Hi @shenek ,
would you mind tell us why you do not want make redirect-gateway def1 by default? I prefer to tunnel whole network traffic throught VPN as well.
Moreover as 3ullit point out to sweet32, please let’s change default server.conf and client.ovpn to:
cipher AES-256-CBC
auth SHA384
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA256