Skip to content

Instantly share code, notes, and snippets.

@dapi
Created October 31, 2022 17:40
Show Gist options
  • Save dapi/5953d5d44fbb5f5c4d66426877ec0372 to your computer and use it in GitHub Desktop.
Save dapi/5953d5d44fbb5f5c4d66426877ec0372 to your computer and use it in GitHub Desktop.
server 192.168.255.0 255.255.255.0
ca /etc/ipa/ca.crt
cert server_freeipa.crt
key server_freeipa.key
dh /etc/openvpn/dh.pem
proto udp
## Rely on Docker to do port mapping, internally always 1194
port 1194
dev tun0
management 127.0.0.1 7505
key-direction 0
keepalive 10 60
# persist-key
persist-tun
status /var/log/openvpn-status.log
# user nobody
# group nogroup
comp-lzo no
# REMOVED OPTION: --client-cert-not-required, use '--verify-client-cert none' instead
# client-cert-not-required
verify-client-cert none
username-as-common-name
plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so "openvpn"
verb 7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment