etc_openvpn_server.conf.j2

dev tun-{{ item.proto }}-{{ item.port }}
server {{ item.mask }}
proto {{ item.proto }}
port {{ item.port }}

ca {{ openvpn_ca_cert }}
cert "{{ path_server_cert }}"
key "{{ path_server_key }}"
dh {{ dhparams_location }}
crl-verify {{ openvpn_crl }}

{% for item in item.server_extra_options %}
{{ item }}
{% endfor %}

# Fix for the Windows 10 DNS leak described here:
# https://community.openvpn.net/openvpn/ticket/605
push block-outside-dns

remote-cert-tls client
keepalive 10 120
tls-auth {{ openvpn_hmac_firewall }} 0
cipher {{ openvpn_cipher }}
tls-cipher {{ openvpn_tls_cipher }}
auth {{ openvpn_auth_digest }}
tls-version-min 1.2
comp-lzo
persist-key
persist-tun
verb 0