etc_openvpn_server.conf.j2

dev tun-{{ item.proto }}-{{ item.port }}
server {{ item.mask }}
proto {{ item.proto }}
port {{ item.port }}

ca {{ openvpn_ca_cert }}
cert "{{ path_server_cert }}"
key "{{ path_server_key }}"
dh {{ dhparams_location }}
crl-verify {{ openvpn_crl }}

{% for item in item.server_extra_options %}
{{ item }}
{% endfor %}

# Fix for the Windows 10 DNS leak described here:
# https://community.openvpn.net/openvpn/ticket/605
#push block-outside-dns

remote-cert-tls client
keepalive 10 120
#tls-auth {{ openvpn_hmac_firewall }} 0
cipher {{ openvpn_cipher }}
tls-cipher {{ openvpn_tls_cipher }}
auth {{ openvpn_auth_digest }}
tls-version-min 1.2
#comp-lzo
persist-key
persist-tun

client-to-client
keepalive 10 120
tun-mtu 1500
mssfix 1450
status /var/log/openvpn-{{ item.proto }}-{{ item.port }}-status.log
log  /var/log/openvpn-{{ item.proto }}-{{ item.port }}.log
verb 3
mute 10
client-config-dir {{ openvpn_path_ccd }}