dev tun
proto udp
port 1194

ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/
key /etc/openvpn/easy-rsa/keys/
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0

user nobody
group nogroup
server 10.8.0.0 255.255.255.0
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3

#client-to-client
#push "redirect-gateway def1 bypass-dhcp"
#push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 192.168.100.21"

log-append /var/log/openvpn

#comp-lzo
#duplicate-cn
keepalive 10 120

cipher AES-256-CBC
push "route 192.168.100.0 255.255.255.0"
comp-lzo
#push "compress lz4-v2"
explicit-exit-notify 1