OpenVPN in Unifi

config.gateway.json

"openvpn": {
  "vtun0": {
    "encryption": "aes256",
    "hash": "sha256",
    "mode": "server",
    "openvpn-option": [
      "--keepalive 8 30",
      "--comp-lzo",
      "--duplicate-cn",
      "--user nobody --group nogroup",
      "--verb 1",
      "--proto udp6",
      "--port 1194",
      "--persist-key",
      "--persist-tun",
      "--tls-auth /config/auth/keys/ta.key 0",
      "--push redirect-gateway def1 bypass-dhcp",
      "--server-ipv6 2001:xxxx:xxxx::3::/64",
      "--push route-ipv6 ::/0"
    ],
    "server": {
      "name-server": [
        "10.0.1.1"
      ],
      "push-route": [
        "10.0.1.0/24"
      ],
      "subnet": "10.0.3.0/24"
    },
    "tls": {
      "ca-cert-file": "/config/auth/keys/ca.crt",
      "cert-file": "/config/auth/keys/OpenVPN.crt",
      "dh-file": "/config/auth/keys/dh2048.pem",
      "key-file": "/config/auth/keys/OpenVPN.key"
    }
  }
}