PIA Wireguard can't connect (failed to pass the healthcheck)

[gurabli]

I follow all the guides and went over the whole documentation for many times. Yet, I still can't connect to PIA Wireguard (with or w/a Port Forwarding). I get the failed to pass the healthcheck error. With OpenVPN it works fine.

My docker compose:

services:
  gluetun:
    image: qmcgaw/gluetun
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    ports:
#      - 8888:8888/tcp # HTTP proxy
#      - 8388:8388/tcp # Shadowsocks
#      - 8388:8388/udp # Shadowsocks
       - 3000:3000   
       - 3443:3443   
       - 6881:6881   
       - 26408:26408
    volumes:
      - /opt/gluetun2:/gluetun
    environment:
      # Wireguard:
      - LOG_LEVEL=debug
#      - WIREGUARD_IMPLEMENTATION=kernelspace
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
      - WIREGUARD_ENDPOINT_IP=185.252.xxx.xxx
      - WIREGUARD_ENDPOINT_PORT=1337
      - WIREGUARD_PUBLIC_KEY=DELETED=
      - WIREGUARD_PRIVATE_KEY=DELETED=
#      - WIREGUARD_PRESHARED_KEY=
      - WIREGUARD_ADDRESSES=10.3.175.77/32
      - VPN_PORT_FORWARDING=on
      - VPN_PORT_FORWARDING_PROVIDER=private internet access
      - VPN_PORT_FORWARDING_USERNAME=DELETED
      - VPN_PORT_FORWARDING_PASSWORD=DELETED
      - SERVER_NAMES=budapest404
      - TZ=Europe/Budapest

Error log:
https://pastebin.com/SNXT9jtd

[1i1i1i1i1i1i1]

did you fix this? same issue :/

[awal1987]

Same here. three devices at two locations.

[bluskye]

PIA only officially supports wireguard through their GUI app

[JoBazzy]

Keep in mind to get your wireguard config use something like this: https://github.com/SpaceinvaderOne/pia-wg-config-generator
If the config doesn't work make a new one or change country, and they expire after a week or something in my experience
Also it leaks dns to pia haven't found a way to stop that
Here is mine:

services:
  gluetun:
    container_name: pia-1-wg
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
      - WIREGUARD_ENDPOINT_PORT=1337
      - WIREGUARD_ENDPOINT_IP=${endpoint}
      - DNS_ADDRESS=${dns}
      - WIREGUARD_PUBLIC_KEY=${public}
      - WIREGUARD_PRIVATE_KEY=${private}
      - WIREGUARD_ADDRESSES=${address}
      - SHADOWSOCKS=on
      - SHADOWSOCKS_PASSWORD=${shadowsocks_pass}
      - HTTPPROXY=on
      - HTTPPROXY_STEALTH=on
      - VPN_PORT_FORWARDING=on
      - VPN_PORT_FORWARDING_PROVIDER=private internet access
      - VPN_PORT_FORWARDING_USERNAME=${USER}
      - VPN_PORT_FORWARDING_PASSWORD=${PASS}
      - SERVER_NAMES=brussels419
    networks:
      main:
        ipv4_address: 192.168.100.221
    ports:
      - 8388:8388/tcp
      - 8388:8388/udp
      - 9001:8888
      - 8085:8085
      - 8086:8282
networks:
  main:
    external: true

[madhavpcm]

Thanks, I was missing the DNS_ADDRESS in my config, upon setting it it worked.