#           _   _               ___     ______  _   _
#          | \ | | ___  _ __ __| \ \   / /  _ \| \ | |
#          |  \| |/ _ \| '__/ _` |\ \ / /| |_) |  \| |
#          | |\  | (_) | | | (_| | \ V / |  __/| |\  |
#          |_| \_|\___/|_|  \__,_|  \_/  |_|   |_| \_|
#


client
dev tun
proto tcp
remote 158.255.215.219 443
resolv-retry infinite
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
ping-timer-rem
reneg-sec 0

remote-cert-tls server

#mute 10000
# Read authentication persisted from env
auth-user-pass /config/openvpn-credentials.txt

comp-lzo
verb 3
pull
fast-io
cipher AES-256-CBC

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
85942dcbf09616c8f45ac19e6f2f8f2a
7e28f8ee1db2dd6736c8754b37edb796
4416e45835099ead1bb4de4fefd7996a
6cf5bf8f104601edc17d8fd239ba642a
c81afd7dad983cf439b8a1b827f40d79
3e75d4ca5cf5cddf93d9d813f2f86608
51cba8469ad2101bb99900e5326b2184
42dc1cb4a57954b1334263c0cc8bbc10
3ea576048df68d926ff5e087b6554e50
5211044f932615a44bd1654d400271d1
a5dce4e4361f795a711c84e626ccc62a
5b263c6e9ddd9596d81e1e4f4f00256e
fae9250ffd1818e7a2b0026d7ad2af55
fb64d9002ebc232056d41dc33e7e7455
fd88d867e981d61e4bc4bbcb266df14d
b8f0dea33f5e8febe2611512b29d434f
-----END OpenVPN Static key V1-----
</tls-auth>

# OpenVPN controls startup and shut down of transmission
script-security 2
up /etc/transmission/start.sh
down /etc/transmission/stop.sh