1. Init RSA

cd /usr/share/easy-rsa
./easyrsa clean-all
./easyrsa init-pki
./easyrsa build-ca nopass
./easyrsa build-server-full server nopass
./easyrsa gen-dh

2. Create user certs

cd /usr/share/easy-rsa
./easyrsa build-client-full USERNAME nopass

3. Configure server

Preconfigured example is here:

nano /data/openvpn.conf

4. Enable routing protocols

nano /data/frr/daemons

5. Enable services autostart

rc-update add frr
rc-update add openvpn

6. Start services

rc-service frr start
rc-service openvpn start

7. Configure router

vtysh

8. Get client config file

build-client-config USERNAME