config openvpn 'vpn'
|
|
option enabled '1'
|
|
option verb '3'
|
|
option port '777'
|
|
option proto 'tcp'
|
|
option dev 'tun'
|
|
option server '10.8.0.0 255.255.255.0'
|
|
option topology 'subnet'
|
|
option keepalive '10 120'
|
|
option dh 'none'
|
|
option ca '/etc/openvpn/user_ca.crt'
|
|
option cert '/etc/openvpn/openvpn.crt'
|
|
option key '/etc/openvpn/openvpn.key'
|
|
option tls_version_min '1.3'
|
|
option cipher 'AES-256-GCM'
|
|
option remote_cert_tls 'client'
|
|
{% for route in routes %}
|
|
list push 'route {{ route }}'
|
|
{% endfor %}
|