Here’s an idea. Use a mikrotik router board. They are super cheap and support VPN natively. I use wireguard but it should also support openVPN as well. Maybe more I’m not sure. The small hap series are super cheap and works great.