openvpn.conf.erb

mode server
writepid /var/vcap/sys/run/openvpn/openvpn.pid
client-config-dir /var/vcap/jobs/openvpn/etc/ccd
ca /var/vcap/jobs/openvpn/etc/ca.crt
cert /var/vcap/jobs/openvpn/etc/server.crt
key /var/vcap/jobs/openvpn/etc/server.key
dh /var/vcap/jobs/openvpn/etc/dh.pem
<% if_p('openvpn.crl_pem') do %>
crl-verify /var/vcap/jobs/openvpn/etc/crl.pem
<% end %>
cipher <%= p('openvpn.cipher') %>
keysize <%= p('openvpn.keysize') %>
<% if_p('openvpn.tls_cipher') do | v | %>
tls-cipher <%= v %>
<% end %>
tls-version-min <%= p('openvpn.tls_version_min') %>
proto tcp
port <%= p('openvpn.port') %>
comp-lzo
group nogroup
user nobody
status /var/vcap/sys/run/openvpn/status
dev tun0
local <%= p('openvpn.local') %>
server <%= p('openvpn.server') %>
<% p('openvpn.push_routes').each do | route | %>
push "route <%= route %>"
<% end %>
<% p('openvpn.routes').each do | route | %>
route <%= route %>
<% end %>
push "persist-tun"
push "ping 15"
push "ping-restart 60"
keepalive 15 60
topology subnet
persist-key
persist-tun
<% if_p('openvpn.extra_config') do | v | %><%= v %><% end %>