dev tun
mode server
port 1194
proto udp
explicit-exit-notify 1
multihome
topology subnet
tls-version-min 1.2
tls-server
remote-cert-tls client
cipher AES-256-GCM
persist-key
persist-tun
client-config-dir "/etc/openvpn/server/ccd_COMPANY"
ifconfig-pool-persist "/etc/openvpn/server/ipp_COMPANY.txt"
status "/var/log/openvpn-status_COMPANY.log"
syslog openvpn_COMPANY
client-to-client
keepalive 10 60
max-clients 50
verb 3
mute 20
push "persist-key"
push "topology subnet"
ifconfig 10.8.0.1 255.255.255.0
ifconfig-pool 10.8.0.21 10.8.0.253 255.255.255.0
push "route-gateway 10.8.0.1"
push "route-metric 400"
<ca>
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
    Data:
-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----

-----END PRIVATE KEY-----
</key>
<dh>
-----BEGIN DH PARAMETERS-----

-----END DH PARAMETERS-----
</dh>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----

-----END OpenVPN Static key V1-----
</tls-crypt>
