openvpn - Help to access multiple servers on my local network, remotely (CGNAT)

[ChazAndrews]

T-Mobile 5G internet: Puts my network behind CGNAT

Local Network 192.168.1.x Provided by OPNsense as my network router. 

I'm trying to access multiple servers on my local network, remotely.

At the moment my servers are EACH setup to create a openvpn client connection to my VPN provider
 Then I use ddclient to update a DNS entry on cloudflare.
 Now I can point to serverXXX.myHost.net and connect with a given server.
 
But I would like to be able to access IOT devices on the LAN that do not support vpn connections natively
 
Is this something I can acomplish with OPNsense from behind CGNAT?
My VPN provider allows limited port forwarding (up to 20 ports)

From within OPNsense I have been able to create a openvpn client that connects to my VPN provider that I set up as
  Peer to peer
  UDP
  TUN
  On the WAN interface
 
But when I enable the client, it connects, but I no longer get internet access(local traffic unaffected) for ANY machine on the network.
Disabling client brings connectivity back.

So in short, how can set up OPNsense to allow me to connect to a bunch of IOT devices on my local network; remotely? When the local network is behind CGNAT.

Tools available - T-Mobile network(CGNAT), OPNsense, remote openvpn server, ddclient, an available internal server (maybe useful for proxies), a couple of usable top level domain names.
 
This is either really simple and I'm just not getting it, or this is more complex than I hoped.
 
I think part of my issue is that this will need stacked solutions and I'm missing key setups along the way.
And finally, no I cannot change providers.

Thanks for any input!