Update to a new certificate
Rename bastion to vpn
We no longer need or want easy-rsa installed