Files
media-stack/base/vpn/mullvad-secret.yaml
2026-02-27 00:55:03 +00:00

36 lines
1.1 KiB
YAML

---
# Mullvad VPN Secret
#
# IMPORTANT: You must fill in your Mullvad WireGuard credentials before applying!
#
# To get these values:
# 1. Go to https://mullvad.net/en/account/wireguard-config
# 2. Generate a new WireGuard configuration
# 3. Download and extract the .conf file
# 4. Copy the PrivateKey and Address values from the [Interface] section
#
# Example .conf file contents:
# [Interface]
# PrivateKey = wOEI9rqqbDwnN8/Bpp22sVz48T71vJ4fYmFWujulwUU=
# Address = 10.64.222.21/32,fc00:bbbb:bbbb:bb01::1/128
#
# Use the PrivateKey value for WIREGUARD_PRIVATE_KEY
# Use the IPv4 Address (first one, e.g., 10.64.222.21/32) for WIREGUARD_ADDRESSES
#
apiVersion: v1
kind: Secret
metadata:
name: mullvad-vpn
namespace: media
labels:
app.kubernetes.io/name: media-stack
app.kubernetes.io/component: vpn
type: Opaque
stringData:
# Your WireGuard private key from the Mullvad config file
# DO NOT use the key shown on the Mullvad website - it must come from the .conf file
WIREGUARD_PRIVATE_KEY: "123abv..."
# Your WireGuard address from the Mullvad config file (IPv4 only, with /32)
WIREGUARD_ADDRESSES: "10.1.1.200/32"