mirror of
https://github.com/kiddin9/op-packages.git
synced 2026-11-15 21:13:00 +08:00
38 lines
779 B
Plaintext
Executable File
38 lines
779 B
Plaintext
Executable File
# Modern OpenVPN Client Configuration Instance
|
|
|
|
# --- Connection Mode ---
|
|
client
|
|
dev tun
|
|
proto udp
|
|
|
|
# --- Network & IP Management ---
|
|
remote 127.0.0.1 1194
|
|
float
|
|
|
|
# --- Tuning & Optimization ---
|
|
explicit-exit-notify 1
|
|
mssfix 1360
|
|
tun-mtu 1420
|
|
|
|
# --- Certificates & Keys ---
|
|
ca /etc/openvpn/keys/ca_default.crt
|
|
cert /etc/openvpn/keys/client_default.crt
|
|
key /etc/openvpn/keys/client_default.key
|
|
|
|
# --- Hardening & Security ---
|
|
tls-crypt-v2 /etc/openvpn/keys/client_default.tls2.key
|
|
tls-groups secp256r1
|
|
cipher AES-256-GCM
|
|
data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305
|
|
|
|
# --- Verification & Logging ---
|
|
status /tmp/run/openvpn.instance.status 5
|
|
status-version 1
|
|
setenv logfilter on
|
|
connect-retry 10 60
|
|
resolv-retry infinite
|
|
nobind
|
|
persist-tun
|
|
remote-cert-tls server
|
|
verb 3
|