add the media stack

base/vpn/gluetun-config.yaml

@@ -0,0 +1,47 @@
+---
+# Gluetun VPN Configuration
+# Shared configuration for all pods using Gluetun sidecar
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: gluetun-config
+  namespace: media
+  labels:
+    app.kubernetes.io/name: media-stack
+    app.kubernetes.io/component: vpn
+data:
+  # VPN Provider
+  VPN_SERVICE_PROVIDER: "mullvad"
+  VPN_TYPE: "wireguard"
+  
+  # Server selection - adjust to your preferred location
+  # Options: See https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md
+  # Examples: "London", "Amsterdam", "New York City", "Stockholm"
+  SERVER_CITIES: "London"
+  
+  # Kill switch - blocks all traffic if VPN drops (highly recommended)
+  FIREWALL: "on"
+  
+  # DNS over TLS for privacy
+  DOT: "on"
+  
+  # Block malicious domains
+  BLOCK_MALICIOUS: "on"
+  BLOCK_SURVEILLANCE: "on"
+  BLOCK_ADS: "off"
+  
+  # Health check settings
+  HEALTH_VPN_DURATION_INITIAL: "30s"
+  HEALTH_VPN_DURATION_ADDITION: "5s"
+  
+  # Logging
+  LOG_LEVEL: "info"
+  
+  # HTTP Proxy (optional - can be used by other apps)
+  HTTPPROXY: "on"
+  HTTPPROXY_LOG: "off"
+  
+  # Firewall input ports - for qBittorrent incoming connections
+  # If you have Mullvad port forwarding enabled, set this to your forwarded port
+  # Get a port at: https://mullvad.net/en/account/ports
+  # FIREWALL_VPN_INPUT_PORTS: "12345"