8d6dd27435
eth0 MTU in pods is 1450 (Flannel VXLAN). gluetun's MTU discovery was setting tun0 to 1440, making WireGuard outer packets ~1500 bytes which exceeds the 1450 limit. TLS ClientHello gets dropped, causing startup check to fail and loop. Fix: set MTU=1320 so WireGuard UDP packets stay well under 1450.