first commit

data/crl.pem

@@ -0,0 +1,12 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----

data/openvpn.conf

@@ -0,0 +1,30 @@
+server 192.168.255.0 255.255.255.0
+verb 3
+key /etc/openvpn/pki/private/myhome.97admin.com.key
+ca /etc/openvpn/pki/ca.crt
+cert /etc/openvpn/pki/issued/myhome.97admin.com.crt
+dh /etc/openvpn/pki/dh.pem
+tls-auth /etc/openvpn/pki/ta.key
+key-direction 0
+keepalive 10 60
+persist-key
+persist-tun
+
+proto udp
+# Rely on Docker to do port mapping, internally always 1194
+port 1194
+dev tun0
+status /tmp/openvpn-status.log
+
+user nobody
+group nogroup
+comp-lzo no
+
+### Route Configurations Below
+route 192.168.254.0 255.255.255.0
+
+### Push Configurations Below
+push "block-outside-dns"
+push "dhcp-option DNS 8.8.8.8"
+push "dhcp-option DNS 8.8.4.4"
+push "comp-lzo no"

data/ovpn_env.sh

@@ -0,0 +1,25 @@
+declare -x OVPN_AUTH=
+declare -x OVPN_CIPHER=
+declare -x OVPN_CLIENT_TO_CLIENT=
+declare -x OVPN_CN=myhome.97admin.com
+declare -x OVPN_COMP_LZO=0
+declare -x OVPN_DEFROUTE=1
+declare -x OVPN_DEVICE=tun
+declare -x OVPN_DEVICEN=0
+declare -x OVPN_DISABLE_PUSH_BLOCK_DNS=0
+declare -x OVPN_DNS=1
+declare -x OVPN_DNS_SERVERS=([0]="8.8.8.8" [1]="8.8.4.4")
+declare -x OVPN_ENV=/etc/openvpn/ovpn_env.sh
+declare -x OVPN_EXTRA_CLIENT_CONFIG=()
+declare -x OVPN_EXTRA_SERVER_CONFIG=()
+declare -x OVPN_FRAGMENT=
+declare -x OVPN_KEEPALIVE='10 60'
+declare -x OVPN_MTU=
+declare -x OVPN_NAT=0
+declare -x OVPN_PORT=1194
+declare -x OVPN_PROTO=udp
+declare -x OVPN_PUSH=()
+declare -x OVPN_ROUTES=([0]="192.168.254.0/24")
+declare -x OVPN_SERVER=192.168.255.0/24
+declare -x OVPN_SERVER_URL=udp://myhome.97admin.com
+declare -x OVPN_TLS_CIPHER=

data/pki/ca.crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/pki/certs_by_serial/20F5705278986355B21732142CAB6E77.pem

@@ -0,0 +1,88 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            20:f5:70:52:78:98:63:55:b2:17:32:14:2c:ab:6e:77
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=myhome.97admin.com
+        Validity
+            Not Before: Jun 13 01:07:45 2019 GMT
+            Not After : May 28 01:07:45 2022 GMT
+        Subject: CN=myhome.97admin.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:f0:b3:59:6c:93:43:f0:65:9a:52:44:af:8c:fa:
+                    74:a5:3d:35:3a:37:13:04:aa:74:43:2e:67:fc:c7:
+                    16:85:e8:dd:3c:92:8c:ff:dd:4f:dc:0e:fa:93:19:
+                    2f:cf:77:88:98:2b:f5:7d:1c:ec:5b:52:d3:ab:e5:
+                    82:a6:56:fe:10:bd:05:12:a0:81:83:c7:53:9a:96:
+                    71:06:4b:1c:32:f9:76:f6:03:48:81:b1:88:2a:0b:
+                    a7:66:bf:50:fb:53:1d:41:52:86:b9:0a:b6:de:a1:
+                    c3:30:d4:30:94:3d:17:0d:cb:2a:21:30:06:48:d2:
+                    af:c4:34:77:d2:ba:ed:1c:d4:de:f9:9d:b6:d0:cf:
+                    49:6b:3b:0c:e4:60:d6:85:54:34:35:33:33:a4:b7:
+                    21:85:d2:cb:00:89:ed:a8:c1:b6:6d:07:de:d1:ee:
+                    67:f9:a9:1a:ba:70:35:19:5e:0a:c7:4d:28:ca:13:
+                    a6:ed:7b:74:72:1a:cc:77:9f:7c:ab:8f:66:d0:5a:
+                    25:dc:04:8a:11:8c:ea:3a:ed:f6:3e:2f:5f:7c:0e:
+                    06:68:5e:6b:4e:a6:78:2c:a9:ae:db:6c:f8:4a:8c:
+                    6b:e9:ce:43:ad:cb:dd:9a:31:6c:99:42:8f:5c:58:
+                    e2:6b:27:b9:b5:06:da:09:83:81:1c:7c:37:c7:54:
+                    8b:05
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                7D:5C:78:0F:F9:62:1F:31:A9:E6:BA:AA:A5:E0:71:B6:DA:F7:16:31
+            X509v3 Authority Key Identifier: 
+                keyid:68:27:E0:2A:D0:81:22:B9:57:5F:C0:24:83:B3:9C:0A:CF:35:F1:35
+                DirName:/CN=myhome.97admin.com
+                serial:31:F7:9A:66:DB:45:80:AA:00:78:EB:19:57:12:C5:28:2B:84:00:7B
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+            X509v3 Subject Alternative Name: 
+                DNS:myhome.97admin.com
+    Signature Algorithm: sha256WithRSAEncryption
+         96:f4:79:71:35:88:ae:71:f9:69:f4:af:58:cc:ca:e8:ea:a1:
+         0d:6d:51:bb:a5:f7:ec:1a:3c:3d:ef:c0:20:b4:85:12:c8:fc:
+         55:bb:75:28:a9:ce:9f:e0:e0:b9:2d:1b:7c:b1:a0:21:0f:6f:
+         0f:6a:83:59:75:6e:90:99:18:51:4e:91:26:7c:52:05:fb:47:
+         8a:37:0e:09:82:4a:2a:06:07:ea:80:fc:40:48:ee:cf:63:45:
+         0f:89:01:c5:bb:6d:56:ce:f8:2a:25:52:04:4b:f2:f0:f2:c6:
+         d1:71:8d:a2:72:42:9b:a8:52:5b:87:c9:0b:80:dd:20:23:df:
+         04:d5:20:ca:11:f3:5e:a0:e4:b6:50:9f:12:76:e4:f7:fc:96:
+         b4:f2:f8:5c:a2:be:55:df:4f:38:7c:0e:28:57:ed:5e:41:4f:
+         b6:33:74:d4:17:6f:f9:49:9a:1b:a1:ce:a2:d6:35:dc:7d:91:
+         6d:c7:38:19:a8:1f:5b:6c:29:6f:45:15:0f:4e:93:a4:57:bd:
+         b8:7b:fd:4c:03:24:bd:f4:c1:49:49:93:f5:a4:72:aa:55:8e:
+         4f:71:3b:f7:68:d2:2e:f8:d7:bf:d6:b3:b6:05:e5:67:29:e2:
+         3f:a8:f9:bc:a1:13:e2:a9:3f:c8:e9:d7:39:bb:43:26:c6:d5:
+         7d:0d:ad:26
+-----BEGIN CERTIFICATE-----
+MIIDjTCCAnWgAwIBAgIQIPVwUniYY1WyFzIULKtudzANBgkqhkiG9w0BAQsFADAd
+MRswGQYDVQQDDBJteWhvbWUuOTdhZG1pbi5jb20wHhcNMTkwNjEzMDEwNzQ1WhcN
+MjIwNTI4MDEwNzQ1WjAdMRswGQYDVQQDDBJteWhvbWUuOTdhZG1pbi5jb20wggEi
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDws1lsk0PwZZpSRK+M+nSlPTU6
+NxMEqnRDLmf8xxaF6N08koz/3U/cDvqTGS/Pd4iYK/V9HOxbUtOr5YKmVv4QvQUS
+oIGDx1OalnEGSxwy+Xb2A0iBsYgqC6dmv1D7Ux1BUoa5CrbeocMw1DCUPRcNyyoh
+MAZI0q/ENHfSuu0c1N75nbbQz0lrOwzkYNaFVDQ1MzOktyGF0ssAie2owbZtB97R
+7mf5qRq6cDUZXgrHTSjKE6bte3RyGsx3n3yrj2bQWiXcBIoRjOo67fY+L198DgZo
+XmtOpngsqa7bbPhKjGvpzkOty92aMWyZQo9cWOJrJ7m1BtoJg4EcfDfHVIsFAgMB
+AAGjgcgwgcUwCQYDVR0TBAIwADAdBgNVHQ4EFgQUfVx4D/liHzGp5rqqpeBxttr3
+FjEwWAYDVR0jBFEwT4AUaCfgKtCBIrlXX8Akg7OcCs818TWhIaQfMB0xGzAZBgNV
+BAMMEm15aG9tZS45N2FkbWluLmNvbYIUMfeaZttFgKoAeOsZVxLFKCuEAHswEwYD
+VR0lBAwwCgYIKwYBBQUHAwEwCwYDVR0PBAQDAgWgMB0GA1UdEQQWMBSCEm15aG9t
+ZS45N2FkbWluLmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAlvR5cTWIrnH5afSvWMzK
+6OqhDW1Ru6X37Bo8Pe/AILSFEsj8Vbt1KKnOn+DguS0bfLGgIQ9vD2qDWXVukJkY
+UU6RJnxSBftHijcOCYJKKgYH6oD8QEjuz2NFD4kBxbttVs74KiVSBEvy8PLG0XGN
+onJCm6hSW4fJC4DdICPfBNUgyhHzXqDktlCfEnbk9/yWtPL4XKK+Vd9POHwOKFft
+XkFPtjN01Bdv+UmaG6HOotY13H2Rbcc4GagfW2wpb0UVD06TpFe9uHv9TAMkvfTB
+SUmT9aRyqlWOT3E792jSLvjXv9aztgXlZyniP6j5vKET4qk/yOnXObtDJsbVfQ2t
+Jg==
+-----END CERTIFICATE-----

data/pki/certs_by_serial/762CD56A76D944004E9AAB851DB158C2.pem

@@ -0,0 +1,85 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            76:2c:d5:6a:76:d9:44:00:4e:9a:ab:85:1d:b1:58:c2
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=myhome.97admin.com
+        Validity
+            Not Before: Jun 13 01:08:51 2019 GMT
+            Not After : May 28 01:08:51 2022 GMT
+        Subject: CN=myhome
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:d9:42:2a:9a:91:2b:02:d2:92:8b:3d:ea:c6:28:
+                    26:41:7d:11:9c:af:f5:87:fc:71:d6:29:40:db:c1:
+                    c2:aa:1c:c1:8f:dc:ab:22:d5:4b:ff:e1:36:39:5a:
+                    db:f9:0e:a5:90:04:fb:62:9e:cc:30:3b:57:58:96:
+                    e1:4c:25:0d:77:84:8d:72:ed:25:60:79:69:01:7a:
+                    e9:12:93:ea:24:aa:2d:c2:0d:19:52:cc:37:28:8e:
+                    84:a6:0f:a0:8d:89:96:2d:5c:ed:30:94:eb:81:f5:
+                    c0:a3:a9:5b:15:42:98:62:73:7c:e8:32:b9:76:b6:
+                    02:fb:79:2b:a4:cc:7d:83:d3:49:07:8a:7f:a5:63:
+                    54:e6:0f:72:87:c6:27:c8:22:5d:b0:25:1e:3a:21:
+                    40:7f:f4:76:aa:c4:c6:b9:79:18:34:25:c0:3e:82:
+                    23:24:44:db:cf:67:96:b0:49:e9:82:5d:4c:fe:29:
+                    0d:1d:59:83:b6:a3:e8:a3:16:1c:ba:45:63:01:0e:
+                    9a:24:8e:e7:12:af:f5:fe:78:51:9d:ba:7c:e5:09:
+                    ef:f4:71:86:e4:e9:60:55:28:bb:97:ef:35:e5:22:
+                    76:58:1a:43:96:6c:58:b0:37:d2:31:da:31:1e:b4:
+                    29:11:f0:40:1c:ac:5e:7f:5e:39:96:85:7a:b0:f5:
+                    b4:87
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                49:5C:5A:E2:FF:A3:CF:C3:0C:5F:B7:EF:B7:97:B4:04:64:A6:D3:FB
+            X509v3 Authority Key Identifier: 
+                keyid:68:27:E0:2A:D0:81:22:B9:57:5F:C0:24:83:B3:9C:0A:CF:35:F1:35
+                DirName:/CN=myhome.97admin.com
+                serial:31:F7:9A:66:DB:45:80:AA:00:78:EB:19:57:12:C5:28:2B:84:00:7B
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         53:c2:32:85:44:5e:60:c8:57:8d:e4:98:4e:20:d6:95:2f:88:
+         21:d5:8e:05:bb:fd:5f:88:1b:ef:5e:bf:0d:89:5a:f8:f2:53:
+         29:a4:72:ee:5f:34:39:ad:b0:da:e6:af:03:a4:98:28:d3:58:
+         b7:cf:2d:76:b3:a6:56:59:18:e9:53:70:59:b5:d7:48:9c:d0:
+         a0:bb:1e:d0:28:ad:59:21:f8:51:fd:89:9d:71:48:94:d5:3b:
+         9d:3c:b4:5d:4d:6d:1d:1b:81:34:bb:2a:01:59:71:30:01:36:
+         52:ed:73:71:2f:63:3f:10:84:f2:b3:26:78:e1:24:82:a5:69:
+         b7:9c:a6:c2:1e:10:50:31:4b:af:0b:a0:55:25:66:d4:c3:d4:
+         72:eb:9a:80:d0:0e:1d:75:97:57:33:39:8a:44:4c:49:aa:14:
+         cb:a3:c4:6d:6d:14:f8:63:cb:0d:77:d2:6a:ac:68:10:60:de:
+         e6:3a:a0:40:a1:a7:22:03:81:b2:54:4d:d1:eb:a0:11:9e:6c:
+         c5:01:a6:6a:b6:26:37:c5:d1:cc:0a:f5:87:d0:2b:20:54:18:
+         d0:d4:34:1b:61:ba:79:af:09:29:da:01:66:1d:52:bb:2b:33:
+         b8:94:8d:46:7b:e8:de:8a:51:c0:9c:12:ac:7d:91:62:4e:5d:
+         55:f9:58:43
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/pki/crl.pem

@@ -0,0 +1,12 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----

data/pki/dh.pem

@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEAlEqy5NDnqEANhhsp3FHfDxAA0MgU1dDsGYFmgEm2gC8VhzCIIt9L
+crjW9mDqq5EbAGL9psqBYC/uyg/71ylPZsVcjhEfvS+9/lIuMK4Y/P7qNHBzIw/+
+Cez8tpwCNt0OCcudVUI3M/51Z4MU0tKFL6mr2kaX3pN93o0aQZN8+AS72duTP5RU
+TG85UNhb3eG2WwbUOq/yTKdJY1L4ZOS3N6ZQ8PDA+8T5UlvgUa8qXdvJ9jLAuEzJ
+B01jJ5b/+PWcEYzeEIQtWuRH4Dw4L4qGnrR1UoIRyvCaC4P2ZCt2BQj/IXRAPmGC
+u/bEOMHNlOsNtNC9GPUsEaZy6jz97i7U0wIBAg==
+-----END DH PARAMETERS-----

data/pki/index.txt

@@ -0,0 +1,2 @@
+V	220528010745Z		20F5705278986355B21732142CAB6E77	unknown	/CN=myhome.97admin.com
+V	220528010851Z		762CD56A76D944004E9AAB851DB158C2	unknown	/CN=myhome

data/pki/index.txt.attr

@@ -0,0 +1 @@
+unique_subject = yes

data/pki/index.txt.attr.old

@@ -0,0 +1 @@
+unique_subject = yes

data/pki/index.txt.old

@@ -0,0 +1 @@
+V	220528010745Z		20F5705278986355B21732142CAB6E77	unknown	/CN=myhome.97admin.com

data/pki/issued/myhome.97admin.com.crt

@@ -0,0 +1,88 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            20:f5:70:52:78:98:63:55:b2:17:32:14:2c:ab:6e:77
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=myhome.97admin.com
+        Validity
+            Not Before: Jun 13 01:07:45 2019 GMT
+            Not After : May 28 01:07:45 2022 GMT
+        Subject: CN=myhome.97admin.com
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:f0:b3:59:6c:93:43:f0:65:9a:52:44:af:8c:fa:
+                    74:a5:3d:35:3a:37:13:04:aa:74:43:2e:67:fc:c7:
+                    16:85:e8:dd:3c:92:8c:ff:dd:4f:dc:0e:fa:93:19:
+                    2f:cf:77:88:98:2b:f5:7d:1c:ec:5b:52:d3:ab:e5:
+                    82:a6:56:fe:10:bd:05:12:a0:81:83:c7:53:9a:96:
+                    71:06:4b:1c:32:f9:76:f6:03:48:81:b1:88:2a:0b:
+                    a7:66:bf:50:fb:53:1d:41:52:86:b9:0a:b6:de:a1:
+                    c3:30:d4:30:94:3d:17:0d:cb:2a:21:30:06:48:d2:
+                    af:c4:34:77:d2:ba:ed:1c:d4:de:f9:9d:b6:d0:cf:
+                    49:6b:3b:0c:e4:60:d6:85:54:34:35:33:33:a4:b7:
+                    21:85:d2:cb:00:89:ed:a8:c1:b6:6d:07:de:d1:ee:
+                    67:f9:a9:1a:ba:70:35:19:5e:0a:c7:4d:28:ca:13:
+                    a6:ed:7b:74:72:1a:cc:77:9f:7c:ab:8f:66:d0:5a:
+                    25:dc:04:8a:11:8c:ea:3a:ed:f6:3e:2f:5f:7c:0e:
+                    06:68:5e:6b:4e:a6:78:2c:a9:ae:db:6c:f8:4a:8c:
+                    6b:e9:ce:43:ad:cb:dd:9a:31:6c:99:42:8f:5c:58:
+                    e2:6b:27:b9:b5:06:da:09:83:81:1c:7c:37:c7:54:
+                    8b:05
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                7D:5C:78:0F:F9:62:1F:31:A9:E6:BA:AA:A5:E0:71:B6:DA:F7:16:31
+            X509v3 Authority Key Identifier: 
+                keyid:68:27:E0:2A:D0:81:22:B9:57:5F:C0:24:83:B3:9C:0A:CF:35:F1:35
+                DirName:/CN=myhome.97admin.com
+                serial:31:F7:9A:66:DB:45:80:AA:00:78:EB:19:57:12:C5:28:2B:84:00:7B
+
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication
+            X509v3 Key Usage: 
+                Digital Signature, Key Encipherment
+            X509v3 Subject Alternative Name: 
+                DNS:myhome.97admin.com
+    Signature Algorithm: sha256WithRSAEncryption
+         96:f4:79:71:35:88:ae:71:f9:69:f4:af:58:cc:ca:e8:ea:a1:
+         0d:6d:51:bb:a5:f7:ec:1a:3c:3d:ef:c0:20:b4:85:12:c8:fc:
+         55:bb:75:28:a9:ce:9f:e0:e0:b9:2d:1b:7c:b1:a0:21:0f:6f:
+         0f:6a:83:59:75:6e:90:99:18:51:4e:91:26:7c:52:05:fb:47:
+         8a:37:0e:09:82:4a:2a:06:07:ea:80:fc:40:48:ee:cf:63:45:
+         0f:89:01:c5:bb:6d:56:ce:f8:2a:25:52:04:4b:f2:f0:f2:c6:
+         d1:71:8d:a2:72:42:9b:a8:52:5b:87:c9:0b:80:dd:20:23:df:
+         04:d5:20:ca:11:f3:5e:a0:e4:b6:50:9f:12:76:e4:f7:fc:96:
+         b4:f2:f8:5c:a2:be:55:df:4f:38:7c:0e:28:57:ed:5e:41:4f:
+         b6:33:74:d4:17:6f:f9:49:9a:1b:a1:ce:a2:d6:35:dc:7d:91:
+         6d:c7:38:19:a8:1f:5b:6c:29:6f:45:15:0f:4e:93:a4:57:bd:
+         b8:7b:fd:4c:03:24:bd:f4:c1:49:49:93:f5:a4:72:aa:55:8e:
+         4f:71:3b:f7:68:d2:2e:f8:d7:bf:d6:b3:b6:05:e5:67:29:e2:
+         3f:a8:f9:bc:a1:13:e2:a9:3f:c8:e9:d7:39:bb:43:26:c6:d5:
+         7d:0d:ad:26
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/pki/issued/myhome.crt

@@ -0,0 +1,85 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            76:2c:d5:6a:76:d9:44:00:4e:9a:ab:85:1d:b1:58:c2
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=myhome.97admin.com
+        Validity
+            Not Before: Jun 13 01:08:51 2019 GMT
+            Not After : May 28 01:08:51 2022 GMT
+        Subject: CN=myhome
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:d9:42:2a:9a:91:2b:02:d2:92:8b:3d:ea:c6:28:
+                    26:41:7d:11:9c:af:f5:87:fc:71:d6:29:40:db:c1:
+                    c2:aa:1c:c1:8f:dc:ab:22:d5:4b:ff:e1:36:39:5a:
+                    db:f9:0e:a5:90:04:fb:62:9e:cc:30:3b:57:58:96:
+                    e1:4c:25:0d:77:84:8d:72:ed:25:60:79:69:01:7a:
+                    e9:12:93:ea:24:aa:2d:c2:0d:19:52:cc:37:28:8e:
+                    84:a6:0f:a0:8d:89:96:2d:5c:ed:30:94:eb:81:f5:
+                    c0:a3:a9:5b:15:42:98:62:73:7c:e8:32:b9:76:b6:
+                    02:fb:79:2b:a4:cc:7d:83:d3:49:07:8a:7f:a5:63:
+                    54:e6:0f:72:87:c6:27:c8:22:5d:b0:25:1e:3a:21:
+                    40:7f:f4:76:aa:c4:c6:b9:79:18:34:25:c0:3e:82:
+                    23:24:44:db:cf:67:96:b0:49:e9:82:5d:4c:fe:29:
+                    0d:1d:59:83:b6:a3:e8:a3:16:1c:ba:45:63:01:0e:
+                    9a:24:8e:e7:12:af:f5:fe:78:51:9d:ba:7c:e5:09:
+                    ef:f4:71:86:e4:e9:60:55:28:bb:97:ef:35:e5:22:
+                    76:58:1a:43:96:6c:58:b0:37:d2:31:da:31:1e:b4:
+                    29:11:f0:40:1c:ac:5e:7f:5e:39:96:85:7a:b0:f5:
+                    b4:87
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                49:5C:5A:E2:FF:A3:CF:C3:0C:5F:B7:EF:B7:97:B4:04:64:A6:D3:FB
+            X509v3 Authority Key Identifier: 
+                keyid:68:27:E0:2A:D0:81:22:B9:57:5F:C0:24:83:B3:9C:0A:CF:35:F1:35
+                DirName:/CN=myhome.97admin.com
+                serial:31:F7:9A:66:DB:45:80:AA:00:78:EB:19:57:12:C5:28:2B:84:00:7B
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         53:c2:32:85:44:5e:60:c8:57:8d:e4:98:4e:20:d6:95:2f:88:
+         21:d5:8e:05:bb:fd:5f:88:1b:ef:5e:bf:0d:89:5a:f8:f2:53:
+         29:a4:72:ee:5f:34:39:ad:b0:da:e6:af:03:a4:98:28:d3:58:
+         b7:cf:2d:76:b3:a6:56:59:18:e9:53:70:59:b5:d7:48:9c:d0:
+         a0:bb:1e:d0:28:ad:59:21:f8:51:fd:89:9d:71:48:94:d5:3b:
+         9d:3c:b4:5d:4d:6d:1d:1b:81:34:bb:2a:01:59:71:30:01:36:
+         52:ed:73:71:2f:63:3f:10:84:f2:b3:26:78:e1:24:82:a5:69:
+         b7:9c:a6:c2:1e:10:50:31:4b:af:0b:a0:55:25:66:d4:c3:d4:
+         72:eb:9a:80:d0:0e:1d:75:97:57:33:39:8a:44:4c:49:aa:14:
+         cb:a3:c4:6d:6d:14:f8:63:cb:0d:77:d2:6a:ac:68:10:60:de:
+         e6:3a:a0:40:a1:a7:22:03:81:b2:54:4d:d1:eb:a0:11:9e:6c:
+         c5:01:a6:6a:b6:26:37:c5:d1:cc:0a:f5:87:d0:2b:20:54:18:
+         d0:d4:34:1b:61:ba:79:af:09:29:da:01:66:1d:52:bb:2b:33:
+         b8:94:8d:46:7b:e8:de:8a:51:c0:9c:12:ac:7d:91:62:4e:5d:
+         55:f9:58:43
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/pki/private/ca.key

@@ -0,0 +1,30 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-256-CBC,18573305C67C5FB8E63F211B37A6E486
+
+sfim5sNr9Irj9Ejnyokb/X99NvFHWmsGBv9DfOvB8OX2zDSwx1rEOm94akxkXHT2
+7QYjI5dWduvKqH+Pi+LVygcq9zU91mNqZMP2FY/Rey5yY/LiWfg4rX/s+XHWlScq
+0LznHNS8dQHnS/vz+Q0i9rWmOKrDNykKPtHsm5tfLMslPXUolgVFTP5T/aRxzKNt
+svE1VjFi9FF67UuzMnWe9wZfNeZyJYaTFLgwSVIS+hDC/YyBuDBPV4/Fo6hhxyLF
+ecVMEDodryFevjDcPi8G7gjT/ZkZ8pFda7Ag1i2mm/GPUBDcnuiKRQAePqvO4om9
+H92MZH3MkkwVs+w8s+4JTCFUyQVoNBgPdlpN/sftFO03vHtmVVoOZGT3m8Kqly24
+PUbNtDPgev9hs6BfHf81GB5beouTl11sfQAnyaTWqalZZHe8jl4uuF6AzaC5DJUY
+4L+qE44t2kjsrTpkUPsMm/CEUwo1gRWkqwdFSsmdnTBxyvExrNep7lPywg+Mz2Rn
+9mcIW9F+UpowGtxhFRQTgSDxHqxko9EjQzRVVelG1cnn38xRE0NNd8A/hMvUyg7T
+cizHntAh5o4CJVj7FLsQMBI2F7KbfU4iJvgYQVImid2CYNmsAuhXeC4686fAu2v4
+TbvZpmFh6Y4Gp3uPUnVJ4R8OgJsyvv0koMAIiUxo50iI6MWA6Dz6VAgO7PhIsZEY
+uTd2gPPRA41G9L+Ms5gL9n5RiKLCrmG/P4utxf63B0ApqkW9xW4QCxTwtC+3tBA7
+U/BzNm8aznwWefGPrto11bXrliP8Awefq+GWSSBI1F0qSTvUPaStt9/tOJ4vv6g0
+AeEKZquhyiA8VtIVDPjQaTVLIZYr4UbICGUjYADmEwmXABRbiUDeDgvRW/ZJpoV5
+32XMx4fHSvDDBhaLeqMr0NI+Xzbh3tmjXjEdTBgkzEXn7H0s598jfzX6rYE25V0I
+u2Ifq7rHGj4SsMjM5oO4YqLPKH86zNkyd2pkwrh9kcmbn5FuH5C+yZ4ZX78/5xaR
+mzmnyb4r4OGPl7V6qBzwYFdWsNVZw/kO7gJkQ8+W8RH9visPfsSJOW1SqN2+r9G4
+bJTa+UJPEbZENi4vKQk6ZX6rBWlOdo2443RdhK/sjEPpcewWmeYOcPAvXiVPXASg
+ZVcvXlqy1EBue7oX2jo80cJEet8YPLscfztKmRwwA3CoMtXCOnb4GpUJenRHfXpm
+YalaWyLoinTeMPNCR0JGLi9HQxynIY9zfhMBosHZRhhm0tBdEn1sJ8UAjC6jY9kU
+Eg1laTCtdOBEK8yi7kOuq0eRAFwl+Q5C/vJrl68RtTiUX1ihWWK09aNLWGMu9EeJ
+WjGF+z9FigtpcXdFTAg/7Hmdcv4i3EmvUQylWN10ywX8pygwhAhuZOkH2HYr6w3x
+4ozobfA5Y8z5SewM0MQHyVrYrkudSdnG17lsA5zlvkHYX8erxeKhJbtppXw7ezwG
+/XIsLKOQRzVtKNJeDNSu86+XWyUkiBRc2mhGL6zNC24lc0TzncxsmZT1tBJVdVvS
+NrXNp5+PNjih+rSX8PHiHNmj2EMHgaxgqjBvSCMEh7JU3H0asnV6Aqqn0/SeZpdd
+-----END RSA PRIVATE KEY-----

data/pki/private/myhome.97admin.com.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

data/pki/private/myhome.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDZQiqakSsC0pKL
+PerGKCZBfRGcr/WH/HHWKUDbwcKqHMGP3Ksi1Uv/4TY5Wtv5DqWQBPtinswwO1dY
+luFMJQ13hI1y7SVgeWkBeukSk+okqi3CDRlSzDcojoSmD6CNiZYtXO0wlOuB9cCj
+qVsVQphic3zoMrl2tgL7eSukzH2D00kHin+lY1TmD3KHxifIIl2wJR46IUB/9Haq
+xMa5eRg0JcA+giMkRNvPZ5awSemCXUz+KQ0dWYO2o+ijFhy6RWMBDpokjucSr/X+
+eFGdunzlCe/0cYbk6WBVKLuX7zXlInZYGkOWbFiwN9Ix2jEetCkR8EAcrF5/XjmW
+hXqw9bSHAgMBAAECggEAK3GYtVnMAP98gE18Ue2bYMMSr4NcFLo9RTbwmkEPnRas
++giFTCzcyqkNP8DUdeQg5UCpyBm6+PYUzEk3ehN6suiVpGKZc8YzYjFiw+1CB9zj
+04btBmqBqSF+kvpS/5qApkeLwog048Lxp4hpB0JO2HkBhCkIfx18US70tDqT6rUJ
+r6qXdPR5IwBHJXzSSH5jz8CfRlXv1vAhhuKxSjvKd5LyJNzhj20KKjFJR9w5oGn4
+5XMnM21oQHZVW4T1djP+wQDvMPlc7oK1QZf2vAZnAL+oMgGSGup7v0nwq9wMWcPV
+6v4sSMc7sLAxt+9/23cxAkZ5cymkS26a+UZ5cG1UwQKBgQD+q/Bkowps7MoqWtWF
+5/qVXhXqh2LD8i8PP/ldeFuHSawVf0gz7p4Ewvgsx+2aVCT5dJ8cPWNFVOiP364j
+VqfHccdKY/udyO3WPXnHy5ydFyzKUMM67fjIWBZCsRowg4EvOIuZ6OF04R+66MeH
+I8dcAL3UTJneukPUQBbXipXqIQKBgQDaZEUWvW5LbyxGXQjcEBR59vsesw1xEec6
+i8i7QwI+PRknAoWzWYth6j2wZ6hAAl9yqsQfHwvp6sFO67gf7XY/FU+hIoe5QzOk
+zDPreV5gb6LMaYf3wuNqGz1U8UnfWe4EAYfrAJffBkgKT93dv1L/FgM2KJTYFYdZ
+/YqTxzTZpwKBgGsfiePbDPSaecNtJ+nGlYok5FUdk7bWdWMVxt/BU8bJf4AfZRCr
+K37XQCseAdzrzg28N31aeRpdx+FU9lvZBIQJYQnympFZRmnavBIFnKAbcnS7mhN8
+rCwhmWN+OYT0m+9v+pDH+6X9WCp35g37R810ZmUZv5OHiCaMus75dWvhAoGBALon
+lDig+f304qGLtfyW/E1GOKHfcAq8fwQJmO3+XVAeFm2JGdxZ7JRm7XSLtv/wxdlh
+NFFuzmHyyBn0lXspl4yIJtssKtLBNKk5otwKFWdQYU2qesq3Zc/RLkNUdWqcJmVl
+xKyNUec6XHflwjG9XwqugchNaSqTl08e7luvBx6rAoGBAIIu58CX1dLZBlAMVPkP
+Q2i4ds/5U1mJwuiV6PibPulHYGlPU7dcBhgX7HovJyitefkA6OrCbuiN6p4ACwTf
+0aARBBmz5aQlZn6PwzIppdnvh7S5QGkdyiqSncmo2tsjOOZPiOUY4hWYv8oRl1cI
+9silHgdozpboOQL4S6eG4R9J
+-----END PRIVATE KEY-----

data/pki/reqs/myhome.97admin.com.req

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

data/pki/reqs/myhome.req

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIICVjCCAT4CAQAwETEPMA0GA1UEAwwGbXlob21lMIIBIjANBgkqhkiG9w0BAQEF
+AAOCAQ8AMIIBCgKCAQEA2UIqmpErAtKSiz3qxigmQX0RnK/1h/xx1ilA28HCqhzB
+j9yrItVL/+E2OVrb+Q6lkAT7Yp7MMDtXWJbhTCUNd4SNcu0lYHlpAXrpEpPqJKot
+wg0ZUsw3KI6Epg+gjYmWLVztMJTrgfXAo6lbFUKYYnN86DK5drYC+3krpMx9g9NJ
+B4p/pWNU5g9yh8YnyCJdsCUeOiFAf/R2qsTGuXkYNCXAPoIjJETbz2eWsEnpgl1M
+/ikNHVmDtqPooxYcukVjAQ6aJI7nEq/1/nhRnbp85Qnv9HGG5OlgVSi7l+815SJ2
+WBpDlmxYsDfSMdoxHrQpEfBAHKxef145loV6sPW0hwIDAQABoAAwDQYJKoZIhvcN
+AQELBQADggEBANcoH4w+HOIIo1eV4j1x0HWBOzSoMO67AprcpN5RgeovihjLY+lf
+5cuEbMKpYq2PqtsiQM0bWa4PZHBsBVhh7xAXLhYrYUjZMzPGP8tn9agLV15ivHoe
+4WaSqT+Xx5VcKKU/QuhwekEroFi31VFSI1PzwbnnHTifpbBM88ahTpy0K86E7c6z
+R3naspfyVb4Mxbahu+Kx1OpGyDx7g6q9K+QiaqV37LO0F714HIpfD6kl1hVw7kzG
+qBVojXuT+VJQQjmhA5Vo3j5vLyV1qllJicY/GBfGTaaJnk/yQHI3uz87KosXeJuw
+4iuFkh7rJPTsfx6Y9DLQ4q0zf4Cyv5lEkPw=
+-----END CERTIFICATE REQUEST-----

data/pki/serial

@@ -0,0 +1 @@
+762CD56A76D944004E9AAB851DB158C3

data/pki/serial.old

@@ -0,0 +1 @@
+762cd56a76d944004e9aab851db158c2

data/pki/ta.key

@@ -0,0 +1,21 @@
+#
+# 2048 bit OpenVPN static key
+#
+-----BEGIN OpenVPN Static key V1-----
+4cefb391f3c543288ac03911a657cce2
+4d92f467933622bf6c9211593bc36479
+18806926ca20a114e42bc177ab33fb2c
+49f9cb0384e1a640e8371ca0317b5722
+4dcf7e1294de85596f6481ca006cab69
+df2d114f1f36b8781c61880fe8fbefcb
+518cb4ebe12f48c97d26141a09fd1ca9
+18207a90f55c77435ba824f36d38250b
+e54591744d3209ad7d999c45a3eafb09
+f0be737454714fe889859664f1fa31d7
+78b195dda7aa5429aff8867fe1d4bc85
+4cbec39f62ed8e7d0a8e2d9f64461e31
+74168684cfac6055e6f4b8e30f4a392a
+5ea5e4f50cca046d786197166db02bd2
+a4808d60a51475d3ed26812d9c57ee6a
+a3efe5835c48eb3eb0a3c1d9a8a06082
+-----END OpenVPN Static key V1-----

docker-compose.yml

@@ -0,0 +1,13 @@
+version: "3"
+services:
+  openvpn:
+    image: kylemanna/openvpn
+    container_name: openvpn
+    cap_add:
+     - NET_ADMIN
+    ports:
+      - "1194:1194/udp"
+    volumes:
+      - ./data:/etc/openvpn
+    restart: always
+

myhome.ovpn

@@ -0,0 +1,110 @@
+
+client
+nobind
+dev tun
+remote-cert-tls server
+
+remote myhome.97admin.com 1194 udp
+
+<key>
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDZQiqakSsC0pKL
+PerGKCZBfRGcr/WH/HHWKUDbwcKqHMGP3Ksi1Uv/4TY5Wtv5DqWQBPtinswwO1dY
+luFMJQ13hI1y7SVgeWkBeukSk+okqi3CDRlSzDcojoSmD6CNiZYtXO0wlOuB9cCj
+qVsVQphic3zoMrl2tgL7eSukzH2D00kHin+lY1TmD3KHxifIIl2wJR46IUB/9Haq
+xMa5eRg0JcA+giMkRNvPZ5awSemCXUz+KQ0dWYO2o+ijFhy6RWMBDpokjucSr/X+
+eFGdunzlCe/0cYbk6WBVKLuX7zXlInZYGkOWbFiwN9Ix2jEetCkR8EAcrF5/XjmW
+hXqw9bSHAgMBAAECggEAK3GYtVnMAP98gE18Ue2bYMMSr4NcFLo9RTbwmkEPnRas
++giFTCzcyqkNP8DUdeQg5UCpyBm6+PYUzEk3ehN6suiVpGKZc8YzYjFiw+1CB9zj
+04btBmqBqSF+kvpS/5qApkeLwog048Lxp4hpB0JO2HkBhCkIfx18US70tDqT6rUJ
+r6qXdPR5IwBHJXzSSH5jz8CfRlXv1vAhhuKxSjvKd5LyJNzhj20KKjFJR9w5oGn4
+5XMnM21oQHZVW4T1djP+wQDvMPlc7oK1QZf2vAZnAL+oMgGSGup7v0nwq9wMWcPV
+6v4sSMc7sLAxt+9/23cxAkZ5cymkS26a+UZ5cG1UwQKBgQD+q/Bkowps7MoqWtWF
+5/qVXhXqh2LD8i8PP/ldeFuHSawVf0gz7p4Ewvgsx+2aVCT5dJ8cPWNFVOiP364j
+VqfHccdKY/udyO3WPXnHy5ydFyzKUMM67fjIWBZCsRowg4EvOIuZ6OF04R+66MeH
+I8dcAL3UTJneukPUQBbXipXqIQKBgQDaZEUWvW5LbyxGXQjcEBR59vsesw1xEec6
+i8i7QwI+PRknAoWzWYth6j2wZ6hAAl9yqsQfHwvp6sFO67gf7XY/FU+hIoe5QzOk
+zDPreV5gb6LMaYf3wuNqGz1U8UnfWe4EAYfrAJffBkgKT93dv1L/FgM2KJTYFYdZ
+/YqTxzTZpwKBgGsfiePbDPSaecNtJ+nGlYok5FUdk7bWdWMVxt/BU8bJf4AfZRCr
+K37XQCseAdzrzg28N31aeRpdx+FU9lvZBIQJYQnympFZRmnavBIFnKAbcnS7mhN8
+rCwhmWN+OYT0m+9v+pDH+6X9WCp35g37R810ZmUZv5OHiCaMus75dWvhAoGBALon
+lDig+f304qGLtfyW/E1GOKHfcAq8fwQJmO3+XVAeFm2JGdxZ7JRm7XSLtv/wxdlh
+NFFuzmHyyBn0lXspl4yIJtssKtLBNKk5otwKFWdQYU2qesq3Zc/RLkNUdWqcJmVl
+xKyNUec6XHflwjG9XwqugchNaSqTl08e7luvBx6rAoGBAIIu58CX1dLZBlAMVPkP
+Q2i4ds/5U1mJwuiV6PibPulHYGlPU7dcBhgX7HovJyitefkA6OrCbuiN6p4ACwTf
+0aARBBmz5aQlZn6PwzIppdnvh7S5QGkdyiqSncmo2tsjOOZPiOUY4hWYv8oRl1cI
+9silHgdozpboOQL4S6eG4R9J
+-----END PRIVATE KEY-----
+</key>
+<cert>
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+</cert>
+<ca>
+-----BEGIN CERTIFICATE-----
+MIIDYDCCAkigAwIBAgIUMfeaZttFgKoAeOsZVxLFKCuEAHswDQYJKoZIhvcNAQEL
+BQAwHTEbMBkGA1UEAwwSbXlob21lLjk3YWRtaW4uY29tMB4XDTE5MDYxMzAxMDMx
+MloXDTI5MDYxMDAxMDMxMlowHTEbMBkGA1UEAwwSbXlob21lLjk3YWRtaW4uY29t
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbBekqcA3YszGn6eJf+P
+lxSQgNyeRx5x0ejGe9iHAeSVaIP2qhO5OH9JsK4izH3X3K9mvk6kY2fvb/R/GZck
+BPeIUemY763hLh3vr/thd3ePMibCaYvusnDzqmeDN2PMvscxHkyj7arCdMji6fBR
+qrTgz815d0KQPr3tsKqGX0hIjqMD/JQah+1nZDFp1l3rG4rGcREw/eI+TIc2Heo0
+t4mvyPeg/i2nRTrEUG9b/goUuy9Am4TBJA7EI3AiXAsGH+vTMVwR899E4ApajyBb
+rOPhKpyKNl664K1YFCzO6FHVO8siO0X+CvGUqJ1r428cU4Ou/t9EtaIDsaMtIOeV
+1wIDAQABo4GXMIGUMB0GA1UdDgQWBBRoJ+Aq0IEiuVdfwCSDs5wKzzXxNTBYBgNV
+HSMEUTBPgBRoJ+Aq0IEiuVdfwCSDs5wKzzXxNaEhpB8wHTEbMBkGA1UEAwwSbXlo
+b21lLjk3YWRtaW4uY29tghQx95pm20WAqgB46xlXEsUoK4QAezAMBgNVHRMEBTAD
+AQH/MAsGA1UdDwQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEAQBxdFau4MQS9pqcy
+zcqdwtfcyERweizNlXSxFolxevvEXSEED0BnrIO/vjZ2N9jxLItubYUODtycwUtE
+2hvqoiFDdS4lvFl7wi4YO7JslpUrfGqv357WOl/6xml8e9QHlerEF/oLfJJMZFif
+QPNzMkIWIKiabYgL9Fhgn3pcR4qXndZzETdSsX7X19QWIiUfnUVFRdDHFFg5Lzdt
+c3KCqfHOFiRnZLjCcpyFgyc1mgOIhzHVUgeK8KqCZku60AahW6Dv5ATbmJ53WIeU
+SjhmK8jIcfBU2VHpKG5ixzQLB7x+6RaXCJXXVurLMZ/uFqGju5AvvHv1h63WpzR6
+dxojuw==
+-----END CERTIFICATE-----
+</ca>
+key-direction 1
+<tls-auth>
+#
+# 2048 bit OpenVPN static key
+#
+-----BEGIN OpenVPN Static key V1-----
+4cefb391f3c543288ac03911a657cce2
+4d92f467933622bf6c9211593bc36479
+18806926ca20a114e42bc177ab33fb2c
+49f9cb0384e1a640e8371ca0317b5722
+4dcf7e1294de85596f6481ca006cab69
+df2d114f1f36b8781c61880fe8fbefcb
+518cb4ebe12f48c97d26141a09fd1ca9
+18207a90f55c77435ba824f36d38250b
+e54591744d3209ad7d999c45a3eafb09
+f0be737454714fe889859664f1fa31d7
+78b195dda7aa5429aff8867fe1d4bc85
+4cbec39f62ed8e7d0a8e2d9f64461e31
+74168684cfac6055e6f4b8e30f4a392a
+5ea5e4f50cca046d786197166db02bd2
+a4808d60a51475d3ed26812d9c57ee6a
+a3efe5835c48eb3eb0a3c1d9a8a06082
+-----END OpenVPN Static key V1-----
+</tls-auth>
+
+redirect-gateway def1