$ nmcli connection export Software\ Heritage 
client
remote 'louvre.softwareheritage.org'
ca '/home/zack/swh/vpn/softwareheritage-ca.crt'
cert '/home/zack/swh/vpn/softwareheritage.crt'
key '/home/zack/swh/vpn/softwareheritage.key'
compress lzo
dev tun
proto udp
remote-cert-tls server
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nm-openvpn
group nm-openvpn