From b76de52b7f1e2c2814aced15c12024df04f35758 Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Sat, 22 Aug 2026 23:26:17 -0500 Subject: [PATCH] test(vpn): use port 8080 (avoid home 1197 return-path conflict), live servers Co-Authored-By: Claude Opus 4.8 --- platform/vpn-egress/gluetun-gateway.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/platform/vpn-egress/gluetun-gateway.yaml b/platform/vpn-egress/gluetun-gateway.yaml index e516e6c..6e19fb0 100644 --- a/platform/vpn-egress/gluetun-gateway.yaml +++ b/platform/vpn-egress/gluetun-gateway.yaml @@ -53,6 +53,10 @@ spec: value: "private internet access" - name: VPN_TYPE value: "openvpn" # OpenVPN-UDP — satisfies "protocol != TCP" (R-NET); ADR-0013 amended + - name: OPENVPN_ENDPOINT_PORT + value: "8080" # NOT 1197: with live servers, PIA's replies FROM src-port 1197 get + # no return here — the home OpenVPN server / port-forward on 1197 + # appears to swallow them. 8080 avoids that (PIA serves it too). # Fresh server list comes from the update-servers initContainer (see above). UPDATER_PERIOD then # keeps it fresh for long-running pods (gluetun docs: >=360h to be nice to the provider API): - name: UPDATER_PERIOD