client remote [SERVER-IP] [Port] proto tcp dev tun ca [VPN-Dir]\\ca.crt cert [VPN-Dir]\\[User].crt key [VPN-Dir]\\[User].key tls-crypt [VPN-Dir]\\SharedSecret.psk persist-key persist-tun nobind verb 3 comp-lzo ### HARDENING ### auth-nocache auth SHA512 keysize 256 cipher AES-256-GCM remote-cert-tls server