#!/bin/sh

# openvpn
[ -e /etc/config/openvpn ] || exit 1

cat <<EOF > /etc/config/openvpn

config openvpn 'central_client'
	option enabled		'0'
	option client		'1'
	option dev		'tun'
	option proto		'udp'
	list remote		'cl.octogate.de 4294'
	list remote		'212.8.219.210 4294'
	option resolv_retry	'infinite'
	option nobind		'1'
	option persist_key	'1'
	option persist_tun	'1'
	option ca		'/octo/centralvpn/ca.crt'
	option cert		'/octo/centralvpn/apd.ozone.octogate.de.crt'
	option key		'/octo/centralvpn/apd.ozone.octogate.de.key'
	option tls_auth		'/octo/centralvpn/ta.key 1'
	option comp_lzo		'yes'
	option verb		'3'
	option mute		'20'
	option float		'1'
	option remap_usr1	'SIGHUP'
	option keepalive	'10 20'
	option script_security	'3'
	option route_up		'/octo/bin/octo_send_hwmac.sh'

config openvpn 'octo_client'
	option enabled		'1'
	option client		'1'

	option dev		'tap'
	option proto		'udp'

	option nobind		'1'
	option persist_key	'1'
	option persist_tun	'1'
	option resolv_retry	'infinite'

	option ca		'/octo/etc/openvpn/ca.crt'
	option cert		'/octo/etc/openvpn/client.crt'
	option key		'/octo/etc/openvpn/client.key'
	option tls_auth		'/octo/etc/openvpn/ta.key 1'

	option cipher		'BF-CBC'
	option comp_lzo		'yes'

	option verb		'3'
	option mute		'20'

	#OCTO SPESHUL OPSHENS
	option float		'1'
	option mssfix		'1380'
	option fragment		'1380'
	option remap_usr1	'SIGHUP'
	option keepalive	'10 60'
	option script_security	'3'
	option route_up		'/octo/bin/octo_vpn_up.sh'
	option route_down	'/octo/bin/octo_vpn_down.sh'
	#option lladdr		'02:03:ba:85:cb:a8'
EOF

exit 0
