diff --git a/install.sh b/install.sh index a74b74f..bef9505 100755 --- a/install.sh +++ b/install.sh @@ -174,7 +174,6 @@ printf "\n################## Setup OpenVPN ##################\n" cp /etc/openvpn/easy-rsa/pki/{ca.crt,ta.key,issued/server.crt,private/server.key,dh.pem} "/etc/openvpn/" cp "$base_path/installation/server.conf" "/etc/openvpn/" mkdir "/etc/openvpn/ccd" -sed -i "s/dh dh1024\.pem/dh dh.pem/" "/etc/openvpn/server.conf" sed -i "s/port 443/port $server_port/" "/etc/openvpn/server.conf" diff --git a/installation/server.conf b/installation/server.conf index c0a5266..9611ba7 100644 --- a/installation/server.conf +++ b/installation/server.conf @@ -14,7 +14,7 @@ cert server.crt # Private key key server.key # Symmetric encryption -dh dh1024.pem +dh dh.pem # Improve security (DDOS, port flooding...) # 0 for the server, 1 for the client tls-auth ta.key 0 @@ -29,15 +29,15 @@ server 10.8.0.0 255.255.255.0 push "redirect-gateway def1" # Alternatives DNS (FDN) -push "dhcp-option DNS 80.67.169.12" +push "dhcp-option DNS 80.67.169.12" push "dhcp-option DNS 80.67.169.40" # (OpenDNS) -# push "dhcp-option DNS 208.67.222.222" +# push "dhcp-option DNS 208.67.222.222" # push "dhcp-option DNS 208.67.220.220" # (Google) -# push "dhcp-option DNS 8.8.8.8" +# push "dhcp-option DNS 8.8.8.8" # push "dhcp-option DNS 8.8.4.4" # Ping every 10 seconds and if after 120 seconds the client doesn't respond we disconnect @@ -87,4 +87,4 @@ auth-user-pass-verify scripts/login.sh via-env max-clients 50 # Run this scripts when the client connects/disconnects client-connect scripts/connect.sh -client-disconnect scripts/disconnect.sh \ No newline at end of file +client-disconnect scripts/disconnect.sh