Sys-net or sys-firewall

I recommend to setup WireGuard instead OpenVPN, you can follow Wireguard VPN setup

The guide could also apply to OpenVPN setup anyway, only the configuration import will differ.