How to have both bridged AP *and* VPN for clients

[guyromb]

According to FAQ , bridged AP does not route clients via configured OpenVPN (only the RPi itself) - is there a way to make it work? For example with manual routing?

The reason is that I want devices (e.g. Chromecast) to communicate with other devices that are on the regular network and still use VPN. Without bridged AP they cannot be discovered.

My setup: device -> wlan0 RPi -> VPN -> eth0 -> router -> internet
I want RPi to extend my network rather than a new NAT.