summaryrefslogtreecommitdiff
path: root/host/role/conf/vpn/kit.ovpn.nix
blob: 82a21ee3e775e9b1bfba4136a92c6ab00e7a34a6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
# adapted from https://www.scc.kit.edu/scc/net/openvpn/os/debian/kit.ovpn

''
client
remote 141.52.8.20
port 1194
dev tun
proto udp
auth-user-pass
nobind
comp-lzo no
tls-version-min 1.2
ca ${./T-TeleSec_GlobalRoot_Class_2.pem}
verify-x509-name "C=DE, ST=Baden-Wuerttemberg, L=Karlsruhe, O=Karlsruhe Institute of Technology, OU=Steinbuch Centre for Computing, CN=ovpn.scc.kit.edu" subject
cipher AES-256-CBC
auth SHA384
verb 3
script-security 2
''