fix(vpn): bump Gluetun to v3.41.0 (v3.40.0 lacks PIA WireGuard support)

The deployed v3.40.0 rejected PIA+WireGuard ('private internet access is not valid for Wireguard'). Verified v3.41.0 accepts the PIA+WireGuard provider/protocol (passes config validation; ADR-0013's model holds — v3.40.0 was just too old). Bump the pin. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-08-21 23:10:47 -05:00
1 parent cbcfae01e1
commit 13a8df4e4a
@@ -29,7 +29,9 @@ spec:
    spec:
      containers:
        - name: gluetun
-          image: qmcgaw/gluetun:v3.40.0        # pinned; Renovate bumps
+          image: qmcgaw/gluetun:v3.41.0        # pinned; Renovate bumps. NOTE: PIA+WireGuard support
+                                               # requires >= v3.41 (v3.40.0 rejects "private internet
+                                               # access" as a WireGuard provider — verified at deploy).
          securityContext:
            capabilities:
              add: ["NET_ADMIN"]               # required for the tunnel + firewall