29 lines
612 B
Plaintext
29 lines
612 B
Plaintext
|
port 1194
|
||
|
|
proto udp4
|
||
|
|
dev tun
|
||
|
|
sndbuf 0
|
||
|
|
rcvbuf 0
|
||
|
|
ca /data/ca.crt
|
||
|
|
cert /data/server.crt
|
||
|
|
key /data/server.key
|
||
|
|
dh none
|
||
|
|
tls-crypt /data/ta.key
|
||
|
|
topology subnet
|
||
|
|
server 192.168.36.0 255.255.255.0
|
||
|
|
ifconfig-pool-persist ipp.txt
|
||
|
|
keepalive 10 120
|
||
|
|
cipher AES-256-GCM
|
||
|
|
auth SHA512
|
||
|
|
persist-key
|
||
|
|
persist-tun
|
||
|
|
verb 3
|
||
|
|
tls-version-min 1.2
|
||
|
|
ecdh-curve secp384r1
|
||
|
|
tls-server
|
||
|
|
remote-cert-tls client
|
||
|
|
verify-client-cert require
|
||
|
|
mlock
|
||
|
|
client-to-client
|
||
|
|
ncp-disable
|
||
|
|
auth-nocache
|
||
|
|
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
|