# -*- coding: utf-8; mode: python -*-

include("ip")

header("Configuration du tunnel vers la connexion principale")

print """
daemon tun-main
dev tun-main

tls-server
ca /etc/ssl/certs/root.pem
cert /etc/ssl/certs/vpn.pem
tls-verify "/usr/share/openvpn/verify-cn komaz.vpn.crans.org"
key /etc/ssl/private/vpn.pem

log-append /var/log/openvpn/main.log

port 1194

ifconfig %s %s

ping-timer-rem
keepalive 10 60
persist-tun

verb 3

dh /etc/openvpn/dh1024.pem
up /etc/openvpn/up
down /etc/openvpn/down
up-restart

remote %s
""" % (admipof("ovh"), admipof("komaz"), pubipof("komaz"))