update gluetun

clusters/cl01tl/helm/searxng/templates/external-secret.yaml

@@ -19,6 +19,20 @@ spec:
         key: /protonvpn/conf/cl01tl
         metadataPolicy: None
         property: private-key
+    - secretKey: proton-email
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: email
+    - secretKey: proton-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: password
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/helm/searxng/values.yaml

@@ -70,7 +70,7 @@ searxng:
         gluetun:
           image:
             repository: ghcr.io/qdm12/gluetun
-            tag: v3.40.4@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
+            tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
             pullPolicy: IfNotPresent
           lifecycle:
             postStart:
@@ -86,10 +86,22 @@ searxng:
                 secretKeyRef:
                   name: searxng-wireguard-conf
                   key: private-key
+            - name: UPDATER_PROTONVPN_EMAIL
+              valueFrom:
+                secretKeyRef:
+                  name: qbittorrent-wireguard-conf
+                  key: proton-email
+            - name: UPDATER_PROTONVPN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: qbittorrent-wireguard-conf
+                  key: proton-password
             - name: FIREWALL_OUTBOUND_SUBNETS
               value: 192.168.1.0/24,10.244.0.0/16
             - name: FIREWALL_INPUT_PORTS
               value: 8080
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: dot
           securityContext:
             privileged: True
             capabilities:

clusters/cl01tl/helm/slskd/templates/external-secret.yaml

@@ -65,3 +65,17 @@ spec:
         key: /protonvpn/conf/cl01tl
         metadataPolicy: None
         property: private-key
+    - secretKey: proton-email
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: email
+    - secretKey: proton-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: password

clusters/cl01tl/helm/slskd/values.yaml

@@ -46,7 +46,7 @@ slskd:
         gluetun:
           image:
             repository: ghcr.io/qdm12/gluetun
-            tag: v3.40.4@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
+            tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
             pullPolicy: IfNotPresent
           lifecycle:
             postStart:
@@ -62,6 +62,16 @@ slskd:
                 secretKeyRef:
                   name: slskd-wireguard-conf
                   key: private-key
+            - name: UPDATER_PROTONVPN_EMAIL
+              valueFrom:
+                secretKeyRef:
+                  name: slskd-wireguard-conf
+                  key: proton-email
+            - name: UPDATER_PROTONVPN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: slskd-wireguard-conf
+                  key: proton-password
             - name: VPN_PORT_FORWARDING
               value: "on"
             - name: PORT_FORWARD_ONLY
@@ -70,8 +80,8 @@ slskd:
               value: 192.168.1.0/24,10.244.0.0/16
             - name: FIREWALL_INPUT_PORTS
               value: 5030,50300
-            - name: DOT
-              value: "off"
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: dot
           securityContext:
             privileged: true
             capabilities:

clusters/cl01tl/helm/tubearchivist/templates/external-secret.yaml

@@ -86,3 +86,17 @@ spec:
         key: /protonvpn/conf/cl01tl
         metadataPolicy: None
         property: private-key
+    - secretKey: proton-email
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: email
+    - secretKey: proton-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: password

clusters/cl01tl/helm/tubearchivist/values.yaml

@@ -40,7 +40,7 @@ tubearchivist:
         gluetun:
           image:
             repository: ghcr.io/qdm12/gluetun
-            tag: v3.40.4@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
+            tag: v3.41.0@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
             pullPolicy: IfNotPresent
           lifecycle:
             postStart:
@@ -56,6 +56,16 @@ tubearchivist:
                 secretKeyRef:
                   name: tubearchivist-wireguard-conf
                   key: private-key
+            - name: UPDATER_PROTONVPN_EMAIL
+              valueFrom:
+                secretKeyRef:
+                  name: tubearchivist-wireguard-conf
+                  key: proton-email
+            - name: UPDATER_PROTONVPN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: tubearchivist-wireguard-conf
+                  key: proton-password
             - name: VPN_PORT_FORWARDING
               value: "on"
             - name: PORT_FORWARD_ONLY
@@ -64,12 +74,8 @@ tubearchivist:
               value: 10.0.0.0/8
             - name: FIREWALL_INPUT_PORTS
               value: 80,8000,24000
-            - name: DOT
-              value: off
-            - name: DNS_KEEP_NAMESERVER
-              value: on
-            - name: DNS_PLAINTEXT_ADDRESS
-              value: 10.96.0.10
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: dot
           securityContext:
             privileged: True
             capabilities: