ca <%= @openvpn_ca %> cert <%= @puppet_ssldir %>/certs/<%= @homename %>.pem cipher AES-256-CBC comp-lzo dev tun key <%= @puppet_ssldir %>/private_keys/<%= @homename %>.pem port <%= @openvpn_port %> pull remote <%= @openvpn_server %> route-delay 2 route-method exe tls-auth <%= @openvpn_ta %> 1 tls-client verb 4