client
dev tun
windows-driver wintun
proto {{ proto }}
remote {{ remote_host }} {{ remote_port }}
resolv-retry infinite
nobind
persist-key
persist-tun
{% if 'tcp' in proto %}
tls-client
{% endif %}
mute-replay-warnings
remote-cert-tls server

# Encryption Config
cipher {{ cipher | default('AES-256-GCM') }}
{% if data_ciphers %}
data-ciphers {{ data_ciphers }}
{% endif %}
{% if data_ciphers_fallback %}
data-ciphers-fallback {{ data_ciphers_fallback }}
{% endif %}
auth {{ auth_algo | default('SHA256') }}
verb 3

# Certificates Config
<ca>
{{ ca }}
</ca>
<cert>
{{ cert }}
</cert>
<key>
{{ key }}
</key>
key-direction 1
<tls-auth>
{{ tls_auth }}
</tls-auth>