#!/bin/sh

echo "# OpenVPN 2.1 Config"

if [ "$OPENVPN_LOCAL" ];then
	echo "local $OPENVPN_LOCAL"
fi

if [ "$OPENVPN_PROTO" == "tcp" ]; then
	echo "proto tcp-$OPENVPN_MODE"
else
	echo "proto udp"
fi

echo "port $OPENVPN_PORT"

if [ "$OPENVPN_TYPE" == "tap" ]; then
	echo "dev tap"
else
	echo "dev tun"
fi

if [ "$OPENVPN_AUTH_TYPE" == "certs" ]; then

	cat <<EOF
ca /tmp/flash/ca.crt
cert /tmp/flash/box.crt
key /tmp/flash/box.key
EOF

	if [ "$OPENVPN_MODE" == "server" ]; then
		echo "mode server"
		echo "tls-server"
		echo "dh /tmp/flash/dh.pem"
		if [ -r "/tmp/flash/crl.pem" ]; then
			echo "crl-verify /tmp/flash/crl.pem"
		fi
		if [ "$OPENVPN_TLS_AUTH" == "yes" ]; then
			echo "tls-auth /tmp/flash/static.key 0"
		fi
		
		if [ "$OPENVPN_DHCP_RANGE" ]; then
			echo "ifconfig-pool $OPENVPN_DHCP_RANGE"
		fi
	else
			echo "tls-client"
		echo "ns-cert-type server"
		if [ "$OPENVPN_TLS_AUTH" == "yes" ]; then
			echo "tls-auth /tmp/flash/static.key 1"
		fi

		if [ "$OPENVPN_PULL" == "yes" ]; then
			echo "pull"
		fi
	fi

else
	echo "secret /tmp/flash/static.key"
fi

if [ "$OPENVPN_MODE" == "server" ]; then

	if [ "$OPENVPN_TYPE" == "tap" ]; then
		cat <<EOF
ifconfig $OPENVPN_BOX_IP $OPENVPN_BOX_MASK
push "route-gateway $OPENVPN_BOX_IP"
EOF
	else
		cat <<EOF
ifconfig $OPENVPN_BOX_IP $OPENVPN_REMOTE_IP 
EOF

		echo "route $OPENVPN_VPN_NET"

		if [ "$OPENVPN_CLIENT2CLIENT" == "yes" ]; then
			echo "push \"route $OPENVPN_VPN_NET\""
		else
			echo "push \"route $OPENVPN_BOX_IP\""
		fi

	fi
	
	if [ "$OPENVPN_LOCAL_NET" ]; then
		echo "push \"route $OPENVPN_LOCAL_NET\""
	fi

	if [ "$OPENVPN_PUSH_DNS" ]; then
		echo "push \"dhcp-option DNS $OPENVPN_PUSH_DNS\""
	fi

	if [ "$OPENVPN_PUSH_WINS" ]; then
		echo "push \"dhcp-option DNS $OPENVPN_PUSH_WINS\""
	fi

	if [ "$OPENVPN_PUSH_REDIRECT" ]; then
		echo "push \"redirect-gateway\""
	fi

	if [ "$OPENVPN_MAXCLIENTS" ]; then
		echo "max-clients $OPENVPN_MAXCLIENTS"
	fi

else

	cat <<EOF
remote $OPENVPN_REMOTE
nobind
EOF

	if [ "$OPENVPN_TYPE" == "tun" ]; then
		echo "ifconfig $OPENVPN_BOX_IP $OPENVPN_REMOTE_IP"
	else
		if [ "$OPENVPN_DHCP_CLIENT" != "yes" ]; then
			echo "ifconfig $OPENVPN_BOX_IP $OPENVPN_BOX_MASK"
		fi
	fi
	
fi

cat <<EOF
tun-mtu $OPENVPN_MTU
mssfix

daemon
verb $OPENVPN_VERBOSE

cipher $OPENVPN_CIPHER
EOF

if [ "$OPENVPN_REMOTE_NET" ]; then
	echo "route $OPENVPN_REMOTE_NET"
fi
if [ "$OPENVPN_SHAPER" ]; then
	echo "shaper $OPENVPN_SHAPER"
fi
if [ "$OPENVPN_FLOAT" == "yes" ]; then
        echo "float"
fi
if [ "$OPENVPN_KEEPALIVE" == "yes" ]; then
	echo "keepalive $OPENVPN_KEEPALIVE_PING $OPENVPN_KEEPALIVE_TIMEOUT"
	if [ "$OPENVPN_MODE" == "client" ]; then
		echo "resolv-retry infinite"
	fi
fi
if [ "$OPENVPN_MGMNT" ]; then
	echo "management $OPENVPN_MGMNT"
fi
if [ "$OPENVPN_LOGFILE" == "yes" ]; then
	echo "status /var/log/openvpn.log"
fi