diff --git a/operations/vpn/stg.ovpn b/operations/vpn/stg.ovpn new file mode 100644 index 000000000..bc95fd8ad --- /dev/null +++ b/operations/vpn/stg.ovpn @@ -0,0 +1,48 @@ +client +remote azuregateway-456f0077-9255-41a2-b432-f87bc95ba00d-a15e1563177c.vpn.azure.com 443 +verify-x509-name 456f0077-9255-41a2-b432-f87bc95ba00d.vpn.azure.com name +remote-cert-tls server + +dev tun +proto tcp +resolv-retry infinite +nobind + +auth SHA256 +cipher AES-256-GCM +persist-key +persist-tun + +tls-timeout 30 +tls-version-min 1.2 +key-direction 1 + +dhcp-option DNS 172.17.69.228 +dhcp-option DOMAIN azure.net +dhcp-option DOMAIN azure.com +dhcp-option DOMAIN azurewebsites.net +dhcp-option DOMAIN windows.net + +verb 3 + +# P2S CA root certificate +ca ca.crt + +# Pre Shared Key +tls-auth tls.key + +# P2S client certificate +# Please fill this field with a PEM formatted client certificate +# Alternatively, configure 'cert PATH_TO_CLIENT_CERT' to use input from a PEM certificate file. +cert user.crt + +# P2S client certificate private key +# Please fill this field with a PEM formatted private key of the client certificate. +# Alternatively, configure 'key PATH_TO_CLIENT_KEY' to use input from a PEM key file. +key user.key + +# DNS +script-security 2 +up /etc/openvpn/update-systemd-resolved +down /etc/openvpn/update-systemd-resolved +down-pre