# Specify device dev tap0 # Server and client IP and Pool server-bridge 10.10.1.1 255.255.255.0 10.10.1.81 10.10.1.89 #server 10.10.3.0 255.255.255.0 ifconfig-pool-persist ipp.txt proto tcp # Certificates for VPN Authentication ca /usr/local/etc/openvpn/keys/ca.crt cert /usr/local/etc/openvpn/keys/server.crt key /usr/local/etc/openvpn/keys/server.key dh /usr/local/etc/openvpn/keys/dh1024.pem # Routes to push to the client push "route 10.10.1.0 255.255.255.0" # Use compression on the VPN link comp-lzo # Make the link more resistent to connection failures keepalive 10 60 ping-timer-rem persist-tun persist-key # Run OpenVPN as a daemon and drop privileges to user/group nobody user nobody group nobody daemon