers.yaml
+10 -8
View File
@@ -92,7 +92,7 @@ spec:
add: ["NET_ADMIN"] add: ["NET_ADMIN"]
env: env:
- name: VPN_SERVICE_PROVIDER - name: VPN_SERVICE_PROVIDER
value: "protonvpn" value: "custom"
- name: VPN_TYPE - name: VPN_TYPE
value: "wireguard" value: "wireguard"
- name: WIREGUARD_PRIVATE_KEY - name: WIREGUARD_PRIVATE_KEY
@@ -100,16 +100,16 @@ spec:
secretKeyRef: secretKeyRef:
name: fornax-worker-tx253-secrets name: fornax-worker-tx253-secrets
key: PROTONVPN_PRIVATE_KEY key: PROTONVPN_PRIVATE_KEY
- name: SERVER_COUNTRIES
value: "United States"
- name: WIREGUARD_PUBLIC_KEY - name: WIREGUARD_PUBLIC_KEY
value: "qT0lxDVbWEIyrL2A40FfCXRlUALvnryRz2aQdD6gUDs=" value: "qT0lxDVbWEIyrL2A40FfCXRlUALvnryRz2aQdD6gUDs="
- name: WIREGUARD_ENDPOINT_IP - name: WIREGUARD_ENDPOINT_IP
value: "89.187.180.40" value: "89.187.180.40"
- name: WIREGUARD_ENDPOINT_PORT - name: WIREGUARD_ENDPOINT_PORT
value: "51820" value: "51820"
- name: VPN_PORT_FORWARDING - name: WIREGUARD_ADDRESSES
value: "on" value: "10.2.0.2/32"
- name: WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL
value: "25s"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: "10.42.0.0/16,10.43.0.0/16" value: "10.42.0.0/16,10.43.0.0/16"
volumeMounts: volumeMounts:
@@ -304,7 +304,7 @@ spec:
add: ["NET_ADMIN"] add: ["NET_ADMIN"]
env: env:
- name: VPN_SERVICE_PROVIDER - name: VPN_SERVICE_PROVIDER
value: "protonvpn" value: "custom"
- name: VPN_TYPE - name: VPN_TYPE
value: "wireguard" value: "wireguard"
- name: WIREGUARD_PRIVATE_KEY - name: WIREGUARD_PRIVATE_KEY
@@ -312,14 +312,16 @@ spec:
secretKeyRef: secretKeyRef:
name: fornax-worker-tx34-secrets name: fornax-worker-tx34-secrets
key: PROTONVPN_PRIVATE_KEY key: PROTONVPN_PRIVATE_KEY
- name: SERVER_COUNTRIES
value: "United States"
- name: WIREGUARD_PUBLIC_KEY - name: WIREGUARD_PUBLIC_KEY
value: "qT0lxDVbWEIyrL2A40FfCXRlUALvnryRz2aQdD6gUDs=" value: "qT0lxDVbWEIyrL2A40FfCXRlUALvnryRz2aQdD6gUDs="
- name: WIREGUARD_ENDPOINT_IP - name: WIREGUARD_ENDPOINT_IP
value: "89.187.180.40" value: "89.187.180.40"
- name: WIREGUARD_ENDPOINT_PORT - name: WIREGUARD_ENDPOINT_PORT
value: "51820" value: "51820"
- name: WIREGUARD_ADDRESSES
value: "10.2.0.2/32"
- name: WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL
value: "25s"
- name: VPN_PORT_FORWARDING - name: VPN_PORT_FORWARDING
value: "on" value: "on"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS