config.j2 818 B

12345678910111213141516171819202122232425262728293031323334353637383940
  1. {% if item.openvpn.type == "ipv4" %}
  2. {% set proto = "udp" %}
  3. {% set localip = system.ipv4 %}
  4. {% else %}
  5. {% set proto = "udp6" %}
  6. {% set localip = system.ipv6 %}
  7. {% endif %}
  8. mode p2p
  9. proto {{ proto }}
  10. {% if item.openvpn.mode == "public" %}
  11. remote {{ item.openvpn.peer.endpoint }}
  12. local {{ localip }}
  13. rport {{ item.openvpn.peer.port }}
  14. {% else %}
  15. float
  16. keepalive {{ item.openvpn.keepalive.interval }} {{ item.openvpn.keepalive.timeout }}
  17. {% endif %}
  18. lport {{ item.openvpn.port }}
  19. dev-type tun
  20. dev {{ item.interface }}
  21. script-security 1
  22. cipher {% if item.openvpn.cipher is defined %}{{ item.openvpn.cipher }}{% else %}aes-256-cbc{% endif %}
  23. resolv-retry infinite
  24. persist-key
  25. persist-tun
  26. tun-mtu {{ item.openvpn.mtu }}
  27. ifconfig-ipv6 {{ peering.linklocal }} fe80::1000
  28. secret {{ item.name }}.key