VPN-тунель внутрь traefik

У меня есть docker-compose с reverse-proxy traefik1.7 к нему. Я хочу внутрь сети организовать openVPN тунель. Как это можно сделать.

Traefik.toml

# traefik.toml
################################################################
# Global configuration
################################################################

logLevel = "DEBUG"

# Entrypoints to be used by frontends that do not specify any entrypoint.
# Each frontend can specify its own entrypoints.
defaultEntryPoints = ["http", "https"]

# Entrypoints, http and https
[entryPoints]
  # http should be redirected to https
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
  # https is the default
  [entryPoints.https]
  address = ":443"
    [entryPoints.https.tls]

[acme]
email = "[email protected]"
storageFile = "/etc/traefik/acme/acme.json"
entryPoint = "https"
onDemand = false
OnHostRule = true
  [acme.httpChallenge]
  entryPoint = "http"


[docker]
endpoint = "unix:///var/run/docker.sock"
watch = true
exposedbydefault = false

docker-compose.yml

version: '3'

networks:
  web:
    external: true


services:
    reverse-proxy:
        image: traefik:1.7.24
        volumes:
            - /var/run/docker.sock:/var/run/docker.sock:ro
            - ./traefik/traefik.toml:/etc/traefik/traefik.toml:ro
            - ./traefik/acme:/etc/traefik/acme
        networks:
            - web
        ports:
            - "80:80"
            - "443:443"
            # Prod
            - "17247:17247" # user-statistics
            - "51920:51920" # message-service
            # Stage
            - "18585:18585" # user-statistics
            - "18258:18258" # message-service
    grader-v2-message-service:
        env_file:
            - stage.env
        image: "***/grader-v2-message-service:0.1.4"
        restart: always
        networks:
            - web
        labels:
            - "traefik.enable=true"
            - "traefik.backend=grader-v2-message-service-stage"
            - "traefik.port=18258"
            - "traefik.docker.network=web"
    grader-v2-storage:
        env_file:
            - stage.env
        image: "***/grader-v2-storage:1.27.0"
        restart: always
        networks:
            - web
        labels:
            - "traefik.enable=true"
            - "traefik.backend=grader-v2-storage-stage"
            - "traefik.port=52052"
            - "traefik.docker.network=web"
    grader-v2-user-statistics:
        env_file:
            - stage.env
        image: "***/grader-v2-user-statistics:0.2.1"
        restart: always
        networks:
            - web
        labels:
            - "traefik.enable=true"
            - "traefik.backend=grader-v2-user-statistics-stage"
            - "traefik.frontend.rule=Host:***"
            - "traefik.port=18585"
            - "traefik.docker.network=web"
    grader-v2-student-ui-stage:
        env_file:
            - stage.env
        image: "***/grader-v2-student-ui:1.30.6"
        restart: always
        networks:
            - web
        labels:
            - "traefik.enable=true"
            - "traefik.backend=grader-v2-student-ui-stage"
            - "traefik.frontend.rule=Host:***"
            - "traefik.port=12939"
            - "traefik.docker.network=web"