port PORT_UDP
proto udp
dev tun
server 10.20.0.0 255.255.0.0
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh none
tls-server
tls-version-min 1.2
cipher AES-128-CBC
auth SHA256
data-ciphers AES-128-CBC:AES-256-GCM:AES-128-GCM
data-ciphers-fallback AES-128-CBC
keepalive 10 120
persist-key
persist-tun
user nobody
group nogroup
client-to-client
duplicate-cn
username-as-common-name
script-security 3
auth-user-pass-verify "/etc/openvpn/login/auth_vpn" via-env
verify-client-cert none
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
log /etc/openvpn/server/tcpserver.log
status /etc/openvpn/server/tcpclient.log
verb 3
client-connect /etc/openvpn/login/connect.sh
client-disconnect /etc/openvpn/login/disconnect.sh