# Example for a system wide configuration file
# A system wide configuration file is optional.
# If it exists, it usually defines a default account.
# This allows msmtp to be used like /usr/sbin/sendmail.
account default
# The SMTP smarthost
host smtp.gmail.com
# Use TLS on port 465
port 587
tls on
tls_starttls off
# Construct envelope-from addresses of the form "user@oursite.example"
from username@gmail.com
auth on
user username
password PASSWORD
# Syslog logging with facility LOG_MAIL instead of the default LOG_USER
syslog LOG_MAIL
さくらメールの場合の例は以下です。
# Example for a system wide configuration file
# A system wide configuration file is optional.
# If it exists, it usually defines a default account.
# This allows msmtp to be used like /usr/sbin/sendmail.
account default
# The SMTP smarthost
host example.sakura.ne.jp
# Use TLS on port 465
port 587
tls on
tls_starttls on
auth on
user router-admin@hogepiyo.com
password myPasswordHere
# Construct envelope-from addresses of the form "user@oursite.example"
from router-admin@hogepiyo.com
# Syslog logging with facility LOG_MAIL instead of the default LOG_USER
syslog LOG_MAIL
export EASYRSA_PKI="${OVPN_PKI}"
export EASYRSA_REQ_CN="ovpnca"
export EASYRSA_BATCH="1"
export EASYRSA_CERT_EXPIRE="3650" # Increases the client cert expiry from the default of 825 days to match the CA expiry
export EASYRSA_KEY_SIZE="4096" # Increase key length
以下のコマンドで PKI とサーバー用の鍵を作成します。
# Remove and re-initialize PKI directory
easyrsa init-pki
# Generate DH parameters
easyrsa gen-dh
# Create a new CA
easyrsa build-ca nopass
# Generate server keys and certificate
easyrsa build-server-full server nopass
openvpn --genkey tls-crypt-v2-server ${EASYRSA_PKI}/private/server.pem
