resolv-retry infinite
nobind
persist-key
-persist-tun
+# persist-tun was here, but if the vpn goes down this makes
+# the whole thing get stuck if the vpn is our default route
+# unless we set a special route out just for the vpn.
+# todo: investigate.
ca ca-$name.crt
cert $name.crt
key $name.key