Here is my server config:
Server Config
port 1194
proto udp
dev tun
ca ca.crt
cert blahblah.crt
key blahblah.key # This file should be kept secret
dh dh2048.pem
tls-crypt tls-crypt.key
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 1.0.0.1"
push "block-outside-dns"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
Here is my client config:
Client Config
client
dev tun
proto udp
remote secret 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert BderVPNclient.crt
key BderVPNclient.key
remote-cert-tls server
tls-crypt tls-crypt.key
cipher AES-256-CBC
comp-lzo
verb 3