A
https://github.com/Nyr/openvpn-install
In /etc/openvpn/server.conf add:
client-config-dir client-config/
Also check server network (`server 10.8.0.0 255.255.255.0`).
In
/etc/openvpn/client-config/{cert-subject-from-ovpn-file}
reserve address:
ifconfig-push 10.8.0.11 255.0.0.0
In
/etc/rc.local
forward port 80 and 443:
iptables -t nat -A PREROUTING -p tcp -i ens18 --dport 80 -j DNAT --to-destination 10.8.0.11:80
iptables -A FORWARD -p tcp -d 10.8.0.11 --dport 80 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -i ens18 --dport 443 -j DNAT --to-destination 10.8.0.11:443
iptables -A FORWARD -p tcp -d 10.8.0.11 --dport 443 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
Reboot.