<commit_before>{% set duosec = salt["pillar.get"]("duosec", {}) %}

port 1194
proto udp

dev tun

ca   keys/ca.crt
cert keys/server.crt
key  keys/server.key  # This file should be kept secret
dh   keys/dh2048.pem

crl-verify keys/crl.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "route 192.168.5.0 255.255.255.0" # psf-internal
push "route 172.16.57.0 255.255.255.0" # pypi-internal

keepalive 10 120

tls-auth keys/ta.key 0 # This file is secret
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

cipher AES-256-CBC

comp-lzo

user nobody
group nogroup

persist-key
persist-tun

status openvpn-status.log
verb 3

reneg-sec 0

plugin /opt/duo/duo_openvpn.so {{ duosec.openvpn.ikey }} {{ duosec.openvpn.skey }} {{ duosec.openvpn.host }}<commit_msg>Actually save the configuration changes<commit_after>{% set duosec = salt["pillar.get"]("duosec", {}) %}

port 1194
proto udp

dev tun

ca   keys/ca.crt
cert keys/server.crt
key  keys/server.key  # This file should be kept secret
dh   keys/dh2048.pem

crl-verify keys/crl.pem

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

push "route 192.168.5.0 255.255.255.0" # psf-internal
push "route 172.16.57.0 255.255.255.0" # pypi-internal

keepalive 10 120

tls-auth keys/ta.key 0 # This file is secret
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

cipher AES-256-CBC

comp-lzo

user nobody
group nogroup

persist-key
persist-tun

status openvpn-status.log
verb 3

client-config-dir ccd

ccd-exclusive


reneg-sec 0

plugin /opt/duo/duo_openvpn.so {{ duosec.openvpn.ikey }} {{ duosec.openvpn.skey }} {{ duosec.openvpn.host }}
{'fraction_non_alphanumeric': 0.13810888252148998, 'fraction_numerical': 0.09742120343839542, 'mean_word_length': 3.546875, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 12, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '7135273', 'n_tokens_mistral': 899, 'n_tokens_neox': 752, 'n_words': 153}