My routers are connected to a number of tunnels:
The main tunnel runs continously controlled by systemd (systemd-networkd.service). The backup tunnel is normally stopped and is only started when needed (openvpn-server@server.service)
The description of the individual tunnels is found by following the links above