sigh

client/client.ovpn.template

@@ -1,7 +1,7 @@
 # AtlasHorizon VPN — client profile template.
-# Per user: paste ca.crt, the user's cert/key, and ta.key (from the offline
-# CA, see openvpn/pki/README.md) into the inline blocks below, save as
-# <username>.ovpn, import into OpenVPN Connect.
+# ONE profile for everyone: paste ca.crt and ta.key (from the offline CA,
+# see openvpn/pki/README.md) into the inline blocks below and distribute.
+# No per-user certificates — identity is AD user/pass + Duo.
 #
 # Login: AD username; password field takes either
 #   ADpassword              -> Duo push
@@ -33,12 +33,6 @@ verb 3
 <ca>
 # ----- paste ca.crt -----
 </ca>
-<cert>
-# ----- paste <username>.crt -----
-</cert>
-<key>
-# ----- paste <username>.key -----
-</key>
 <tls-crypt>
 # ----- paste ta.key -----
 </tls-crypt>