diff --git a/platform/vpn-egress/gluetun-gateway.yaml b/platform/vpn-egress/gluetun-gateway.yaml
index 269748a..1de8b4f 100644
--- a/platform/vpn-egress/gluetun-gateway.yaml
+++ b/platform/vpn-egress/gluetun-gateway.yaml
@@ -101,7 +101,8 @@ spec:
           secret:
             secretName: pia-custom-ovpn
             items:
-              - key: pia.ovpn
+              # the operator's secret keyed the .ovpn by its filename; map it to /config/pia.ovpn
+              - key: sweden-aes-128-cbc-udp-dns.ovpn
                 path: pia.ovpn
 ---
 # Control API Service — used for tunnel-state health/alerting (ADR-0013 "alert on tunnel state").