mode server
daemon
tls-server
proto tcp
port  443
local 192.168.99.11
client-config-dir /opt/openvpn/ccd
script-security 3
writepid /var/run/openvpn-server/myopenvpn-443.pid

; ciphers
tls-cipher "DEFAULT"

; tunnel configuration
dev tap1
server-bridge 10.3.5.1 255.255.0.0 10.3.6.1 10.3.7.254
passtos
comp-lzo
persist-key
persist-tun
persist-local-ip
persist-remote-ip

; loggin and status
ifconfig-pool-persist /opt/openvpn/leases/openvpn-443.leases
status-version 2
status /opt/openvpn/status/openvpnserver-status-443.log 5;
verb 3
client-connect     /opt/openvpn/scripts/logon.sh
client-disconnect  /opt/openvpn/scripts/logoff.sh

; routing
;push "route 10.3.0.0 255.255.0.0"

; management 
management localhost 6667

; certificates and authentication
dh   /opt/openvpn/private/dh1024.pem
ca   /opt/openvpn/ca/cacert.pem
cert /opt/openvpn/certs/hostcert.pem
key  /opt/openvpn/private/hostkey.pem
verify-client-cert none
username-as-common-name
auth-user-pass-verify /opt/openvpn/scripts/openvpn-auth.py via-env
;client-to-client
keepalive 10 60
max-clients 50

; explicit exit
push "explicit-exit-notify"