Thanks so much for posting back with what you discovered!

I've opened a new issue on our tracker to include the init script to create the /dev/tun device!

I wonder if it's also worth considering how we could add your additional IPTable rules too?! TBH, I just haven't played with OpenVPN enough to be sure... If you have any thoughts on it, I'd love to hear.