a1623eda39
DoT (port 853) to 1.1.1.1 through ProtonVPN VPN tunnel gets TCP RST, causing gluetun healthcheck to fail (can't resolve github.com / cloudflare.com). k8s coredns at 10.43.0.10 is reachable via eth0 within FIREWALL_OUTBOUND_SUBNETS, bypassing the VPN for DNS while letting all other traffic tunnel correctly. Also rename VPN_ENDPOINT_IP/PORT to WIREGUARD_ENDPOINT_IP/PORT to suppress gluetun deprecation warnings.