# -*- coding: utf-8; mode: python -*-

include("ip")

header("Configuration du tunnel vers les serveurs a 'exterieur")

print """
daemon tun-ovh
dev tun-ovh

tls-server
ca /etc/ssl/certs/root.pem
cert /etc/ssl/certs/vpn.pem
tls-verify "/usr/share/openvpn/verify-cn ovh.vpn.crans.org"
key /etc/ssl/private/vpn.pem

log-append /var/log/openvpn/external.log

port 1194

ifconfig %s %s

ping-timer-rem
keepalive 10 60
persist-tun

verb 3

dh /etc/openvpn/dh1024.pem
""" % (admipof("komaz"), admipof("ovh"))