---
# Mullvad VPN Secret
# 
# IMPORTANT: You must fill in your Mullvad WireGuard credentials before applying!
#
# To get these values:
# 1. Go to https://mullvad.net/en/account/wireguard-config
# 2. Generate a new WireGuard configuration
# 3. Download and extract the .conf file
# 4. Copy the PrivateKey and Address values from the [Interface] section
#
# Example .conf file contents:
#   [Interface]
#   PrivateKey = wOEI9rqqbDwnN8/Bpp22sVz48T71vJ4fYmFWujulwUU=
#   Address = 10.64.222.21/32,fc00:bbbb:bbbb:bb01::1/128
#
# Use the PrivateKey value for WIREGUARD_PRIVATE_KEY
# Use the IPv4 Address (first one, e.g., 10.64.222.21/32) for WIREGUARD_ADDRESSES
#
apiVersion: v1
kind: Secret
metadata:
  name: mullvad-vpn
  namespace: media
  labels:
    app.kubernetes.io/name: media-stack
    app.kubernetes.io/component: vpn
type: Opaque
stringData:
  # Your WireGuard private key from the Mullvad config file
  # DO NOT use the key shown on the Mullvad website - it must come from the .conf file
  WIREGUARD_PRIVATE_KEY: "123abv..."
  
  # Your WireGuard address from the Mullvad config file (IPv4 only, with /32)
  WIREGUARD_ADDRESSES: "10.1.1.200/32"