lilik_playbook/roles/openvpn/templates/openvpn.j2

config openvpn 'vpn'
        option enabled '1'
        option verb '3'
        option port '777'
        option proto 'tcp'
        option dev 'tun'
        option server '10.8.0.0 255.255.255.0'
	option topology 'subnet'
        option keepalive '10 120'
	option dh 'none'
        option ca '/etc/openvpn/user_ca.crt'
        option cert '/etc/openvpn/openvpn.crt'
        option key '/etc/openvpn/openvpn.key'
	option tls_version_min '1.3'
	option cipher 'AES-256-GCM'
	option remote_cert_tls 'client'
{% for route in routes %}
	list push 'route {{ route }}'
{% endfor %}