client
dev tun
proto udp
remote vpn.quietlife.nl 1194
remote-cert-tls server
user nobody
group nogroup
cipher AES-256-GCM
auth SHA512
key-direction 1
persist-key
script-security 2
up /etc/openvpn/update-systemd-resolved
down /etc/openvpn/update-systemd-resolved
down-pre
dhcp-option DNSSEC allow-downgrade
dhcp-option DOMAIN-ROUTE .