# Configuration directory
cd /etc/openvpn
# We're a client
client
# Use tun device for routed VPN
dev tun
# UDP is much faster than TCP
proto udp
# Connect to this server
remote rakanishu.hack-talk.info 1194
# Keep trying to connect
resolv-retry infinite
# Don't bind locally
nobind
# Set the CA, cert and key
ca ca.crt
cert zer0-req.crt
key zer0.key
# Make sure it's using a server cert
remote-cert-tls server
# Use this cipher
cipher AES-256-CBC
# Give up root access
user nobody
group nobody
# But not access to the keys and tun device
persist-key
persist-tun
# This silences duplicate packet warnings
mute-replay-warnings
# Output a log
status openvpn-status.log