Skip to content

Latest commit

 

History

History
69 lines (53 loc) · 3.33 KB

mullvad.md

File metadata and controls

69 lines (53 loc) · 3.33 KB
Raw

Mullvad

TLDR

# OpenVPN
docker run -it --rm --cap-add=NET_ADMIN -e VPN_SERVICE_PROVIDER=mullvad \
-e VPN_TYPE=openvpn -e OPENVPN_USER=1355131650462193 \
-e SERVER_CITIES=amsterdam qmcgaw/gluetun
# Wireguard
docker run -it --rm --cap-add=NET_ADMIN -e VPN_SERVICE_PROVIDER=mullvad \
-e VPN_TYPE=wireguard \
-e WIREGUARD_PRIVATE_KEY=wOEI9rqqbDwnN8/Bpp22sVz48T71vJ4fYmFWujulwUU= \
-e WIREGUARD_ADDRESSES="10.64.222.21/32" \
-e SERVER_CITIES=amsterdam qmcgaw/gluetun
version: "3"
services:
  gluetun:
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=mullvad
      - VPN_TYPE=wireguard
      - WIREGUARD_PRIVATE_KEY=wOEI9rqqbDwnN8/Bpp22sVz48T71vJ4fYmFWujulwUU=
      - WIREGUARD_ADDRESSES=10.64.222.21/32
      - SERVER_CITIES=Amsterdam

Required environment variables

  • VPN_SERVICE_PROVIDER=mullvad

OpenVPN only

  • OPENVPN_USER which is your Mullvad user ID.

Wireguard only

  • WIREGUARD_PRIVATE_KEY is your 32 bytes key in base64 format. The private key can only be obtained by generating a Wireguard configuration file. The Wireguard Key displayed on the Manage devices and ports page on Mullvad is not the private key that is required. Generate a Wireguard configuration file, download the zip file, extract any of the .json files within and use the PrivateKey value. Note this value is the same for all Mullvad servers. 💁 Screenshots on how to obtain it.
  • WIREGUARD_ADDRESSES is the Wireguard IP network interface address in CIDR format xx.xx.xx.xx/xx. To obtain it, first download a Wireguard configuration file using same steps as for WIREGUARD_PRIVATE_KEY above. In the configuration file, locate the Address value. This one should contain a comma delimited list of an IPv4 and IPv6 address, so use the IPv4 address (usually the first one) as the value for the WIREGUARD_ADDRESSES environment variable. Note this is the same value for all Mullvad servers and for your private key. 💁 Screenshots on how to obtain it.

Optional environment variables

  • SERVER_COUNTRIES: Comma separated list of countries
  • SERVER_CITIES: Comma separated list of cities
  • SERVER_HOSTNAMES: Comma separated list of server hostnames
  • ISP: Comma separated list of ISPs
  • OWNED_ONLY: If the VPN server is owned by Mullvad. It defaults to no, meaning it includes all servers. It can be set to yes.
  • VPN_ENDPOINT_PORT: custom server endpoint port to use
    • For OpenVPN:
      • TCP: it can only be 80, 443 or 1401
      • UDP: it can only be 53, 1194, 1195, 1196, 1197, 1300, 1301, 1302, 1303 or 1400
      • It defaults to 443 for TCP and 1194 for UDP
    • For Wireguard: it can be any value and defaults to 51820

IPv6 tunneling with OpenVPN

Mullvad supports IPv6 addresseses for their OpenVPN servers, and these should automatically be used at random if your container setup has IPv6 enabled. See the IPv6 documentation for more information.

Servers

To see a list of servers available, list the VPN servers with Gluetun.