add the media stack

base/vpn/mullvad-secret.yaml

@@ -0,0 +1,35 @@
+---
+# Mullvad VPN Secret
+# 
+# IMPORTANT: You must fill in your Mullvad WireGuard credentials before applying!
+#
+# To get these values:
+# 1. Go to https://mullvad.net/en/account/wireguard-config
+# 2. Generate a new WireGuard configuration
+# 3. Download and extract the .conf file
+# 4. Copy the PrivateKey and Address values from the [Interface] section
+#
+# Example .conf file contents:
+#   [Interface]
+#   PrivateKey = wOEI9rqqbDwnN8/Bpp22sVz48T71vJ4fYmFWujulwUU=
+#   Address = 10.64.222.21/32,fc00:bbbb:bbbb:bb01::1/128
+#
+# Use the PrivateKey value for WIREGUARD_PRIVATE_KEY
+# Use the IPv4 Address (first one, e.g., 10.64.222.21/32) for WIREGUARD_ADDRESSES
+#
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mullvad-vpn
+  namespace: media
+  labels:
+    app.kubernetes.io/name: media-stack
+    app.kubernetes.io/component: vpn
+type: Opaque
+stringData:
+  # Your WireGuard private key from the Mullvad config file
+  # DO NOT use the key shown on the Mullvad website - it must come from the .conf file
+  WIREGUARD_PRIVATE_KEY: "123abv..."
+  
+  # Your WireGuard address from the Mullvad config file (IPv4 only, with /32)
+  WIREGUARD_ADDRESSES: "10.1.1.200/32"