dev ovpns1
disable-dco
verb 1
dev-type tun
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto tcp4-server
auth SHA256
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
local 193.97.129.89
tls-server
server 192.168.202.0 255.255.255.0
client-config-dir /var/etc/openvpn/server1/csc
username-as-common-name
plugin /usr/local/lib/openvpn/plugins/openvpn-plugin-auth-script.so /usr/local/sbin/ovpn_auth_verify_async user U0FNQkE0IHZpYSBTRkktUkFE false server1 1194
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'smaug.sf.com' 1"
lport 1194
management /var/etc/openvpn/server1/sock unix
push "dhcp-option DOMAIN sf.com"
push "dhcp-option DNS 192.168.129.119"
push "block-outside-dns"
push "register-dns"
push "dhcp-option NTP 192.168.160.1"
push "redirect-gateway def1"
capath /var/etc/openvpn/server1/ca
cert /var/etc/openvpn/server1/cert 
key /var/etc/openvpn/server1/key 
dh /etc/dh-parameters.2048
tls-auth /var/etc/openvpn/server1/tls-auth 0
data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
data-ciphers-fallback AES-256-CBC
allow-compression no
passtos
persist-remote-ip
float
topology subnet
inactive 36000
reneg-sec 36000
