proto udp
dev tun
local 10.0.0.53
ca /usr/share/openvpn/easy-rsa/keys/ca.crt
cert /usr/share/openvpn/easy-rsa/keys/server.crt
key /usr/share/openvpn/easy-rsa/keys/server.key
dh /usr/share/openvpn/easy-rsa/keys/dh2048.pem
tls-auth /usr/share/openvpn/easy-rsa/keys/ta.key 0 # "0" beim VPN-Server, "1" bei VPN-Clients
#server 10.8.0.0 255.255.255.0
mode server
tls-server
#ifconfig-pool-persist /usr/share/openvpn/ipp.txt
keepalive 10 120
#cipher BF-CBC (=Default; sehr schnell)
#cipher AES-128-CBC (sicherer)
#cipher AES-256-CBC (am sichersten)
comp-lzo # Kompression
user openvpn
group openvpn
persist-key
persist-tun
resolv-retry infinite
status /usr/share/openvpn/openvpn-status.log
chroot /usr/share/openvpn/chroot
push "route 10.0.0.0 255.255.255.0"
if dev tun
ifconfig-pool 10.8.0.4 10.8.0.251
route 10.8.0.0 255.255.255.0
if client-to-client
push "route 10.8.0.0 255.255.255.0"
else
push "route 10.8.0.1"
if dev tap
ifconfig-pool 10.8.0.2 10.8.0.254 255.255.255.0
push "route-gateway 10.8.0.1"