Secure my DNS server by allowing connection only from VPN

Solution 1:

Bind your DNS server to the VPN interface instead of 0.0.0.0.