It you want it works as vpn you have to use NAT, i.e. you cannot use as bridge. Doing this may disable your access to the PI via local network.
It can be done using static router etc but I don’t know exactly how to do it.