Although I do agree that knots is great, it would be nice if upnp worked over openvpn. I tried and achieved partial success, more details in this bug report.