replicaCount: 1

image:
  repository: qmcgaw/gluetun
  tag: "latest"
  pullPolicy: Always

env:
  - name: VPN_SERVICE_PROVIDER
    value: "airvpn"
  - name: VPN_TYPE
    value: "wireguard"
  - name: WIREGUARD_PRIVATE_KEY
    valueFrom:
      secretKeyRef:
        name: gluetun-wireguard
        key: WIREGUARD_PRIVATE_KEY
  - name: WIREGUARD_PRESHARED_KEY
    valueFrom:
      secretKeyRef:
        name: gluetun-wireguard
        key: WIREGUARD_PRESHARED_KEY
  - name: WIREGUARD_ADDRESSES
    value: "10.160.17.207/32,fd7d:76ee:e68f:a993:61d7:a5fe:f834:90e1/128"
  - name: SERVER_HOSTNAMES
    value: "nl3.vpn.airdns.org"
  - name: HTTPPROXY
    value: "on"
  - name: HTTPPROXY_LOG
    value: "off"
  - name: FIREWALL_INPUT_PORTS
    value: "8888"
  - name: TZ
    value: "Europe/Amsterdam"

secret:
  create: false
  name: gluetun-wireguard
  privateKey: "REPLACE_ME"

service:
  type: ClusterIP
  port: 8888

volumes:
  - name: dev-tun
    hostPath:
      path: /dev/net/tun

volumeMounts:
  - name: dev-tun
    mountPath: "/dev/net/tun"

securityContext:
  allowPrivilegeEscalation: false
  capabilities:
    add:
      - NET_ADMIN

livenessProbe:
  tcpSocket:
    port: 8888
  initialDelaySeconds: 10
  periodSeconds: 20
  timeoutSeconds: 2
  failureThreshold: 3

readinessProbe:
  tcpSocket:
    port: 8888
  initialDelaySeconds: 5
  periodSeconds: 10
  timeoutSeconds: 2
  failureThreshold: 3

resources:
  requests:
    memory: 128Mi
    cpu: 100m
  limits:
    memory: 512Mi
    cpu: 500m

nodeSelector: {}

tolerations: []

affinity: {}