openvpn

proto udp
dev tun
local 10.0.0.53
ca /usr/share/openvpn/easy-rsa/keys/ca.crt
cert /usr/share/openvpn/easy-rsa/keys/server.crt
key /usr/share/openvpn/easy-rsa/keys/server.key
dh /usr/share/openvpn/easy-rsa/keys/dh2048.pem
tls-auth /usr/share/openvpn/easy-rsa/keys/ta.key 0  # "0" beim VPN-Server, "1" bei VPN-Clients
#server 10.8.0.0 255.255.255.0

mode server
tls-server

#ifconfig-pool-persist /usr/share/openvpn/ipp.txt
keepalive 10 120

#cipher BF-CBC  (=Default; sehr schnell)
#cipher AES-128-CBC (sicherer)
#cipher AES-256-CBC (am sichersten)

comp-lzo      # Kompression
user openvpn
group openvpn
persist-key
persist-tun
resolv-retry infinite

status /usr/share/openvpn/openvpn-status.log
chroot /usr/share/openvpn/chroot

push "route 10.0.0.0 255.255.255.0"

if dev tun
    ifconfig-pool 10.8.0.4 10.8.0.251
    route 10.8.0.0 255.255.255.0
    if client-to-client
       push "route 10.8.0.0 255.255.255.0"
    else
       push "route 10.8.0.1"

if dev tap:
   ifconfig-pool 10.8.0.2 10.8.0.254 255.255.255.0
   push "route-gateway 10.8.0.1"