This way I just need to install sysmocom-openvpn-config and copy a matching key to the device for the VPN config. The configuration file is marked as a CONFFILE, this means that modifications to it will not be lost during upgrade.
Holger Hans Peter Freyther