fix reverse dns

openvpn/server.conf

@@ -73,8 +73,9 @@ persist-tun
 
 # Register each client as <username>.$VPN_DNS_ZONE (A + PTR) in Technitium
 # on connect, clean up on disconnect. Invoked via sh so the mounted script
-# needs no exec bit; env (TECHNITIUM_ADMIN_PASSWORD, VPN_DNS_ZONE) comes
-# from the container environment.
+# needs no exec bit. NOTE: openvpn runs hooks with a clean environment, so
+# the script sources /etc/openvpn/learn-address.env (written by the
+# entrypoint from the container env) rather than reading env vars directly.
 script-security 2
 learn-address "/bin/sh /etc/openvpn/learn-address.sh"