SSL VPN CLIENT-TO-SITE MIKROTIK + NAT

I need this setup:
- (SRV-Router) VPS Mikrotik that act as OPENVPN Server (with Public IP x.x.x.x)
- (CLIENT-Router) A remote Mikrotik router that must connect as a client OPENVPN to SRV-Server

* SRV-Router is hosted on VPS Host
* CLIENT-Router is a Routerboard connected to internet via an ISP that NAT the connection
* CLIENT-Router has a LAN 192.168.0.1/24 with some client connected to
* 192.168.0.1/24 hosts must surf the internet through the ISP interface and NOT from the VPN

When the VPN is up, i need to be able from ANY remote site to reach the CLIENT-Router as following:
x.x.x.x:8291 and has to answer the winbox of CLIENT-Router
x.x.x.x:8080 and has to answer the Http Web Gui of CLIENT-Router
Where x.x.x.x is the public IP address of SRV-Router

When the VPN is up, i need to be able from ANY remote site to reach device behind the CLIENT-Router as following:
x.x.x.x:8081 has to answer the webservice of the host 192.168.0.10 that is in the LAN of CLIENT-Router
x.x.x.x:8082 has to answer the webservice of the host 192.168.0.11 that is in the LAN of CLIENT-Router
Where x.x.x.x is the public IP address of SRV-Router

L2TP OR OTHER TYPE OF VPN THAT IS NOT SSL IS NOT ACCEPTED