On separate machine Ive setup some www server based on Debian 8 for testing purposes. It has also samba and GIT server installed. Today we got public ip from our ISP and i redirected port :80 to our LAN machine server. LAN SERVER [*.*.0.200:8010] <= INSIDE ROUTER [*.*.1.100] (:80 redirection to *.0.200:8010 ) <= OUTSIDE ROUTER(:80 redirection to *.*.1.100:80)Our project already has some authorisation and login mechanisms applied but all is on very early state (pre alpha) so we affraid about security. But server need to be exposed for our boss (for progress tracking) and people which work in offices in another city (testers) who are the targets of this project.So we tought about setup VPN tunnel for outside users to our LAN Server. Already read some articles like this one...https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-debian-8And now we (me, because i will have to configure it) are thinking about setup redirections this wayLAN SERVER [*.*.0.200:8010] <= VPN Server [*.*.1.210] (:80 redirection to *.0.200:8010 ) <= INSIDE ROUTER [*.*.1.100] (:80 redirection to *.0.210:80 ) <= OUTSIDE ROUTER(:80 redirection to *.*.1.100:80)where VPN server will be either separate machine or virtual machine with its own IP set on LAN SERVER machine. All outside traffic will have to pass trough VPN but LAN users can directly access server by 0.200:8010 address.What do you think about this idea? 
Securing LAN www server with OpenVPN?
openvpn;vpn;webserver;lan
Ok my idea was wrong because i havent fully undestand how VPNs work. Especially the fact that OpenVPN creates its own interface so there is no need to create another one. I went trough all tutorial like it was written, only changing minor things and it worked.I reccomend Hak5 video which is very similar , or (strangely) the same as tutorial above but little more detailed.https://www.youtube.com/watch?v=XcsQdtsCS1UADVICE. In my opinion it is better after installation to begin with generating certificate and server key and then configure server and firewall because then you have better understanding of server.conf file.