2020-12-26 23:55:20 +03:00
|
|
|
client
|
|
|
|
|
dev tun
|
|
|
|
|
proto $PROTO
|
|
|
|
|
resolv-retry infinite
|
|
|
|
|
nobind
|
|
|
|
|
persist-key
|
|
|
|
|
persist-tun
|
|
|
|
|
cipher AES-256-GCM
|
|
|
|
|
auth SHA512
|
|
|
|
|
verb 3
|
|
|
|
|
tls-client
|
|
|
|
|
tls-version-min 1.2
|
|
|
|
|
key-direction 1
|
|
|
|
|
remote-cert-tls server
|
2021-02-18 15:00:41 +03:00
|
|
|
redirect-gateway def1 bypass-dhcp
|
|
|
|
|
|
|
|
|
|
dhcp-option DNS $PRIMARY_DNS
|
|
|
|
|
dhcp-option DNS $SECONDARY_DNS
|
|
|
|
|
block-outside-dns
|
2020-12-26 23:55:20 +03:00
|
|
|
|
|
|
|
|
remote $REMOTE_HOST $REMOTE_PORT
|
2021-01-15 23:36:35 +03:00
|
|
|
|
2020-12-26 23:55:20 +03:00
|
|
|
<ca>
|
|
|
|
|
$CA_CERT
|
|
|
|
|
</ca>
|
|
|
|
|
<cert>
|
|
|
|
|
$CLIENT_CERT
|
|
|
|
|
</cert>
|
|
|
|
|
<key>
|
|
|
|
|
$PRIV_KEY
|
|
|
|
|
</key>
|
|
|
|
|
<tls-auth>
|
|
|
|
|
$TA_KEY
|
|
|
|
|
</tls-auth>
|
