# v20250704 client dev tun proto udp remote vpn.exemple.com 1194 resolv-retry infinite nobind persist-key persist-tun # Sécurité TLS tls-crypt ta.key remote-cert-tls server cipher AES-256-GCM auth SHA512 tls-version-min 1.3 # Clés et certificats ca ca.crt cert client.crt key client.key # Logs verb 3 # Protection DNS leaks (Linux/Mac/Windows spécifiques) # Pour Linux via NetworkManager ou un script iptables