I'm hosting this wiki on an LXC container on this SBC. I don't have an external IP so its connected via OpenVPN to my VPS and reverse proxied. I had to add the following to the config in order to allow OpenVPN to create the tun interface.
# /dev/net/tun lxc.cgroup2.devices.allow = c 10:200 rwm lxc.mount.entry = /dev/net/tun dev/net/tun none bind,create=file
Some references: