# Specify that we are a client
client

# Use the same setting as you are using on the server
dev tun

# Connect to the server on UDP port 1194
proto udp
remote vpn.quietlife.nl 1194

# Run the daemon with minimal privileges
user nobody
group nogroup

# Unset these defaults (certificates will be provided by the .ovpn file)
#ca ca.crt
#cert client.crt
#key client.key

# Use strong ciphers
cipher AES-256-CBC
auth SHA512

# This is the client
key-direction 1

# Run these scripts after connecting (sets up DNS)
script-security 2
up /etc/openvpn/update-systemd-resolved
down /etc/openvpn/update-systemd-resolved
down-pre
dhcp-option DNSSEC allow-downgrade
dhcp-option DOMAIN-ROUTE .