claude generated first pass

client/client.ovpn.template

@@ -0,0 +1,44 @@
+# AtlasHorizon VPN — client profile template.
+# Per user: paste ca.crt, the user's cert/key, and ta.key (from the offline
+# CA, see openvpn/pki/README.md) into the inline blocks below, save as
+# <username>.ovpn, import into OpenVPN Connect.
+#
+# Login: AD username; password field takes either
+#   ADpassword              -> Duo push
+#   ADpassword,123456       -> appended Duo passcode (offline fallback)
+#
+# Connect Before Logon (Windows): install OpenVPN Connect v3 machine-wide
+# with CBL enabled (MSI: OVPNCONNECTOR_CBL=true or enable in app settings),
+# import this profile for all users.
+
+client
+dev tun
+proto udp
+remote vpn.atlashorizon.net 1194
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+
+remote-cert-tls server
+tls-version-min 1.2
+data-ciphers AES-256-GCM:CHACHA20-POLY1305
+auth SHA256
+
+auth-user-pass
+auth-retry interact
+hand-window 120
+verb 3
+
+<ca>
+# ----- paste ca.crt -----
+</ca>
+<cert>
+# ----- paste <username>.crt -----
+</cert>
+<key>
+# ----- paste <username>.key -----
+</key>
+<tls-crypt>
+# ----- paste ta.key -----
+</tls-crypt>