client
proto udp
remote {{ openvpn_zone.server_addr }} {{ openvpn_zone.server_port }}
ping 60
ping-timer-rem

tls-client
ca /etc/ssl/openvpn/{{ openvpn_zone.name }}/ca-crt.pem
cert /etc/ssl/openvpn/{{ openvpn_zone.name }}/client/crt.pem
key /etc/ssl/openvpn/{{ openvpn_zone.name }}/client/key.pem
remote-cert-tls server
cipher AES-256-GCM
persist-key

dev tun
persist-tun

pull