diff --git a/openvpn.conf b/openvpn.conf new file mode 100644 index 0000000..e051a02 --- /dev/null +++ b/openvpn.conf @@ -0,0 +1,29 @@ +port 1194 +proto udp4 +dev tun +sndbuf 0 +rcvbuf 0 +ca /data/ca.crt +cert /data/server.crt +key /data/server.key +dh none +tls-crypt /data/ta.key +topology subnet +server 192.168.36.0 255.255.255.0 +ifconfig-pool-persist ipp.txt +keepalive 10 120 +cipher AES-256-GCM +auth SHA512 +persist-key +persist-tun +verb 3 +tls-version-min 1.2 +ecdh-curve secp384r1 +tls-server +remote-cert-tls client +verify-client-cert require +mlock +client-to-client +ncp-disable +auth-nocache +tls-cipher TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 \ No newline at end of file