set interfaces openvpn vtun0 mode 'server'
subnet 192.168.10.0/24 is a virtual vpn network
set interfaces openvpn vtun0 server subnet '192.168.10.0/24'
set interfaces openvpn vtun0 tls ca-cert-file '/config/auth/ovpn/ca.crt'
set interfaces openvpn vtun0 tls cert-file '/config/auth/ovpn/server.crt'
set interfaces openvpn vtun0 tls dh-file '/config/auth/ovpn/dh1024.pem'
set interfaces openvpn vtun0 tls key-file '/config/auth/ovpn/server.key'
set interfaces openvpn vtun0 use-lzo-compression
set interfaces openvpn vtun0 encryption aes256
set interfaces openvpn vtun0 keep-alive interval 10
set interfaces openvpn vtun0 keep-alive failure-count 3
push route is our Internal network. When clients connect to the VPN they can reach the servers on the 192.168.2.0/24 network
set interfaces openvpn vtun0 server push-route 192.168.2.0/24