diff --git a/platform/vpn-egress/gluetun-gateway.yaml b/platform/vpn-egress/gluetun-gateway.yaml
index 3f1e7ff..dda2dba 100644
--- a/platform/vpn-egress/gluetun-gateway.yaml
+++ b/platform/vpn-egress/gluetun-gateway.yaml
@@ -39,7 +39,7 @@ spec:
             - name: VPN_SERVICE_PROVIDER
               value: "private internet access"
             - name: VPN_TYPE
-              value: "wireguard"               # UDP — satisfies "protocol != TCP" (R-NET); upgrade over OpenVPN
+              value: "openvpn"               # UDP — satisfies "protocol != TCP" (R-NET); upgrade over OpenVPN
             # PIA credentials from the SOPS secret (Gluetun's PIA creds env, used for WireGuard too):
             - name: OPENVPN_USER
               valueFrom: