# Specify devicedev tap0# Server and client IP and Poolserver-bridge 10.10.1.1 255.255.255.0 10.10.1.81 10.10.1.89#server 10.10.3.0 255.255.255.0ifconfig-pool-persist ipp.txtproto tcp# Certificates for VPN Authenticationca /usr/local/etc/openvpn/keys/ca.crtcert /usr/local/etc/openvpn/keys/server.crtkey /usr/local/etc/openvpn/keys/server.keydh /usr/local/etc/openvpn/keys/dh1024.pem# Routes to push to the clientpush "route 10.10.1.0 255.255.255.0"# Use compression on the VPN linkcomp-lzo# Make the link more resistent to connection failures keepalive 10 60ping-timer-rempersist-tunpersist-key# Run OpenVPN as a daemon and drop privileges to user/group nobody user nobodygroup nobodydaemon