server.conf

server 192.168.255.0 255.255.255.0

ca /etc/ipa/ca.crt
cert server_freeipa.crt
key server_freeipa.key

dh /etc/openvpn/dh.pem

proto udp
## Rely on Docker to do port mapping, internally always 1194
port 1194
dev tun0

management 127.0.0.1 7505

key-direction 0
keepalive 10 60
# persist-key
persist-tun

status /var/log/openvpn-status.log

# user nobody
# group nogroup
comp-lzo no

# REMOVED OPTION: --client-cert-not-required, use '--verify-client-cert none' instead
# client-cert-not-required
verify-client-cert none
username-as-common-name

plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so "openvpn"

verb 7