#!/bin/sh

# openvpn
[ -e /etc/config/openvpn ] || exit 1

cat <<EOF > /etc/config/openvpn


config openvpn 'central_client'
        option enabled '0'
        option client '1'
        option dev 'tun'
        option proto 'udp'
        list remote 'cl.octogate.de 4294'
        list remote '212.8.219.210 4294'
        option resolv_retry 'infinite'
        option nobind '1'
        option persist_key '1'
        option persist_tun '1'
        option ca '/octo/centralvpn/ca.crt'
        option cert '/octo/centralvpn/apd.ozone.octogate.de.crt'
        option key '/octo/centralvpn/apd.ozone.octogate.de.key'
        option tls_auth '/octo/centralvpn/ta.key 1'
        option comp_lzo 'yes'
        option verb '3'
        option mute '20'
        option float '1'
        option remap_usr1 'SIGHUP'
        option keepalive '10 20'
        option script_security '3'
        option up '/octo/bin/octo_send_hwmac.sh'



config openvpn 'octo_client'
	option enabled		'1'
	option client		'1'

	option dev		'tap'
	option proto		'udp'

	option nobind		'1'
	option persist_key	'1'
	option persist_tun	'1'
	option resolv_retry	'infinite'

	option ca		'/octo/etc/openvpn/ca.crt'
	option cert		'/octo/etc/openvpn/client.crt'
	option key		'/octo/etc/openvpn/client.key'
	option tls_auth		'/octo/etc/openvpn/ta.key 1'

	option cipher		'BF-CBC'
	option comp_lzo		'yes'

	option verb		'3'
	option mute		'20'

	#OCTO SPESHUL OPSHENS
	option float		'1'
	option mssfix		'1380'
	option fragment		'1380'
	option remap_usr1	'SIGHUP'
	option keepalive	'10 60'
	option script_security	'3'
	option up		'/octo/bin/octo_vpn_up.sh'
	option down		'/octo/bin/octo_vpn_down.sh'
	#option lladdr		'02:03:ba:85:cb:a8'
EOF

exit 0
