34 lines
828 B
Django/Jinja
34 lines
828 B
Django/Jinja
port {{ openvpn_port }}
|
|
proto {{ openvpn_protocol }}
|
|
dev {{ openvpn_device }}
|
|
dev-type tun
|
|
topology subnet
|
|
server {{ openvpn_network }} {{ openvpn_netmask }}
|
|
|
|
ca {{ openvpn_ca }}
|
|
cert {{ server_cert }}
|
|
key {{ server_key }}
|
|
crl-verify {{ openvpn_crl }}
|
|
dh none
|
|
remote-cert-tls client
|
|
|
|
plugin /usr/lib/openvpn/openvpn-auth-ldap.so {{ openvpn_ldap_conf }}
|
|
script-security 2
|
|
tls-verify /usr/lib/vpn-router/openvpn-issuer
|
|
auth-user-pass-verify /usr/lib/vpn-router/openvpn-same-user via-env
|
|
|
|
{% for network, netmask in openvpn_routes -%}
|
|
push "route {{ network }} {{ netmask }}"
|
|
{% endfor -%}
|
|
{% for address in p2s_dns_list -%}
|
|
push "dhcp-option DNS {{ address }}"
|
|
{% endfor -%}
|
|
|
|
status {{ openvpn_status }} {{ openvpn_status_seconds }}
|
|
|
|
keepalive 10 120
|
|
{% if openvpn_protocol == 'udp' -%}
|
|
explicit-exit-notify 1
|
|
{% endif -%}
|
|
verb 3
|