{{- range $server := .Hosts }} remote {{ $server.Host }} {{ $server.Port }} {{ $server.Protocol }} {{- end }} verb 4 client nobind dev tun cipher AES-128-CBC key-direction 1 #redirect-gateway def1 tls-client remote-cert-tls server # uncomment below lines for use with linux #script-security 2 # if use use resolved #up /etc/openvpn/update-resolv-conf #down /etc/openvpn/update-resolv-conf # if you use systemd-resolved first install openvpn-systemd-resolved package #up /etc/openvpn/update-systemd-resolved #down /etc/openvpn/update-systemd-resolved {{- if .PasswdAuth }} auth-user-pass {{- end }} <cert> {{ .Cert -}} </cert> <key> {{ .Key -}} </key> <ca> {{ .CA -}} </ca> <tls-auth> {{ .TLS -}} </tls-auth>