From 66a76e6e3374f6a622952a57a59985174a041551 Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Sun, 23 Aug 2026 00:50:54 -0500 Subject: [PATCH] fix(vpn): VPN_ENDPOINT_IP for custom mode (.ovpn hostname not parseable) gluetun's custom parser rejects the .ovpn's 'remote sweden.privacy.network' (needs an IP). sweden.privacy.network LB pool = 158.173.241.{22,34,55,112,239}; pin .22 (verified to handshake) via VPN_ENDPOINT_IP/PORT while the .ovpn supplies cipher/CA. Co-Authored-By: Claude Opus 4.8 --- platform/vpn-egress/gluetun-gateway.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/platform/vpn-egress/gluetun-gateway.yaml b/platform/vpn-egress/gluetun-gateway.yaml index 1de8b4f..69e2a0c 100644 --- a/platform/vpn-egress/gluetun-gateway.yaml +++ b/platform/vpn-egress/gluetun-gateway.yaml @@ -46,6 +46,13 @@ spec: value: "openvpn" - name: OPENVPN_CUSTOM_CONFIG value: "/config/pia.ovpn" # the operator's PIA .ovpn (pia-custom-ovpn Secret) + # gluetun's custom parser needs an IP (not the .ovpn's `remote sweden.privacy.network` + # hostname). sweden.privacy.network's load-balanced pool is 158.173.241.{22,34,55,112,239}; + # pin a currently-healthy one. NOTE: if PIA rotates it out, re-resolve + update. + - name: VPN_ENDPOINT_IP + value: "158.173.241.22" + - name: VPN_ENDPOINT_PORT + value: "1198" # PIA username/password for the .ovpn's auth-user-pass (pia-credentials SOPS Secret): - name: OPENVPN_USER valueFrom: