use gluetun vpn for invidious companion

cluster/apps/invidious/invidious-helper.yml

@@ -14,20 +14,53 @@ spec:
       labels:
         app: invidious-companion
     spec:
+      initContainers:
+      - name: vpn
+        restartPolicy: Always
+        image: qmcgaw/gluetun:v3.40.0
+        securityContext:
+          capabilities:
+            add:
+            - NET_ADMIN
+        env:
+        - name: OPENVPN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: openvpn-secrets
+              key: OPENVPN_PASSWORD
+        - name: OPENVPN_USER
+          valueFrom:
+            secretKeyRef:
+              name: openvpn-secrets
+              key: OPENVPN_USER
+        - name: VPN_SERVICE_PROVIDER
+          value: "surfshark"
+        - name: SERVER_COUNTRIES
+          value: "Netherlands"
+        - name: FIREWALL_INPUT_PORTS
+          value: "8282"
+        - name: FIREWALL_VPN_INPUT_PORTS
+          value: "8282"
+        - name: FIREWALL_OUTBOUND_SUBNETS
+          value: "192.168.1.0/24"
+        volumeMounts:
+        - name: companion-cache
+          mountPath: /var/tmp/youtubei.js
+          subPath: youtubei.js
       containers:
       - name: invidious-companion
-        image: quay.io/invidious/invidious-companion:master-26cb520
+        image: quay.io/invidious/invidious-companion:master-16d06cd
         env:
         - name: SERVER_SECRET_KEY
           value: "mtRhvm9wMCJhdnGP"
         ports:
-        - containerPort: 8282
+        - containerPort: 8283
         securityContext:
+          allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
           capabilities:
             drop:
             - ALL
-          allowPrivilegeEscalation: false
         volumeMounts:
         - name: companion-cache
           mountPath: /var/tmp/youtubei.js
@@ -35,4 +68,4 @@ spec:
       volumes:
       - name: companion-cache
         persistentVolumeClaim:
-          claimName: longhorn-invidious-cache
+          claimName: longhorn-invidious-cache