diff --git a/platform/vpn-egress/gluetun-gateway.yaml b/platform/vpn-egress/gluetun-gateway.yaml
index 1de8b4f..69e2a0c 100644
--- a/platform/vpn-egress/gluetun-gateway.yaml
+++ b/platform/vpn-egress/gluetun-gateway.yaml
@@ -46,6 +46,13 @@ spec:
               value: "openvpn"
             - name: OPENVPN_CUSTOM_CONFIG
               value: "/config/pia.ovpn"      # the operator's PIA .ovpn (pia-custom-ovpn Secret)
+            # gluetun's custom parser needs an IP (not the .ovpn's `remote sweden.privacy.network`
+            # hostname). sweden.privacy.network's load-balanced pool is 158.173.241.{22,34,55,112,239};
+            # pin a currently-healthy one. NOTE: if PIA rotates it out, re-resolve + update.
+            - name: VPN_ENDPOINT_IP
+              value: "158.173.241.22"
+            - name: VPN_ENDPOINT_PORT
+              value: "1198"
             # PIA username/password for the .ovpn's auth-user-pass (pia-credentials SOPS Secret):
             - name: OPENVPN_USER
               valueFrom: