From 89dca39f896aec52d092a362266bd06d681c8d45 Mon Sep 17 00:00:00 2001 From: "root@culturestrings" Date: Wed, 3 Jun 2020 13:42:01 +0000 Subject: openvpn: make the configuration file site-agnostic. --- public/fs/etc/openvpn/hostvpn.conf.in | 40 +++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 public/fs/etc/openvpn/hostvpn.conf.in (limited to 'public/fs/etc/openvpn/hostvpn.conf.in') diff --git a/public/fs/etc/openvpn/hostvpn.conf.in b/public/fs/etc/openvpn/hostvpn.conf.in new file mode 100644 index 0000000..a285e12 --- /dev/null +++ b/public/fs/etc/openvpn/hostvpn.conf.in @@ -0,0 +1,40 @@ +port @vpn_port@ +proto udp + +dev tun0 +topology subnet + +cipher AES-256-CBC + +ca /etc/easy-rsa/pki/ca.crt +cert /etc/easy-rsa/pki/issued/@hostname@.crt + +askpass /srv/webroot/openvpn/@hostname@.pass +key /etc/easy-rsa/pki/private/@hostname@.key +dh /etc/easy-rsa/pki/dh.pem + +status /var/log/openvpn/openvpn-status.log +log-append /var/log/openvpn/openvpn.log + +server 10.8.0.0 255.255.255.0 +server-ipv6 2a01:4f9:2b:20f0:8000::/65 + +push "route-ipv6 2000::/3" +push "route-ipv6 2a01:4f9:2b:20f0::/64" + +push "block-outside-dns" +push "redirect-gateway def1" +push "route 192.168.0.0 255.255.255.0" +push "dhcp-option DNS 10.8.0.1" + +duplicate-cn +client-to-client + +daemon +auth-nocache + +persist-key +persist-tun + +verb 3 +keepalive 20 60 -- cgit v1.2.3