From 183fce0c82eabfc2d19572ac2c06ccaca60a9401 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=94=D0=BC=D0=B8=D1=82=D1=80=D0=B8=D0=B9=20=D0=91=D0=B0?=
 =?UTF-8?q?=D0=B4=D0=BE=D0=B2=D1=81=D0=BA=D0=B8=D0=B9?=
 <dbadovsky@gmail.com>
Date: Tue, 26 May 2026 13:12:56 +0000
Subject: [PATCH] Update README.md

---
 README.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/README.md b/README.md
index 11da832..b5e4715 100644
--- a/README.md
+++ b/README.md
@@ -59,6 +59,10 @@ easyrsa --batch build-server-full server nopass
 ```
 cp pki/ca.crt pki/issued/server.crt pki/private/server.key /usr/local/etc/openvpn/
 ```
+И создадим tls-ключ для шифрования хендшейка:
+```
+openvpn --genkey secret /usr/local/etc/openvpn/tls-crypt.key
+```
 ## Настройка сервера
 Создаём конфиг сервера:
 ```
@@ -78,6 +82,7 @@ data-ciphers AES-128-GCM
 ca /usr/local/etc/openvpn/ca.crt
 cert /usr/local/etc/openvpn/server.crt
 key /usr/local/etc/openvpn/server.key
+tls-crypt /usr/local/etc/openvpn/tls-crypt.key
 dh none
 keepalive 10 120
 explicit-exit-notify 1