Skip to content

Instantly share code, notes, and snippets.

@valeriansaliou
Created August 6, 2022 06:56
Show Gist options
  • Save valeriansaliou/f750f7bbab0d3533ae5f849edaaa3bd5 to your computer and use it in GitHub Desktop.
Save valeriansaliou/f750f7bbab0d3533ae5f849edaaa3bd5 to your computer and use it in GitHub Desktop.
OpenVPN server configuration
port 1194
proto tcp6-server
dev tun
local ::
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 0
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
cipher AES-128-CBC
auth SHA256
server 10.8.1.0 255.255.255.0
server-ipv6 fddf:529f:7200:a385::/64
ifconfig-pool-persist ipp_tcp.txt
client-to-client
topology subnet
push "route 0.0.0.0 0.0.0.0"
push "route-ipv6 2000::/3"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.0.1.1"
keepalive 45 120
mtu-disc yes
persist-key
persist-tun
status /var/log/openvpn/openvpn-status-tcp.log
verb 1
mute 10
port 1194
proto udp6
dev tun
local ::
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 0
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
cipher AES-128-CBC
auth SHA256
server 10.8.2.0 255.255.255.0
server-ipv6 fddf:529f:7200:b120::/64
ifconfig-pool-persist ipp_udp.txt
client-to-client
topology subnet
push "route 0.0.0.0 0.0.0.0"
push "route-ipv6 2000::/3"
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.0.1.1"
keepalive 10 300
mtu-disc yes
persist-key
persist-tun
status /var/log/openvpn/openvpn-status-udp.log
verb 1
mute 10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment