Skip to content

Instantly share code, notes, and snippets.

input {
tcp {
port => 5000
type => syslog
}
udp {
port => 5000
type => syslog
}
}
port 443 #Listen on port 443 - change if you like
proto tcp #Use TCP - change to UDP if you prefer
dev tun #Use tun interface - this is recommeded for most use cases
ca ca.crt #Read CA cert/pub key from ca.crt (not-secret)
cert server.crt #Read server cert/pub key from server.crt (not-secret)
key server.key #Read server private key from server.key (SECRET!)
dh dh2048.pem #Read Diffie Hellan (DH) parms from db2048.pem
server 10.8.0.0 255.255.255.248 #IP range for clients - change if you like
push "topology subnet" #Recommended topology
ifconfig-pool-persist ipp.txt #Will try give the same ip to clients every connection
{
"Type":"UnencryptedConfiguration",
"Certificates": [ {
"GUID": "{<GUID#1>}",
"Type": "Authority",
"X509": "<CA_CERT>"
} ],
"NetworkConfigurations": [ {
"GUID": "{<GUID#2>}",
"Name": "<VPN_NAME>",