# UDP tunnel on port 1194
port 1194
proto udp
dev tun

# Server identification and security parameters
pkcs12 /etc/openvpn/server-cert.p12
dh /etc/openvpn/dh2048.pem

# LAN information and network configuration
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt 86400
mssfix 1200
push "route 172.17.0.0 255.255.0.0"
push "route 172.18.0.0 255.255.0.0"
push "dhcp-option DNS 10.8.0.1"

# Connection management
comp-lzo
keepalive 15 120
cipher AES-256-CBC

# Daemon configuration
user nobody
group nogroup

# Persist across restarts
persist-key
persist-tun
persist-local-ip
persist-remote-ip

# Management options
status openvpn-status.log
verb 4
management localhost 6666
script-security 2