---
# Gluetun VPN Configuration
# Shared configuration for all pods using Gluetun sidecar
apiVersion: v1
kind: ConfigMap
metadata:
  name: gluetun-config
  namespace: media
  labels:
    app.kubernetes.io/name: media-stack
    app.kubernetes.io/component: vpn
data:
  # VPN Provider
  VPN_SERVICE_PROVIDER: "mullvad"
  VPN_TYPE: "wireguard"
  
  # Server selection - adjust to your preferred location
  # Options: See https://github.com/qdm12/gluetun-wiki/blob/main/setup/servers.md
  # Examples: "London", "Amsterdam", "New York City", "Stockholm"
  SERVER_CITIES: "London"
  
  # Kill switch - blocks all traffic if VPN drops (highly recommended)
  FIREWALL: "on"
  
  # DNS over TLS for privacy
  DOT: "on"
  
  # Block malicious domains
  BLOCK_MALICIOUS: "on"
  BLOCK_SURVEILLANCE: "on"
  BLOCK_ADS: "off"
  
  # Health check settings
  HEALTH_VPN_DURATION_INITIAL: "30s"
  HEALTH_VPN_DURATION_ADDITION: "5s"
  
  # Logging
  LOG_LEVEL: "info"
  
  # HTTP Proxy (optional - can be used by other apps)
  HTTPPROXY: "on"
  HTTPPROXY_LOG: "off"
  
  # Firewall input ports - for qBittorrent incoming connections
  # If you have Mullvad port forwarding enabled, set this to your forwarded port
  # Get a port at: https://mullvad.net/en/account/ports
  # FIREWALL_VPN_INPUT_PORTS: "12345"