{{- range $server := .Hosts }} remote {{ $server.Host }} {{ $server.Port }} tcp {{- end }} verb 4 client nobind dev tun cipher AES-128-CBC key-direction 1 #redirect-gateway def1 tls-client remote-cert-tls server # uncomment needed below lines for use with linux #script-security 2 # if use use resolved #up /etc/openvpn/update-resolv-conf #down /etc/openvpn/update-resolv-conf # if you use systemd-resolved first install and openvpn-systemd-resolved package #up /etc/openvpn/update-systemd-resolved #down /etc/openvpn/update-systemd-resolved {{- if .PasswdAuth }} auth-user-pass {{- end }} {{ .Cert -}} {{ .Key -}} {{ .CA -}} {{ .TLS -}}