Replacing SonicWALL with pfsense

Hello,

I plan on replacing a SonicWALL TZ-190 (EOL) firewall with a pfsense powered device, Netgate SG-1000.

This is for a church community center which has:

1) Static IP

2) DNS/DHCP servers

3) 24 Win-7 workstations

4) 5 Remote users

Currently remote users access the network using the SonicWALL Global VPN Client, however my main question is VPN related. When I deploy the pfsense appliance, what will be the best VPN solution to utilize with pfsense,

Options:

a) I do not have a virtual infrastructure just yet, although I could repurpose an older workstation with Server- 2012 R2 and give it the Hyper-V role, then add the Windows based OpenVPN appliance.

b) Perhaps just add the RAS role to one of the current domain controllers and have a simple windows based VPN (Leaning to this option)

c) Other options??

Appreciate the input everyone.

Thanks