pfSense

dev ovpns1

verb 3

dev-type tun

dev-node /dev/tun1

writepid /var/run/openvpn_server1.pid

#user nobody

#group nobody

script-security 3

daemon

inactive 150

keepalive 5 30

ping-timer-rem

persist-tun

persist-key

proto udp4

auth SHA256

up /usr/local/sbin/ovpn-linkup

down /usr/local/sbin/ovpn-linkdown

client-connect /usr/local/sbin/openvpn.attributes.sh

client-disconnect /usr/local/sbin/openvpn.attributes.sh

local 192.0.2.1

tls-server

server 192.168.123.0 255.255.255.0

client-config-dir /var/etc/openvpn/server1/csc

verify-client-cert none

username-as-common-name

plugin /usr/local/lib/openvpn/plugins/openvpn-plugin-auth-script.so /usr/local/sbin/ovpn_auth_verify_async user V0lOMSBOUFMgKFJBRElVUyk= false server1 1194

tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'openVPN+cert' 1"

lport 1194

management /var/etc/openvpn/server1/sock unix

push "route 192.168.100.0 255.255.252.0"

push "dhcp-option DNS 192.168.103.2"

push "dhcp-option DNS 192.168.103.3"

push "dhcp-option DNS 1.1.1.1"

push "dhcp-option DNS 1.0.0.1"

capath /var/etc/openvpn/server1/ca

cert /var/etc/openvpn/server1/cert

key /var/etc/openvpn/server1/key

dh /etc/dh-parameters.2048

tls-auth /var/etc/openvpn/server1/tls-auth 0

ncp-disable

cipher AES-256-CBC

allow-compression no

topology subnet

push explicit-exit-notify

push nobind