Instead of using redirect-gateway-ipv6, just route the current allocated IPv6 public internet over the VPN (2000::/3)