OPENVPN Net2Net Basics Request Assist

You should read this:

I think firewall.local would be the right place for this.

It doesn’t really. This is mainly a VPN server, not a client.
Have you tried the first method mentioned on this wiki page? wiki.ipfire.org - OpenVPN alternative configurations