but there are no state secrets or critical info that he keeps.
No, but hackers can easily use it to control the server, use it as a spam relay or in DoS attacks.
It isn't just about the data.
The pptp code has been removed and there is no way to restore it.
I was about to say Wireguard as it is easy but just checked the wiki and we need to check the status of bug 11771.
OpenVPN routed works fine. Just takes a bit of time to get used to certs & setups. PHPki generates certs.
I need to paste some sample ovpn files on the wiki page. You don't actually need to generate a pkcs file - you can paste the certs into the opvn file.