# Modern OpenVPN Client Configuration Instance

# --- Connection Mode ---
client
dev tun
proto udp

# --- Network & IP Management ---
remote 127.0.0.1 1194
float

# --- Tuning & Optimization ---
explicit-exit-notify 1
mssfix 1360
tun-mtu 1420

# --- Certificates & Keys ---
ca /etc/openvpn/keys/ca_default.crt
cert /etc/openvpn/keys/client_default.crt
key /etc/openvpn/keys/client_default.key

# --- Hardening & Security ---
tls-crypt-v2 /etc/openvpn/keys/client_default.tls2.key
tls-groups secp256r1
cipher AES-256-GCM
data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305

# --- Verification & Logging ---
status /tmp/run/openvpn.instance.status 5
status-version 1
setenv logfilter on
connect-retry 10 60
resolv-retry infinite
nobind
persist-tun
remote-cert-tls server
verb 3