ca /etc/openvpn/keys/ca.{{ ca_name|lower }}.crt
cert /etc/openvpn/keys/{{ vpc_region }}-client.{{ ca_name|lower }}.crt
key /etc/openvpn/keys/{{ vpc_region }}-client.{{ ca_name|lower }}.key
+tls-server
+tls-version-min 1.2
+key-direction 0
+<tls-auth>
+{{ ta_secret }}
+</tls-auth>