dev tun
proto tcp
local vpn.example.com
port 1194
resolv-retry infinite
cipher AES-256-CBC
redirect-gateway
server 10.8.0.0 255.255.255.0
keepalive 10 120
reneg-sec 18000
user nobody
group nogroup
persist-key
persist-tun
comp-lzo
verb 3
mute 20
status /var/log/openvpn/status.log
log-append /var/log/openvpn/openvpn.log
client-config-dir ccd
script-security 3
username-as-common-name
verify-client-cert none
auth-user-pass-verify your_script.sh via-file
duplicate-cn

### Networking
route 10.1.1.0 255.255.255.0
route 10.1.2.0 255.255.255.0
route 10.1.3.0 255.255.255.0
route 10.1.4.0 255.255.255.0
route 10.1.5.0 255.255.255.0
push "route 10.1.2.0 255.255.255.0"
push "route 10.1.3.0 255.255.255.0"
push "route 10.1.4.0 255.255.255.0"
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

### Certificates
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/issued/server.crt
key /etc/openvpn/keys/private/server.key
dh /etc/openvpn/keys/dh.pem