although this HOWTO will tutorial you in establishing a scalable customer/server VPN working with an X509 PKI (general public critical infrastruction making use of certificates and private keys), this might be overkill https://zaynovtt730845.bleepblogs.com/29319405/the-smart-trick-of-whitelabel-vpn-that-nobody-is-discussing