#!/bin/sh
USERNAME="YourNordVPNusername"
PASSWORD="YourNordVPNpassword"

PROTO="udp"
TUN="tun1"
REMOTE="remote 104.129.25.70 1194"

CA_CRT='-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----'

TLS_AUTH='-----BEGIN OpenVPN Static key V1-----
808738a7dd08781f3038f18e9a0bea64
4d802fa2d6c5fe437b0c2d940b677623
5898393a91d4c885b18c0197134007a4
5b02845d69eedb079c479797f6996ba0
50c4b26eb3674eac1216453842bc3716
edcb9e83e956222509e5085cd7a85a7d
4648afe62defa4a00e31704dc7f4bdb6
3a5973c5fbd6c276e96e07abc2083d6a
0a40a0d4c70292a2b9b39c819a9ca7f0
4080b5b5cb361607546c470197c6b795
1f2d12782ea11f8fc80799da49b5628c
9fea1a8d6bea7dd3260632e0f069b479
bdfe1caedd5d51d83c8f699eecd74def
d7ec03ef348529da1114b6bcc84c82e6
209b7ef4c3ea2cdb0ef38be6b6abebbb
f2999f950bb1c1988cb0195248a34ff8
-----END OpenVPN Static key V1-----'

#### Don't modify below here, except the "auth sha512" line ####

#### Ensure gui client disabled ####
if [ `nvram get openvpncl_enable` != 0 ]; then
nvram set openvpncl_enable=0
nvram commit
sleep 10
fi

mkdir /tmp/vpncl; cd /tmp/vpncl

echo -e "$USERNAME\n$PASSWORD" > userpass.txt

echo "#!/bin/sh
iptables -t nat -I POSTROUTING -o $TUN -j MASQUERADE" > route-up.sh

echo "#!/bin/sh
iptables -t nat -D POSTROUTING -o $TUN -j MASQUERADE" > route-down.sh

echo "$CA_CRT" > ca.crt
echo "$TLS_AUTH" > tls-auth.key
sleep 10

echo "client
dev $TUN
proto $PROTO

$REMOTE
resolv-retry infinite
nobind

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

persist-key
persist-tun
keepalive 5 30

comp-lzo
mute 20
verb 3
log-append vpn.log
fast-io

auth-user-pass userpass.txt
script-security 2
remote-cert-tls server
resolv-retry infinite
cipher AES-256-CBC
auth sha512

ca ca.crt
tls-auth tls-auth.key 1

daemon" > openvpn.conf

chmod 600 ca.crt tls-auth.key userpass.txt openvpn.conf; chmod 700 route-up.sh route-down.sh

(killall openvpn ; openvpn --config openvpn.conf --route-up /tmp/vpncl/route-up.sh --down-pre /tmp/vpncl/route-down.sh) &

exit 0