# DF: local address
local 1.2.3.4

# DF: local port
port 1194

# DF: TCP or UDP
proto tcp
;proto udp

# DF: device tun (NAT) or tap (bridge)
;dev tap0
dev tun

# DF: keys
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret

# DF: Diffie-Hellman param
dh dh2048.pem

# DF: NAT network
server 10.8.0.0 255.255.255.0

# DF: Persist NAT IP (optional)
ifconfig-pool-persist ipp.txt

# DF: direct all internet via VPN
push "redirect-gateway def1 bypass-dhcp"

# DF: DNS server (OpenDNS)
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"

# DF: ping every 10 sec, total 180 sec
keepalive 10 180

# DF: no compression
;comp-lzo

# DF: process privilege in system + other options
user nobody
group nogroup
persist-key
persist-tun

# DF: actual connection log
status openvpn-status.log

# DF: log activity
verb 3