#           _   _               ___     ______  _   _
#          | \ | | ___  _ __ __| \ \   / /  _ \| \ | |
#          |  \| |/ _ \| '__/ _` |\ \ / /| |_) |  \| |
#          | |\  | (_) | | | (_| | \ V / |  __/| |\  |
#          |_| \_|\___/|_|  \__,_|  \_/  |_|   |_| \_|
#


client
dev tun
proto tcp
remote 192.99.47.186 443
resolv-retry infinite
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
ping-timer-rem
reneg-sec 0

remote-cert-tls server

#mute 10000
# Read authentication persisted from env
auth-user-pass /config/openvpn-credentials.txt

comp-lzo
verb 3
pull
fast-io
cipher AES-256-CBC

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
28e0f3d543b3d3fb45c2e1736cd37bef
deef63d6b181b1518ff45496aaa1e0e0
8efb53e213f7ca5a590e0ed1b4051cf8
edeb8984645838427467227c461dbaa5
4250f5cc7f1249bc611f4bef58c724a0
dd7c4df83c4c12817ea40dd570a18bb9
082ed802a78e58eac9bbfb60360286ce
f08de861a6ca7e063e8a292fda540efb
9639aaf39976d148646e456c3146b02f
e10d1de242ae6f1888c426c17d202476
2e92696b2e12ed67202f35e077142c83
839ab4fc872409f38c6f7b5047b1baa9
43dd3134bd4128fc72790beead333952
153c6945eb52cfed31b4b57b5eaf83e3
ac4c0e20c45066d83cff92046769b3c5
1425ae78cdbc674c72d555287e6ea808
-----END OpenVPN Static key V1-----
</tls-auth>

# OpenVPN controls startup and shut down of transmission
script-security 2
up /etc/transmission/start.sh
down /etc/transmission/stop.sh