TunnelDigger takes the approach of having a central administration directory somewhere, not necessarily on a host where OpenVPN actually runs. It creates a .deb for every OpenVPN-connected host under this administration containing all relevant config files, keys, and certificates (be careful how you transport these to the host to use them!). The hosts using these configurations will also need the tunneldigger-utils package.

For an alternate approach, see the carpaltunnel package.