dev ovpns2
verb 6
dev-type tun
dev-node /dev/tun2
writepid /var/run/openvpn_server2.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp4
cipher AES-128-CBC
auth SHA1
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local <external-IP>
tls-server
server 172.29.128.0 255.255.255.128
client-config-dir /var/etc/openvpn-csc/server2
verify-client-cert none
username-as-common-name
plugin /usr/local/lib/openvpn/plugins/openvpn-plugin-auth-script.so /usr/local/sbin/ovpn_auth_verify_async user YmYwX2R1bzAw false server2 1195
tls-verify "/usr/local/sbin/ovpn_auth_verify tls '<hostname>' 1"
lport 1195
management /var/etc/openvpn/server2.sock unix
push "route 10.48.0.0 255.255.0.0"
push "route 10.0.0.0 255.255.0.0"
push "route 10.160.0.0 255.255.0.0"
push "route 172.17.17.0 255.255.255.0"
push "route 172.17.2.104 255.255.255.255"
push "dhcp-option DOMAIN <domain>"
push "dhcp-option DNS 10.0.80.12"
push "dhcp-option NTP 10.0.80.12"
client-to-client
ca /var/etc/openvpn/server2.ca 
cert /var/etc/openvpn/server2.cert 
key /var/etc/openvpn/server2.key 
dh /etc/dh-parameters.2048
ncp-ciphers AES-256-GCM:AES-128-GCM
persist-remote-ip
float
topology subnet
reneg-sec 43200