$FileCreateMode 0640
$FileOwner root
$FileGroup adm

if $programname startswith 'ovpn' then /var/log/openvpn.log
& ~