blob: 726356d63a7b5016627cd2e9304c07276a0108e4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
{ pkgs, ... }:
{
services.openvpn.servers = {
KIT = {
# adapted from https://www.scc.kit.edu/scc/net/openvpn/os/debian/kit.ovpn
config = ''
client
remote 141.52.8.20
port 1194
dev tun
proto udp
auth-user-pass
nobind
comp-lzo no
tls-version-min 1.2
ca ${./asset/T-TeleSec_GlobalRoot_Class_2.pem}
verify-x509-name "C=DE, ST=Baden-Wuerttemberg, L=Karlsruhe, O=Karlsruhe Institute of Technology, OU=Steinbuch Centre for Computing, CN=ovpn.scc.kit.edu" subject
cipher AES-256-CBC
auth SHA384
verb 3
script-security 2
'';
autoStart = false;
};
};
}
|
