# -*- coding: utf-8; mode: python -*-

header("Configuration du tunnel entre %s et %s" %s (hostname, remote))

print """
daemon tun-main
dev tun-main

tls-server
ca /etc/ssl/certs/root.pem
cert /etc/ssl/certs/vpn.pem
tls-verify "/usr/share/openvpn/verify-cn komaz.vpn.crans.org"
key /etc/ssl/private/vpn.pem

log-append /var/log/openvpn/%s.log

port 1194

ifconfig %(local)s %(remote_vpn)s
route 10.231.136.0 255.255.255.0 vpn_gateway

ping-timer-rem
keepalive 10 60
persist-tun

verb 3

dh /etc/openvpn/dh1024.pem

remote %s
""" % (remote,
       admipof("ovh"),
       admipof(remote_vpn or remote),
       pubipof(remote))