Add ccd-exclusive as default option in server config to go with

ALLOCATEIP=yes which always creates client config files

debian/postinst

@@ -175,7 +175,9 @@ crl-verify /etc/openvpn-server/ca.crl
 remote-cert-tls client
 cipher AES-256-CBC
 
+# Add a client config dir and don't allow connections if a client doesn't have a client config file
 client-config-dir /etc/openvpn/ccd
+ccd-exclusive
 
 $SERVERLINE