mode server proto tcp port 443 dev tun ca easy-rsa/keys/ca.crt cert easy-rsa/keys/server.crt key easy-rsa/keys/server.key dh easy-rsa/keys/dh4096.pem tls-auth easy-rsa/keys/ta.key 0 cipher AES-256-CBC server 10.8.0.0 255.255.255.0 keepalive 10 30 user nobody group nogroup chroot /etc/openvpn/jail persist-key persist-tun comp-lzo verb 3 mute 20 status openvpn-nomade.log log-append /var/log/nomade.log