diff options
| author | Christian Pointner <equinox@spreadspace.org> | 2021-11-16 22:34:30 +0100 |
|---|---|---|
| committer | Christian Pointner <equinox@spreadspace.org> | 2021-11-16 22:34:30 +0100 |
| commit | 65fb49fc5f3e4628353ee2e54c5ced76c5bc40fa (patch) | |
| tree | 94ae7cb1810ccdfd732c2c71036578d226d08166 /roles/network/openvpn/server/templates/conf.j2 | |
| parent | openvpn roles - bas scaffolding and certs (diff) | |
openvpn: initial support for server/client
Diffstat (limited to 'roles/network/openvpn/server/templates/conf.j2')
| -rw-r--r-- | roles/network/openvpn/server/templates/conf.j2 | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/roles/network/openvpn/server/templates/conf.j2 b/roles/network/openvpn/server/templates/conf.j2 new file mode 100644 index 00000000..b00d7ec7 --- /dev/null +++ b/roles/network/openvpn/server/templates/conf.j2 @@ -0,0 +1,25 @@ +mode server + +proto udp +lport {{ openvpn_zone.server_port }} +ping 60 +ping-timer-rem + +tls-server +ca /etc/ssl/openvpn/{{ openvpn_zone.name }}/ca-crt.pem +dh /etc/ssl/openvpn/{{ openvpn_zone.name }}/dhparams.pem +cert /etc/ssl/openvpn/{{ openvpn_zone.name }}/server/crt.pem +key /etc/ssl/openvpn/{{ openvpn_zone.name }}/server/key.pem +verify-client-cert require +remote-cert-tls client +cipher AES-256-GCM +persist-key + +dev tun +persist-tun + +topology subnet +ifconfig {{ openvpn_zone.subnet | ipaddr(openvpn_zone.offsets[inventory_hostname]) | ipaddr('address') }} {{ openvpn_zone.subnet | ipaddr('netmask') }} +push "topology subnet" +client-config-dir {{ openvpn_zone.name }}-ccd/ +ccd-exclusive |