# FI MU ovpn; routes=fi_only; os_sw=; port=; generated on 2023-11-10 14:40:41
# VPN configuration generator: https://fadmin.fi.muni.cz/noauth/vpn.mpl
tls-client
dev tun-fi
remote vpn.fi.muni.cz 1194 udp
auth-user-pass
verify-x509-name vpn.fi.muni.cz name
pull
allow-pull-fqdn
ignore-unknown-option block-outside-dns
verb 3
nobind
cipher AES-256-CBC
auth-nocache
reneg-sec 86400

push-peer-info
setenv UV_OVPN "routes=fi_only; os_sw=; port=; generated on 2023-11-10 14:40:41"

# we won't route everything through VPN
route-nopull
route remote_host 255.255.255.255 net_gateway
# set up DNS and DOMAIN manually
dhcp-option DNS 147.251.48.14
dhcp-option DNS 147.251.48.41
dhcp-option DNS 2001:718:801:230::e
dhcp-option DNS 2001:718:801:230::29
dhcp-option DOMAIN fi.muni.cz

# route only accesses to FI networks
route 147.251.42.0 255.255.254.0 vpn_gateway
route 147.251.44.0 255.255.252.0 vpn_gateway
route 147.251.48.0 255.255.252.0 vpn_gateway
route 147.251.52.0 255.255.254.0 vpn_gateway
route 147.251.58.0 255.255.255.0 vpn_gateway
route 147.251.106.192 255.255.255.224 vpn_gateway
route 172.16.0.0 255.240.0.0 vpn_gateway
route-ipv6 2001:718:801:200::/56

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>

<tls-crypt>
-----BEGIN OpenVPN Static key V1-----
23916f7ec5f2f5c7994243767a737913
166879e48152712bb5be12207afab123
fcd603844caa8b80113164cf53306ce6
13a314629a656128af6b8778206499ee
8e9e65999e62c120eb38697020fe9421
54c36ec7c885eec6bf4289804a9e0265
53c5131057a81da58e1a43c327f0567d
9cce2218f4e5ebf155f712bdd1650cb2
126358aa878d2b8b77097cdb9ee070b6
43cf62dda5ce346a35e8fc182e33f36b
a1417cdd28687a91b508ebfe815b5ab1
915d71f31b10e9a1fed657d4e1f6523a
68771a95965b4f59edd95b70c259bab4
61f62721212e8b944df9c1942b2bcd8e
b05a24304d3b3c9716c07df224d64926
0a5c2f4d0fedb9b31e6ab04bb26c12f5
-----END OpenVPN Static key V1-----
</tls-crypt>