f5057dfac4
- specified full path to crl in server config - added crl generation when setting up a container
38 lines
571 B
Text
38 lines
571 B
Text
client
|
|
dev tun
|
|
proto tcp
|
|
resolv-retry infinite
|
|
nobind
|
|
persist-key
|
|
persist-tun
|
|
$OPENVPN_NCP_DISABLE
|
|
cipher $OPENVPN_CIPHER
|
|
auth $OPENVPN_HASH
|
|
verb 3
|
|
tls-client
|
|
tls-version-min 1.2
|
|
key-direction 1
|
|
remote-cert-tls server
|
|
redirect-gateway def1 bypass-dhcp
|
|
|
|
dhcp-option DNS $PRIMARY_DNS
|
|
dhcp-option DNS $SECONDARY_DNS
|
|
block-outside-dns
|
|
|
|
route $REMOTE_HOST 255.255.255.255 net_gateway
|
|
remote 127.0.0.1 1194
|
|
|
|
$OPENVPN_ADDITIONAL_CLIENT_CONFIG
|
|
|
|
<ca>
|
|
$OPENVPN_CA_CERT
|
|
</ca>
|
|
<cert>
|
|
$OPENVPN_CLIENT_CERT
|
|
</cert>
|
|
<key>
|
|
$OPENVPN_PRIV_KEY
|
|
</key>
|
|
<tls-auth>
|
|
$OPENVPN_TA_KEY
|
|
</tls-auth>
|