dev tun
tls-client

remote 74.56.13.107 1194

# Use DDNS (your Synology DDNS)
# remote boxicube.synology.me 1194
# float

pull

proto udp

script-security 2

comp-lzo

reneg-sec 0

# Clients running OpenVPN 2.4 and higher will automatically upgrade from AES-256-CBC to AES-256-GCM without any configuration changes.
cipher AES-256-CBC
auth SHA512

auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
f63ec7bfb6e5e3e9fb6d1f89579e1579
a8ddcbbce7159e05d9e52b86cc9ab13a
62fe9b516f5f183920157abe3ab7417e
1249ee85a724285265a4a8e1acaa846a
1f0b6761226e0b540af54509f6791306
a02a46eddee1ebfd0c337cec3114eb1b
b5ea94f786d658fbfa370f37fe964601
e9ac25f6ca5a68bc80fda33a070144e0
68825b0e23220d1b05a4fa514937134a
b8fc43f9933e74aac4a392fd992dfe47
7d39bfd2318be656b5b8eb0333daa249
3e0d7941f7aa49f8c23666973be1376b
df7ec33169d51ed3b10d4cef9b980ad3
7a4b726dc4f5979d7ff716f7315d9b51
584d0fc9d65585c6483f6217f9709bae
76d8231c189022854e43e46ed443bb5a
-----END OpenVPN Static key V1-----

</tls-auth>

#float
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)

# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)

#redirect-gateway def1

# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.

#dhcp-option DNS DNS_IP_ADDRESS

# If you want to connect by Server's IPv6 address, you should use
# "proto udp6" in UDP mode or "proto tcp6-client" in TCP mode