Created
October 27, 2021 10:58
-
-
Save velotiotech/4d10a4c348391dbc982da4b14ab82349 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
port 1194 | |
proto udp | |
dev tun | |
ca ca.crt | |
cert server.crt | |
key server.key # This file should be kept secret | |
dh dh2048.pem | |
topology subnet | |
server 10.8.0.0 255.255.255.0 | |
ifconfig-pool-persist ipp.txt | |
push "redirect-gateway def1 bypass-dhcp" | |
push "dhcp-option DNS 8.8.8.8" | |
push "dhcp-option DNS 1.1.1.1" | |
push "route 169.254.169.254 255.255.255.255" | |
keepalive 10 120 | |
tls-auth myvpn.tlsauth 0 | |
cipher AES-256-CBC | |
comp-lzo | |
user nobody | |
group nogroup | |
persist-key | |
persist-tun | |
status openvpn-status.log | |
log-append /var/log/openvpn.log | |
verb 4 | |
explicit-exit-notify 1 | |
remote-cert-eku "TLS Web Client Authentication" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment