proto udp

port 1194

dev tun1

dev-node Home

topology subnet

server 10.8.0.0 255.255.255.0

client-config-dir ccd

push "route 192.168.1.0 255.255.255.0"

ca /etc/storage/openvpn/server/ca.crt

dh /etc/storage/openvpn/server/dh1024.pem

cert /etc/storage/openvpn/server/server.crt

key /etc/storage/openvpn/server/server.key

tls-auth /etc/storage/openvpn/server/ta.key 0

persist-key

persist-tun

user nobody

group nogroup

script-security 2

tmp-dir /tmp/openvpn

writepid /var/run/openvpn_svr.pid

client-connect ovpns.script

client-disconnect ovpns.script



### User params:

auth SHA1 # SHA1 160 bit (default)

cipher BF-CBC # Blowfish 128 bit (default)

comp-lzo

max-clients 10

client-to-client

keepalive 10 60

nice 3

verb 0

mute 10

# Custom user conf file for OpenVPN client

# Please add needed params only!

### Authenticate packets with HMAC using message digest algorithm

auth SHA1 # SHA1 160 bit (default)

;auth SHA256 # SHA256 256 bit

;auth SHA512 # SHA512 512 bit



### Encrypt packets with cipher algorithm

cipher BF-CBC # Blowfish 128 bit (default)

;cipher AES-128-CBC # AES 128 bit

;cipher AES-256-CBC # AES 256 bit

;cipher DES-EDE3-CBC # Triple-DES 192 bit

;cipher none # No encryption



### Enable LZO compression on the VPN link

comp-lzo



### If your server certificates with the nsCertType field set to "server"

;ns-cert-type server



### All outgoing IP traffic will be redirected over the VPN

;redirect-private def1



### Process priority level (0..19)

nice 3



### Syslog verbose level

verb 0

mute 10

remote xxx.xxx.xxx.xxx

port 1194

dev tun

dev-node Home

cipher BF-CBC

comp-lzo

ca ca.crt

cert client1.crt

key client1.key

tls-auth ta.key 1

key-direction 1