Skip to content

Instantly share code, notes, and snippets.

@JohnLonginotto
Last active June 1, 2016 02:01
Show Gist options
  • Save JohnLonginotto/61aeec85b0216fc286e473741f41bb48 to your computer and use it in GitHub Desktop.
Save JohnLonginotto/61aeec85b0216fc286e473741f41bb48 to your computer and use it in GitHub Desktop.
management localhost 6666 # Allows you to telnet into localhost 6666 to see the status. Although openvpn has logs, you can find out a lot more (like who is currently using on the VPN) through the management service
port 443 # By using port 443 for all of our VPN communications, our network traffic will look very similar to standard HTTPS traffic.
client-to-client # Allows two clients of the VPN to talk to one another (home computer to work computer for example)
keepalive 10 120 # Defaults
mssfix # Kept due to Cargo Cult reasons...
proto tcp # udp is faster, but so much less reliable its not worth it. Use TCP.
dev tun # We're making a tunnel so we want to make the tun kind of VPN.
ca ca.crt # we'll make this next
cert server.crt # we'll make this next
key server.key # we'll make this next
dh dh2048.pem # we'll make this next
server 10.8.0.0 255.255.255.0 # IP range to use when issuing addresses to clients
ifconfig-pool-persist ipp.txt # Its nice when every time you log in to the VPN you get the same internal IP. Makes SSHing easier. Use this to enable that.
comp-lzo # We definitely want compression turned on
max-clients 10 # I dont even have 10 friends, so this will do
user nobody # A girl has no name
group nogroup # A group has no name
persist-key # Default
persist-tun # Default
verb 5 # Log level 5.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment