# Serveur TCP/443
mode server
proto tcp-server
port %%VPNPORT%%
dev tun
client-to-client

# Cles et certificats
ca /etc/openvpn/%%VPNNAME%%/ca.crt
cert /etc/openvpn/%%VPNNAME%%/server.crt
key /etc/openvpn/%%VPNNAME%%/server.key
dh /etc/openvpn/%%VPNNAME%%/dh1024.pem
tls-auth /etc/openvpn/%%VPNNAME%%/ta.key 1

key-direction 0
cipher AES-256-CBC
crl-verify /etc/openvpn/%%VPNNAME%%/easy-rsa/keys/crl.pem
client-config-dir /etc/openvpn/%%VPNNAME%%/clientsconf

# Reseau
server %%VPNIPRANGE%% 255.255.255.0
keepalive 10 120

# Securite
user www-data
group ovpn-manager
persist-key
persist-tun
comp-lzo

# Log
verb 1
mute 20
status /var/vpn/status-%%VPNNAME%%
#log-append /var/log/openvpn-%%VPNNAME%%.log