OpenVPN Server config file

openvpn-tun-all.conf

# This will give access to the 1.1.1.0/24 
# UDP + TUN + No duplicate certs!
# openvpn-tun-all.conf
 
# Server IP and port
local 2.2.2.2
port 1194
 
# Openvpn address pool
server 1.1.2.0 255.255.255.0
 
proto udp
dev tun
daemon
 
ca /usr/local/etc/openvpn/keys/ca.crt
cert /usr/local/etc/openvpn/keys/server.crt
key /usr/local/etc/openvpn/keys/server.key
dh /usr/local/etc/openvpn/keys/dh1024.pem
 
keepalive 10 120
client-to-client
comp-lzo
user nobody
group nobody
persist-key
persist-tun
 
;cipher BF-CBC
cipher AES-128-CBC
;cipher DES-EDE3-CBC
 
# In SSL/TLS key exchange
# tls-server
 
;mute 20
;duplicate-cn
;persist-remote-ip
;float
 
push "route 1.1.1.0 255.255.255.0"
;push "dhcp-option DOMAIN server_domain"
;push "dhcp-option DNS 8.8.8.8"
 
# Redirect all traffic through VPN
push "redirect-gateway def1"
 
verb 3
status-version 2
status /var/log/openvpn-status.log