diff options
author | root@culturestrings <root@culturestrings> | 2020-06-03 13:42:01 +0000 |
---|---|---|
committer | root@culturestrings <root@culturestrings> | 2020-06-03 13:42:01 +0000 |
commit | 89dca39f896aec52d092a362266bd06d681c8d45 (patch) | |
tree | 94ea290d420ce5067e3f5d87400a65d97c5756eb /public/fs/etc/openvpn/hostvpn.conf.in | |
parent | c35fa9be301ecead49f40ad530be433e2e5ca7f4 (diff) | |
download | culturestrings-89dca39f896aec52d092a362266bd06d681c8d45.tar.bz2 culturestrings-89dca39f896aec52d092a362266bd06d681c8d45.tar.xz |
openvpn: make the configuration file site-agnostic.
Diffstat (limited to 'public/fs/etc/openvpn/hostvpn.conf.in')
-rw-r--r-- | public/fs/etc/openvpn/hostvpn.conf.in | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/public/fs/etc/openvpn/hostvpn.conf.in b/public/fs/etc/openvpn/hostvpn.conf.in new file mode 100644 index 0000000..a285e12 --- /dev/null +++ b/public/fs/etc/openvpn/hostvpn.conf.in @@ -0,0 +1,40 @@ +port @vpn_port@ +proto udp + +dev tun0 +topology subnet + +cipher AES-256-CBC + +ca /etc/easy-rsa/pki/ca.crt +cert /etc/easy-rsa/pki/issued/@hostname@.crt + +askpass /srv/webroot/openvpn/@hostname@.pass +key /etc/easy-rsa/pki/private/@hostname@.key +dh /etc/easy-rsa/pki/dh.pem + +status /var/log/openvpn/openvpn-status.log +log-append /var/log/openvpn/openvpn.log + +server 10.8.0.0 255.255.255.0 +server-ipv6 2a01:4f9:2b:20f0:8000::/65 + +push "route-ipv6 2000::/3" +push "route-ipv6 2a01:4f9:2b:20f0::/64" + +push "block-outside-dns" +push "redirect-gateway def1" +push "route 192.168.0.0 255.255.255.0" +push "dhcp-option DNS 10.8.0.1" + +duplicate-cn +client-to-client + +daemon +auth-nocache + +persist-key +persist-tun + +verb 3 +keepalive 20 60 |