media: wireguard values from airvpn config
This commit is contained in:
@@ -6,10 +6,10 @@ Service endpoints:
|
|||||||
|
|
||||||
AirVPN WireGuard values:
|
AirVPN WireGuard values:
|
||||||
- Update `helm-values/gluetun_values.yaml`:
|
- Update `helm-values/gluetun_values.yaml`:
|
||||||
- `secret.privateKey` -> AirVPN WireGuard private key
|
- `env.WIREGUARD_ADDRESSES` -> WireGuard tunnel address(es) (IPv4 /32 and optional IPv6)
|
||||||
- `secret.addresses` -> WireGuard tunnel address(es) (IPv4 /32 and optional IPv6)
|
|
||||||
- `env.SERVER_HOSTNAMES` -> stable AirVPN server hostname
|
- `env.SERVER_HOSTNAMES` -> stable AirVPN server hostname
|
||||||
- Alternatively set `secret.create: false` and provide a Secret named `gluetun-wireguard` with keys `WIREGUARD_PRIVATE_KEY` and `WIREGUARD_ADDRESSES`.
|
- Create a Secret named `gluetun-wireguard` with key `WIREGUARD_PRIVATE_KEY` from your AirVPN WireGuard config (do not commit the key).
|
||||||
|
- `helm-values/gluetun_values.yaml` sets `secret.create: false` so the chart does not create a placeholder secret.
|
||||||
|
|
||||||
Validation:
|
Validation:
|
||||||
- ArgoCD health: `argocd app get gluetun` and `argocd app get nzbget`
|
- ArgoCD health: `argocd app get gluetun` and `argocd app get nzbget`
|
||||||
|
|||||||
@@ -11,5 +11,4 @@ metadata:
|
|||||||
type: Opaque
|
type: Opaque
|
||||||
stringData:
|
stringData:
|
||||||
WIREGUARD_PRIVATE_KEY: {{ .Values.secret.privateKey | quote }}
|
WIREGUARD_PRIVATE_KEY: {{ .Values.secret.privateKey | quote }}
|
||||||
WIREGUARD_ADDRESSES: {{ .Values.secret.addresses | quote }}
|
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|||||||
@@ -16,10 +16,7 @@ env:
|
|||||||
name: gluetun-wireguard
|
name: gluetun-wireguard
|
||||||
key: WIREGUARD_PRIVATE_KEY
|
key: WIREGUARD_PRIVATE_KEY
|
||||||
- name: WIREGUARD_ADDRESSES
|
- name: WIREGUARD_ADDRESSES
|
||||||
valueFrom:
|
value: "REPLACE_ME"
|
||||||
secretKeyRef:
|
|
||||||
name: gluetun-wireguard
|
|
||||||
key: WIREGUARD_ADDRESSES
|
|
||||||
- name: SERVER_HOSTNAMES
|
- name: SERVER_HOSTNAMES
|
||||||
value: "REPLACE_ME"
|
value: "REPLACE_ME"
|
||||||
- name: HTTPPROXY
|
- name: HTTPPROXY
|
||||||
@@ -35,7 +32,6 @@ secret:
|
|||||||
create: true
|
create: true
|
||||||
name: gluetun-wireguard
|
name: gluetun-wireguard
|
||||||
privateKey: "REPLACE_ME"
|
privateKey: "REPLACE_ME"
|
||||||
addresses: "REPLACE_ME"
|
|
||||||
|
|
||||||
service:
|
service:
|
||||||
type: ClusterIP
|
type: ClusterIP
|
||||||
|
|||||||
@@ -16,12 +16,9 @@ env:
|
|||||||
name: gluetun-wireguard
|
name: gluetun-wireguard
|
||||||
key: WIREGUARD_PRIVATE_KEY
|
key: WIREGUARD_PRIVATE_KEY
|
||||||
- name: WIREGUARD_ADDRESSES
|
- name: WIREGUARD_ADDRESSES
|
||||||
valueFrom:
|
value: "10.160.17.207/32,fd7d:76ee:e68f:a993:61d7:a5fe:f834:90e1/128"
|
||||||
secretKeyRef:
|
|
||||||
name: gluetun-wireguard
|
|
||||||
key: WIREGUARD_ADDRESSES
|
|
||||||
- name: SERVER_HOSTNAMES
|
- name: SERVER_HOSTNAMES
|
||||||
value: "REPLACE_ME"
|
value: "nl3.vpn.airdns.org"
|
||||||
- name: HTTPPROXY
|
- name: HTTPPROXY
|
||||||
value: "on"
|
value: "on"
|
||||||
- name: HTTPPROXY_LOG
|
- name: HTTPPROXY_LOG
|
||||||
@@ -32,10 +29,9 @@ env:
|
|||||||
value: "Europe/Amsterdam"
|
value: "Europe/Amsterdam"
|
||||||
|
|
||||||
secret:
|
secret:
|
||||||
create: true
|
create: false
|
||||||
name: gluetun-wireguard
|
name: gluetun-wireguard
|
||||||
privateKey: "REPLACE_ME"
|
privateKey: "REPLACE_ME"
|
||||||
addresses: "REPLACE_ME"
|
|
||||||
|
|
||||||
service:
|
service:
|
||||||
type: ClusterIP
|
type: ClusterIP
|
||||||
|
|||||||
Reference in New Issue
Block a user