#!/bin/sh
USERNAME="YourNordVPNusername"
PASSWORD="YourNordVPNpassword"

PROTO="udp"
TUN="tun1"
REMOTE="remote 217.115.113.36 1194"

CA_CRT='-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgIJAO6MVtHs6sHiMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYD
VQQGEwJQQTELMAkGA1UECBMCUEExDzANBgNVBAcTBlBhbmFtYTEQMA4GA1UEChMH
Tm9yZFZQTjEQMA4GA1UECxMHTm9yZFZQTjEYMBYGA1UEAxMPaWUyLm5vcmR2cG4u
Y29tMRAwDgYDVQQpEwdOb3JkVlBOMR8wHQYJKoZIhvcNAQkBFhBjZXJ0QG5vcmR2
cG4uY29tMB4XDTE3MDUxMjEzMDU0OFoXDTI3MDUxMDEzMDU0OFowgZwxCzAJBgNV
BAYTAlBBMQswCQYDVQQIEwJQQTEPMA0GA1UEBxMGUGFuYW1hMRAwDgYDVQQKEwdO
b3JkVlBOMRAwDgYDVQQLEwdOb3JkVlBOMRgwFgYDVQQDEw9pZTIubm9yZHZwbi5j
b20xEDAOBgNVBCkTB05vcmRWUE4xHzAdBgkqhkiG9w0BCQEWEGNlcnRAbm9yZHZw
bi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2CFhqyzmuP3E5
g4HVs4yZ+POg/J+fsOQQk2YZpZntBBuPpRYE++zw+InGgZWy/1cuMz3iv8Z1PMUp
J3jOioyj7AViz0ZfGWwfHuAY5Tz37rr2kEal2sSTino4WW/XsMeTzC98LZ5kTfuX
u5CKCRsfmghWgs4UkF4SzwNNcE/L/lrmaIYP3dYXyMzS8G9ND0dI0RGKea+Wa7cE
jcuxGx9UxK2jHI+04a2sEPbverzbg6iQyF5Jge9ngBAiyQQ7O8pryDN0uNf0xZHU
tjIu6TP9XJ4ejhxvz9BFoEswNHZomXAbwUPlLx6ObqqpQLgl/bXMl451jBdeY18x
b9OcI5RxAgMBAAGjggEFMIIBATAdBgNVHQ4EFgQU9kW+50zGP/qNnP2H7YmfzAxc
RawwgdEGA1UdIwSByTCBxoAU9kW+50zGP/qNnP2H7YmfzAxcRayhgaKkgZ8wgZwx
CzAJBgNVBAYTAlBBMQswCQYDVQQIEwJQQTEPMA0GA1UEBxMGUGFuYW1hMRAwDgYD
VQQKEwdOb3JkVlBOMRAwDgYDVQQLEwdOb3JkVlBOMRgwFgYDVQQDEw9pZTIubm9y
ZHZwbi5jb20xEDAOBgNVBCkTB05vcmRWUE4xHzAdBgkqhkiG9w0BCQEWEGNlcnRA
bm9yZHZwbi5jb22CCQDujFbR7OrB4jAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEB
CwUAA4IBAQBiw/PhlLNi4fiCoHu+yvoNSz74AEt4goxtBZKpWLT323R2xilj3cPM
IVLMSr09TfyhrezLf3CjAO5uu4cTIgp+SNAt89ygokZnmluVIZSLZzMAZLV6+T2k
H0437L9qY4cukMeuw0ZY39yrqceIlCOs3ftKH9dJlyx6uacU0HVLuj1tQivSu76/
DgmPm3RoKVj3PEyCbMzpiOjCgkoPmgCf2zNqwcef24s6rz432iXkaVr6Q9r6Yu7H
Q7H2Xt6XNcAkJj7n29wZi8SN7mGvuHMsGp0vuodMEH/yeNCNA3nVgPyPRT2drqNz
yGVYMl2tbemZxcyQ0f4BLW4zUQhH9WUL
-----END CERTIFICATE-----'


TLS_AUTH='-----BEGIN OpenVPN Static key V1-----
85fdf9f4c46b2653fe24b0cd7d8be940
8f11b0910896004149c087f1153085d9
01446366e6d6fcfdae94a77f06dda0bb
34d954c3347686e00b67d5a765cf7d02
977d5f5612d93098666920a36f44039e
38977a48952f339e144d32969437675d
91f72dac42bd7acb2b0723a477445875
cb42a5b819f6829070859303024fda38
63d0cf1d4a3fa61f42eb530431272a2e
d31f9cd6250b016c5b77b927e3d3715a
c76a347d0e9f741ed744fa1fae6aaa5b
54e57fa3f303386a61cc557497b63e8f
89c21286b1ab52f92c095fe1a26104c6
3705826c75ae8767a35a3fdd595f07b3
ba6dff074958672123f931c9bb8bb067
d85a305f2664335867c23e8ff9eb277f
-----END OpenVPN Static key V1-----'

#### Don't modify below here, except the "auth sha512" line ####

#### Ensure gui client disabled ####
if [ `nvram get openvpncl_enable` != 0 ]; then
nvram set openvpncl_enable=0
nvram commit
sleep 10
fi

mkdir /tmp/vpncl; cd /tmp/vpncl

echo -e "$USERNAME\n$PASSWORD" > userpass.txt

echo "#!/bin/sh
iptables -t nat -I POSTROUTING -o $TUN -j MASQUERADE" > route-up.sh

echo "#!/bin/sh
iptables -t nat -D POSTROUTING -o $TUN -j MASQUERADE" > route-down.sh

echo "$CA_CRT" > ca.crt
echo "$TLS_AUTH" > tls-auth.key
sleep 10

echo "client
dev $TUN
proto $PROTO

$REMOTE
resolv-retry infinite
nobind

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

persist-key
persist-tun
keepalive 5 30

comp-lzo
mute 20
verb 3
log-append vpn.log
fast-io

auth-user-pass userpass.txt
script-security 2
remote-cert-tls server
cipher AES-256-CBC
auth sha512

ca ca.crt
tls-auth tls-auth.key 1

daemon" > openvpn.conf

chmod 600 ca.crt tls-auth.key userpass.txt openvpn.conf; chmod 700 route-up.sh route-down.sh

(killall openvpn ; openvpn --config openvpn.conf --route-up /tmp/vpncl/route-up.sh --down-pre /tmp/vpncl/route-down.sh) &

exit 0