30 lines
746 B
Smarty
30 lines
746 B
Smarty
|
verb 3
|
||
|
|
tls-server
|
||
|
|
ca /etc/openvpn/easyrsa/pki/ca.crt
|
||
|
|
key /etc/openvpn/easyrsa/pki/private/server.key
|
||
|
|
cert /etc/openvpn/easyrsa/pki/issued/server.crt
|
||
|
|
dh /etc/openvpn/easyrsa/pki/dh.pem
|
||
|
|
crl-verify /etc/openvpn/easyrsa/pki/crl.pem
|
||
|
|
tls-auth /etc/openvpn/easyrsa/pki/ta.key
|
||
|
|
key-direction 0
|
||
|
|
cipher AES-128-CBC
|
||
|
|
management 127.0.0.1 8989
|
||
|
|
keepalive 10 60
|
||
|
|
persist-key
|
||
|
|
persist-tun
|
||
|
|
topology subnet
|
||
|
|
#duplicate-cn
|
||
|
|
proto udp
|
||
|
|
port 1194
|
||
|
|
dev tun0
|
||
|
|
status /tmp/openvpn-status.log
|
||
|
|
user nobody
|
||
|
|
group nogroup
|
||
|
|
push "topology subnet"
|
||
|
|
push "route-metric 9999"
|
||
|
|
push "dhcp-option DNS ${OVPN_DNS_SERVER_IP}"
|
||
|
|
push "tun-mtu ${OPVN_VPN_MTU}"
|
||
|
|
tun-mtu ${OPVN_VPN_MTU}
|
||
|
|
push "redirect-gateway def1"
|
||
|
|
push "route ${OVPN_VPN_IGNORE_ROUTE_IP} ${OVPN_VPN_IGNORE_ROUTE_MASK} net_gateway"
|