alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

feat: switch to airvpn (#4912)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 17s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m29s
Details

Browse Source 
Reviewed-on: #4912
This commit was merged in pull request #4912.
This commit is contained in:
Alex Lebens
2026-03-20 04:08:30 +00:00
parent bfa0c7b555
commit 854f3646ce
10 changed files with 175 additions and 130 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
clusters/cl01tl/helm/yubal/templates/external-secret.yaml
View File

@@ -16,20 +16,27 @@ spec:
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /protonvpn/conf/cl01tl
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: private-key
- secretKey: proton-email
- secretKey: preshared-key
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /protonvpn/conf/cl01tl
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: email
- secretKey: proton-password
property: preshared-key
- secretKey: addresses
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /protonvpn/conf/cl01tl
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: password
property: addresses
- secretKey: input-ports
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /airvpn/conf/cl01tl
metadataPolicy: None
property: input-ports

18
clusters/cl01tl/helm/yubal/values.yaml
View File

@@ -40,11 +40,7 @@ yubal:
# command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
# env:
# - name: VPN_SERVICE_PROVIDER
# value: protonvpn
# - name: PUID
# value: "1000"
# - name: PGID
# value: "1000"
# value: airvpn
# - name: VPN_TYPE
# value: wireguard
# - name: WIREGUARD_PRIVATE_KEY
@@ -52,22 +48,26 @@ yubal:
# secretKeyRef:
# name: yubal-wireguard-conf
# key: private-key
# - name: UPDATER_PROTONVPN_EMAIL
# - name: WIREGUARD_PRESHARED_KEY
# valueFrom:
# secretKeyRef:
# name: yubal-wireguard-conf
# key: proton-email
# - name: UPDATER_PROTONVPN_PASSWORD
# key: preshared-key
# - name: WIREGUARD_ADDRESSES
# valueFrom:
# secretKeyRef:
# name: yubal-wireguard-conf
# key: proton-password
# key: addresses
# - name: FIREWALL_OUTBOUND_SUBNETS
# value: 10.0.0.0/8
# - name: FIREWALL_INPUT_PORTS
# value: 8000
# - name: DNS_UPSTREAM_RESOLVER_TYPE
# value: dot
# - name: HTTPPROXY
# value: "off"
# - name: SHADOWSOCKS
# value: "off"
# securityContext:
# privileged: True
# capabilities: