local $PUBLICIP port 443 proto tcp dev tap$ID ca ca.crt cert server.crt key server.key dh dh2048.pem server-bridge client-config-dir ccd push "redirect-gateway def1" client-to-client keepalive 10 120 tls-auth ta.key 0 cipher AES-256-CBC compress lz4-v2 push "compress lz4-v2" user nobody group nogroup persist-key persist-tun status /var/log/openvpn/openvpn$ID-status.log verb 9