It came with the ovpn config file I got from Proton, and I can reach it when the openvpn service is down. Not sure why I can’t hit it (or anything else) with the service up but I think there’s something wrong with how the service is capturing traffic from the wan interface. Not really sure but that’s where my head is at ATM.