Switch workers to custom WireGuard provider with correct endpoint IPs

gluetun's bundled protonvpn server list has stale IPs for US-TX#179 (37.19.200.26) and US-TX#220 (95.173.217.2). The WIREGUARD_ENDPOINT_IP env var is a filter not an override, so there's no way to redirect protonvpn provider to a new IP. Switch to custom WireGuard provider with hardcoded endpoint IPs from fresh ProtonVPN configs (95.173.217.29 / 146.70.58.130). Add DNS_KEEP_NAMESERVER=on so gluetun leaves k8s DNS intact instead of routing DNS through its own proxy (which breaks in-cluster). Port forwarding is not available with custom provider; will restore once gluetun releases an updated server list image.
2026-04-14 21:29:29 -05:00
parent 0688700ebc
commit 741191a7e6
4 changed files with 38 additions and 28 deletions
@@ -25,12 +25,10 @@ patches:
        value: fornax-worker-tx253-secrets
      - op: replace
        path: /spec/template/spec/containers/0/env/3/value
-        value: US-TX#179
-      - op: add
-        path: /spec/template/spec/containers/0/env/-
-        value:
-          name: WIREGUARD_ENDPOINT_IP
-          value: "95.173.217.29"
+        value: mngiSxBpH7GU24nnWdBEcnhDnCPn2jq5+ZP3zwPwISA=
+      - op: replace
+        path: /spec/template/spec/containers/0/env/5/value
+        value: "95.173.217.29"
      - op: replace
        path: /spec/template/spec/containers/1/env/1/value
        value: tx253
@@ -25,12 +25,10 @@ patches:
        value: fornax-worker-tx34-secrets
      - op: replace
        path: /spec/template/spec/containers/0/env/3/value
-        value: US-TX#220
-      - op: add
-        path: /spec/template/spec/containers/0/env/-
-        value:
-          name: WIREGUARD_ENDPOINT_IP
-          value: "146.70.58.130"
+        value: wqJcz4akzVFxx35aJ5B7G/IJ9qsRvpcGNub3rLHcqXo=
+      - op: replace
+        path: /spec/template/spec/containers/0/env/5/value
+        value: "146.70.58.130"
      - op: replace
        path: /spec/template/spec/containers/1/env/1/value
        value: tx34