From 942b398a53455eabfb8e6b6f149a118a4aa4e4b2 Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Wed, 15 Apr 2026 01:51:17 -0500 Subject: [PATCH] =?UTF-8?q?Switch=20workers=20back=20to=20protonvpn=20prov?= =?UTF-8?q?ider=20=E2=80=94=20custom=20WireGuard=20IP=20assignment=20misma?= =?UTF-8?q?tch?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Custom provider hardcodes 10.2.0.2/32 but ProtonVPN assigns a different IP per session via their API. WireGuard handshake succeeds but ProtonVPN doesn't route traffic for the wrong IP. Native protonvpn provider fetches the correct IP assignment automatically and enables port forwarding. --- servers/legion/k8s/media/fornax-workers.yaml | 32 ++++++-------------- 1 file changed, 10 insertions(+), 22 deletions(-) diff --git a/servers/legion/k8s/media/fornax-workers.yaml b/servers/legion/k8s/media/fornax-workers.yaml index 39850ce..1abe48e 100644 --- a/servers/legion/k8s/media/fornax-workers.yaml +++ b/servers/legion/k8s/media/fornax-workers.yaml @@ -92,7 +92,7 @@ spec: add: ["NET_ADMIN"] env: - name: VPN_SERVICE_PROVIDER - value: "custom" + value: "protonvpn" - name: VPN_TYPE value: "wireguard" - name: WIREGUARD_PRIVATE_KEY @@ -100,22 +100,16 @@ spec: secretKeyRef: name: fornax-worker-tx253-secrets key: PROTONVPN_PRIVATE_KEY - - name: WIREGUARD_PUBLIC_KEY - value: "mngiSxBpH7GU24nnWdBEcnhDnCPn2jq5+ZP3zwPwISA=" - - name: WIREGUARD_ADDRESSES - value: "10.2.0.2/32" - - name: WIREGUARD_ENDPOINT_IP - value: "95.173.217.29" - - name: WIREGUARD_ENDPOINT_PORT - value: "51820" + - name: SERVER_NAMES + value: "US-TX#253" + - name: VPN_PORT_FORWARDING + value: "on" - name: DOT value: "off" - name: DNS_UPSTREAM_RESOLVER_TYPE value: "plain" - name: DNS_UPSTREAM_PLAIN_ADDRESSES value: "10.43.0.10:53" - - name: HEALTH_TARGET_ADDRESS - value: "api.protonvpn.ch:443,account.proton.me:443" - name: HEALTH_ICMP_TARGET_IPS value: "10.2.0.1" - name: FIREWALL_OUTBOUND_SUBNETS @@ -335,7 +329,7 @@ spec: add: ["NET_ADMIN"] env: - name: VPN_SERVICE_PROVIDER - value: "custom" + value: "protonvpn" - name: VPN_TYPE value: "wireguard" - name: WIREGUARD_PRIVATE_KEY @@ -343,22 +337,16 @@ spec: secretKeyRef: name: fornax-worker-tx34-secrets key: PROTONVPN_PRIVATE_KEY - - name: WIREGUARD_PUBLIC_KEY - value: "wqJcz4akzVFxx35aJ5B7G/IJ9qsRvpcGNub3rLHcqXo=" - - name: WIREGUARD_ADDRESSES - value: "10.2.0.2/32" - - name: WIREGUARD_ENDPOINT_IP - value: "146.70.58.130" - - name: WIREGUARD_ENDPOINT_PORT - value: "51820" + - name: SERVER_NAMES + value: "US-TX#34" + - name: VPN_PORT_FORWARDING + value: "on" - name: DOT value: "off" - name: DNS_UPSTREAM_RESOLVER_TYPE value: "plain" - name: DNS_UPSTREAM_PLAIN_ADDRESSES value: "10.43.0.10:53" - - name: HEALTH_TARGET_ADDRESS - value: "api.protonvpn.ch:443,account.proton.me:443" - name: HEALTH_ICMP_TARGET_IPS value: "10.2.0.1" - name: FIREWALL_OUTBOUND_SUBNETS