For this Scenario you can put your internet-link into a different VRF. The differences to a "normal" DMVPN-config are the following:
interface GigabitEthernet 0/0
description Connection to ISP
ip vrf PUBLIC
!
interface Tunnel1
description Tunnel to Hub
tunnel vrf PUBLIC
!
ip route vrf PUBLIC 0.0.0.0 0.0.0.0 GigabitEthernet 0/0