OpenVPN server configuration

server_tcp.cfg

port 1194
proto tcp6-server

dev tun

local ::

ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 0

tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
cipher AES-128-CBC
auth SHA256

server 10.8.1.0 255.255.255.0
server-ipv6 fddf:529f:7200:a385::/64

ifconfig-pool-persist ipp_tcp.txt

client-to-client
topology subnet

push "route 0.0.0.0 0.0.0.0"
push "route-ipv6 2000::/3"

push "redirect-gateway def1 bypass-dhcp"

push "dhcp-option DNS 10.0.1.1"

keepalive 45 120
mtu-disc yes

persist-key
persist-tun

status /var/log/openvpn/openvpn-status-tcp.log
verb 1

mute 10

server_udp.cfg

port 1194
proto udp6

dev tun

local ::

ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 0

tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
cipher AES-128-CBC
auth SHA256

server 10.8.2.0 255.255.255.0
server-ipv6 fddf:529f:7200:b120::/64

ifconfig-pool-persist ipp_udp.txt

client-to-client
topology subnet

push "route 0.0.0.0 0.0.0.0"
push "route-ipv6 2000::/3"

push "redirect-gateway def1 bypass-dhcp"

push "dhcp-option DNS 10.0.1.1"

keepalive 10 300
mtu-disc yes

persist-key
persist-tun

status /var/log/openvpn/openvpn-status-udp.log
verb 1

mute 10