From a0217f2a9f311b26e102a9161b978e4508686479 Mon Sep 17 00:00:00 2001
From: Philipp Menge <pmenge@me.com>
Date: Sat, 28 Nov 2015 18:50:02 +0100
Subject: [PATCH] drop privileges

---
 openvpn-install.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/openvpn-install.sh b/openvpn-install.sh
index 1c48b6d..c064005 100644
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -52,7 +52,7 @@ newclient () {
 	echo "</key>" >> ~/$1.ovpn
 	echo "<tls-auth>" >> ~/$1.ovpn
 	cat /etc/openvpn/easy-rsa/ta.key >> ~/$1.ovpn
-	echo "</tls-auth>"
+	echo "</tls-auth>" >> ~/$1.ovpn
 }
 
 
@@ -224,6 +224,8 @@ else
 	cp ta.key pki/ca.crt pki/private/ca.key pki/dh.pem pki/issued/server.crt pki/private/server.key /etc/openvpn
 	# Generate server.conf
 	echo "port $PORT
+user nobody
+group nobody
 proto udp
 dev tun
 sndbuf 0