---
version: "3.5"
services:
  openvpn:
    build: .
    cap_add:
      - NET_ADMIN
    labels:
      - traefik.enable=false
    environment:
      OPENVPN_MODE: client
      OPENVPN_DEV: tun
      OPENVPN_REMOTE: ${OPENVPN_REMOTE}
      OPENVPN_NOBIND: "yes"
      OPENVPN_COMP_LZO: "yes"
      OPENVPN_NS_CERT_TYPE: server
      OPENVPN_TLS_CLIENT: "yes"
      # OPENVPN_TA: ${OPENVPN_TA}
      # OPENVPN_TA_DIR: "1"
      OPENVPN_CA: ${OPENVPN_CA}
      OPENVPN_KEY: ${OPENVPN_KEY}
      OPENVPN_CERT: ${OPENVPN_CERT}
      OPENVPN_VERB: 3
    volumes:
      - /dev/net/tun:/dev/net/tun