If anyone's got any good suggestions on how to do VPNs with 2FA on an OpenBSD gateway for non-technical users to access (iOS, Android, Windows clients) I'd love to hear them.
I could bodge something together with openvpn and TOTP but it doesn't exactly spark joy.