Files
tommy 0f3973023a gluetun-pia: CA-pinned regen + CA-aware region auto-pick (fix legacy-CN break)
Replaces the Go pia-wg-config (Go 1.23 rejects PIA legacy-CN no-SAN certs) with
PIA's official CA-pinned curl flow. Adds CA-aware region auto-pick so ExpressVPN-CA
migrated regions (e.g. us_chicago) auto-skip; region moved to us_denver. Tunnel
restored + egress verified 2026-06-30.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 22:01:16 -05:00

9 lines
473 B
Bash
Executable File

#!/usr/bin/env bash
set -euo pipefail
# Register a FRESH PIA WireGuard peer and rewrite ./pia-wg/config/wg0.conf by running
# the pinned pia-wg-regen oneshot container. Safe to re-run (always a brand-new peer).
# Note: this only regenerates the config; gluetun must be (re)started to load it
# (use regen-and-up.sh for the full recovery, or `docker compose up -d`).
cd "$(dirname "$0")/.." # -> ~/downloads (compose project dir)
exec docker compose run --rm pia-wg-regen