2020-12-26 23:55:20 +03:00
|
|
|
client
|
|
|
|
|
dev tun
|
2021-05-07 23:28:37 +03:00
|
|
|
proto tcp
|
2020-12-26 23:55:20 +03:00
|
|
|
resolv-retry infinite
|
|
|
|
|
nobind
|
|
|
|
|
persist-key
|
|
|
|
|
persist-tun
|
2021-05-07 23:28:37 +03:00
|
|
|
$OPENVPN_NCP_DISABLE
|
|
|
|
|
cipher $OPENVPN_CIPHER
|
|
|
|
|
auth $OPENVPN_HASH
|
2020-12-26 23:55:20 +03:00
|
|
|
verb 3
|
|
|
|
|
tls-client
|
|
|
|
|
tls-version-min 1.2
|
|
|
|
|
key-direction 1
|
|
|
|
|
remote-cert-tls server
|
2021-02-18 15:00:41 +03:00
|
|
|
redirect-gateway def1 bypass-dhcp
|
|
|
|
|
|
|
|
|
|
dhcp-option DNS $PRIMARY_DNS
|
|
|
|
|
dhcp-option DNS $SECONDARY_DNS
|
|
|
|
|
block-outside-dns
|
2020-12-26 23:55:20 +03:00
|
|
|
|
2021-05-07 23:28:37 +03:00
|
|
|
socks-proxy 127.0.0.1 $SHADOWSOCKS_LOCAL_PORT
|
2021-01-15 23:36:35 +03:00
|
|
|
route $REMOTE_HOST 255.255.255.255 net_gateway
|
2021-05-10 02:33:31 +03:00
|
|
|
remote $REMOTE_HOST $OPENVPN_PORT
|
2021-01-15 23:36:35 +03:00
|
|
|
|
2022-10-26 09:36:58 +03:00
|
|
|
$OPENVPN_ADDITIONAL_CLIENT_CONFIG
|
|
|
|
|
|
2020-12-26 23:55:20 +03:00
|
|
|
<ca>
|
2021-05-07 23:28:37 +03:00
|
|
|
$OPENVPN_CA_CERT
|
2020-12-26 23:55:20 +03:00
|
|
|
</ca>
|
|
|
|
|
<cert>
|
2021-05-07 23:28:37 +03:00
|
|
|
$OPENVPN_CLIENT_CERT
|
2020-12-26 23:55:20 +03:00
|
|
|
</cert>
|
|
|
|
|
<key>
|
2021-05-07 23:28:37 +03:00
|
|
|
$OPENVPN_PRIV_KEY
|
2020-12-26 23:55:20 +03:00
|
|
|
</key>
|
|
|
|
|
<tls-auth>
|
2021-05-07 23:28:37 +03:00
|
|
|
$OPENVPN_TA_KEY
|
2020-12-26 23:55:20 +03:00
|
|
|
</tls-auth>
|
