luci/applications/luci-app-openvpn/root/etc/config/openvpn_recipes

#
# Routed point-to-point server
#
config openvpn_recipe server_tun_ptp
	option _description	'Simple server configuration for a routed point-to-point VPN'
	option _role		'server'
	option dev		'tun'
	option ifconfig		'10.0.0.1 10.0.0.2'
	option secret		'shared-secret.key'
	option keepalive	'10 60'
	option comp_lzo		'yes'
	option verb		'3'
	option mssfix		'1420'

#
# Routed point-to-point client
#
config openvpn_recipe client_tun_ptp
	option _description	'Simple client configuration for a routed point-to-point VPN'
	option _role		'client'
	option dev		'tun'
	list remote		'vpnserver.example.org'
	option ifconfig		'10.0.0.2 10.0.0.1'
	option secret		'shared-secret.key'
	option nobind		'1'
	option comp_lzo		'yes'
	option verb		'3'

#
# Routed multi-client server
#
config openvpn_recipe server_tun
	option _description	'Server configuration for a routed multi-client VPN'
	option _role		'server'
	option dev		'tun'
	option server		'10.0.100.0 255.255.255.0'
	option ca		'ca.crt'
	option cert		'server.crt'
	option key 		'server.key'
	option dh 		'dh1024.pem'
	option keepalive	'10 60'
	option comp_lzo		'yes'
	option verb		'3'
	option mssfix		'1420'

#
# Routed client
#
config openvpn_recipe client_tun
	option _description	'Client configuration for a routed multi-client VPN'
	option _role		'client'
	option client		'1'
	option dev		'tun'
	list remote		'vpnserver.example.org'
	option pkcs12		'my_client.p12'
	option remote_cert_tls	'server'
	option comp_lzo		'yes'
	option nobind		'1'
	option persist_key	'1'
	option persist_tun	'1'
	option verb		'3'
	option reneg_sec	'0'
	option float		'1'

#
# Multi-client ethernet bridge server
#
config openvpn_recipe server_tap_bridge
	option _description	'Server configuration for an ethernet bridge VPN'
	option _role		'server'
	option dev		'tap'
	option server_bridge	'192.168.1.1 255.255.255.0 192.168.1.128 192.168.1.254'
	option ca		'ca.crt'
	option cert		'server.crt'
	option key 		'server.key'
	option dh 		'dh1024.pem'
	option keepalive	'10 60'
	option comp_lzo		'yes'
	option verb		'3'
	option mssfix		'1420'

#
# Ethernet bridge client
#
config openvpn_recipe client_tap_bridge
	option _description	'Client configuration for an ethernet bridge VPN'
	option _role		'client'
	option client		'1'
	option dev 		'tap'
	list remote		'vpnserver.example.org'
	option ca 		'ca.crt'
	option cert		'my_client.crt'
	option key 		'my_client.key'
	option dh 		'dh1024.pem'
	option remote_cert_tls	'server'
	option comp_lzo		'yes'
	option nobind		'1'
	option persist_key	'1'
	option verb		'3'
	option reneg_sec	'0'
	option float		'1'