dev tun10
#local 194.87.85.171
proto udp
port 1194

user nobody
group nobody
persist-tun
persist-key

keepalive 600 3000
mssfix 1497

topology subnet
server 192.168.100.0 255.255.255.0
#push "redirect-gateway def1"
push "route 192.168.200.0 255.255.255.0"
push "dhcp-option DNS 192.168.200.2"
push "dhcp-option DOMAIN work.local"
client-config-dir /etc/openvpn/ccd/tun10

data-ciphers AES-128-CBC
cipher AES-128-CBC
auth SHA1
tls-server
key-direction 0
#data-ciphers AES-256-GCM
#cipher AES-256-GCM
#auth SHA256

verb 1

#dh /etc/openvpn/server/tun10/dh.pem
#ca /etc/openvpn/server/tun10/ca.crt
#tls-auth /etc/openvpn/server/tun10/ta.key 0
#cert /etc/openvpn/server/tun10/server.crt
#key /etc/openvpn/server/tun10/server.key
#crl-verify /etc/openvpn/server/tun10/crl.pem

<dh>
xxx
</dh>

<ca>
xxx
</ca>

<tls-auth>
xxx
</tls-auth>

<cert>
xxx
</cert>

<key>
xxx
</key>

<crl-verify>
xxx
</crl-verify>