Encrypt all the things!

Asked on the raspberry pi thread but figure this might be the place to ask. I've set up a raspberry pi with dietpi, something like a lightweight os and have sonarr, deluge etc installed, NAS folders mounted and openVPN my installed. Downloaded config files from surfshark which consists of a zip of loads of .ovpn files. Now I assume I just replace the config file on the pi with the relevant one of those for the server I want to use?

Dietpi instructions just say this:

DietPi will generate the client config file and place it here:
/boot/DietPi_OpenVPN_Client.ovpn.
Simply power off and plug the SD card into your target system to obtain the file from the FAT partition.
DietPi will also create a copy of the file in
/mnt/dietpi_userdata/DietPi_OpenVPN_Client.ovpn.
Use one of DietPi’s file servers to access this file.

Also I want to maintain local access for SSH and accessing the software, will that be possible if traffic is forced to the VPN server at some remote location? Just want to hide what's coming and going to to pi for.... reasons.