This script is really nice: https://github.com/Nyr/openvpn-install

It sets up systemd and iptables and generates all certs and keys and wraps them up into tidy, per-client .ovpn files