as girish says, it allows specific rules per client.
The main rule I am needing is the ability to connect 2 lans on opposite sides of the vpn server.
192.168.1.x (Router A) 10.8.0.2 ----> VPN server <----- 10.8.0.3 (Router B) 192.168.2.x
I need the 192.168.1.x network to be able to talk to the 192.168.2.x networks. This is accomplished by pushing routes and using iroutes defined in a client CCD file.
I can and have done this with a non-cloudron openvpn installation, but it would be nice to have a solution that was much quicker to deploy.