Jérémy Dubois
b4f83e54d0
Some checks reported errors
continuous-integration/drone/push Build was killed
36 lines
697 B
Django/Jinja
36 lines
697 B
Django/Jinja
user nobody
|
|
group nogroup
|
|
|
|
local {{ ansible_default_ipv4.address }}
|
|
port 1194
|
|
proto udp
|
|
dev tun
|
|
mode server
|
|
topology subnet
|
|
keepalive 10 120
|
|
tls-exit
|
|
|
|
cipher AES-256-GCM # AES
|
|
|
|
persist-key
|
|
persist-tun
|
|
|
|
ifconfig-pool-persist /etc/openvpn/ipp.txt
|
|
|
|
status /var/log/openvpn-status.log
|
|
log-append /var/log/openvpn.log
|
|
|
|
ca /etc/shellpki/cacert.pem
|
|
cert /etc/shellpki/certs/{{ ansible_fqdn }}.crt
|
|
key /etc/shellpki/private/TO_COMPLETE
|
|
dh /etc/shellpki/dh2048.pem
|
|
|
|
crl-verify /etc/shellpki/crl.pem
|
|
|
|
server {{ openvpn_lan }} {{ openvpn_netmask }}
|
|
|
|
#push "route 192.0.3.0 255.255.255.0"
|
|
|
|
# Management interface (used by check_openvpn for Nagios)
|
|
management 127.0.0.1 1195 /etc/openvpn/management-pwd
|