Some PIA gateways allow port forwarding.

Generally users achieve this via the PIA client on their local machine, however it is possible to do manually:

Before moving to Untangle, I had it working successfully on a PfSense box:

Any thoughts on how best to achieve this on NG Firewall now we have the Tunnel VPN application?