45 lines
1.1 KiB
Django/Jinja
45 lines
1.1 KiB
Django/Jinja
port 1194
|
|
proto tcp
|
|
dev tun0
|
|
server 172.168.0.0 255.255.255.0
|
|
topology subnet
|
|
ifconfig-pool-persist ipp.txt
|
|
route 10.1.0.0 255.255.255.0
|
|
route 10.2.0.0 255.255.255.0
|
|
route 10.3.0.0 255.255.255.0
|
|
route 10.4.0.0 255.255.255.0
|
|
route 10.10.0.0 255.255.255.0
|
|
route 10.11.0.0 255.255.255.0
|
|
route 10.12.0.0 255.255.255.0
|
|
route 192.168.1.0 255.255.255.0
|
|
push "route 192.168.1.0 255.255.255.0"
|
|
push "route 10.1.0.0 255.255.255.0"
|
|
push "route 10.2.0.0 255.255.255.0"
|
|
push "route 10.3.0.0 255.255.255.0"
|
|
push "route 10.4.0.0 255.255.255.0"
|
|
push "route 10.10.0.0 255.255.255.0"
|
|
push "route 10.11.0.0 255.255.255.0"
|
|
push "route 10.12.0.0 255.255.255.0"
|
|
client-config-dir /etc/openvpn/ccd/liqueur
|
|
keepalive 10 60
|
|
cipher AES-256-GCM
|
|
auth SHA256
|
|
persist-key
|
|
persist-tun
|
|
status openvpn-status.log
|
|
verb 3
|
|
tun-mtu 1500
|
|
mssfix 1300
|
|
<ca>
|
|
{{ lookup('file', '/etc/easy-rsa/pki/tun0/ca.crt') }}
|
|
</ca>
|
|
<cert>
|
|
{{ lookup('file', '/etc/easy-rsa/pki/tun0/issued/server.crt') }}
|
|
</cert>
|
|
<key>
|
|
{{ lookup('file', '/etc/easy-rsa/pki/tun0/private/server.key') }}
|
|
</key>
|
|
<dh>
|
|
{{ lookup('file', '/etc/easy-rsa/pki/tun0/dh.pem') }}
|
|
</dh>
|