ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh.pem

ncp-disable
cipher AES-128-GCM

client-to-client

auth-user-pass-verify /etc/openvpn/verify.sh via-file
client-cert-not-required
mode server
username-as-common-name
tmp-dir /etc/openvpn/tmp
script-security 3

server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 10.8.0.1"
push "block-outside-dns"
duplicate-cn
keepalive 5 240

comp-lzo adaptive
push "comp-lzo adaptive"

persist-key
persist-tun

status openvpn-status.log
log /var/log/openvpn.log

verb 5

sndbuf 2097152
rcvbuf 2097152
push "sndbuf 2097152"
push "rcvbuf 2097152"