vpn: add generic openvpn profile, move up script into base resource.