port 1194
proto udp4
dev tun
sndbuf 0
rcvbuf 0
ca /data/ca.crt
cert /data/server.crt
key /data/server.key
dh none
tls-crypt /data/ta.key
topology subnet
server 192.168.36.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-256-GCM
auth SHA512
persist-key
persist-tun
verb 3
tls-version-min 1.2
ecdh-curve secp384r1
tls-server
remote-cert-tls client
verify-client-cert require
mlock
client-to-client
ncp-disable
auth-nocache
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256