For me it had to be run with --privileged and --network=host
For some reason I also had to do “ip r add {remote IP}/{mask} via {the public IP assigned by the vpn}”. A friend who knows more about networking found that out for me though, so I’m not entirely sure about it.