algo

https://github.com/trailofbits/algo https://github.com/StreisandEffect/streisand

The generally-better-regarded implementation of this idea is Algo: https://github.com/trailofbits/algo

Like this article says towards the end, I would just recommend ProtonVPN for anyone looking for a casual free VPN service. None of the free services is going to be enough for fast streaming or downloads anyway. For those who trust the "cloud" and just want (only) a VPN service under their control are capable of logging in to servers and running some commands, I'd recommend Algo [1] with WireGuard. [1]: https://github.com/trailofbits/algo

At the risk of splintering interest: Algo[1] and Streisand[2] are two popular open source projects that do nearly identical things. Both also have the advantage of supporting a wide variety of cloud providers by default. Algo installs the absolute minimum needed to get you online with a well-configured VPN; Streisand comes with a whole bunch of bells and whistles (including some that are easy to misconfigure). FD: My employer maintains Algo. [1]: https://github.com/trailofbits/algo [2]: https://github.com/StreisandEffect/streisand

Algo [1] is a great option for a personal VPN, and it supports WireGuard + ad blocking. I really don't understand why you would want to use k8s for something like this unless it is just a pet project. [1] https://github.com/trailofbits/algo

Algo is easy and works well: https://github.com/trailofbits/algo

I do exactly that, though I run my VPN in the cloud (a scaleway instance which is only 3 euro per month). Using algo for the vpn: https://github.com/trailofbits/algo . I can highly recommend it! Though I had some issues with play store updates being blocked but that's resolved now. Unfortunately google play services are essentially one big spyware collection so it makes sense for it to block them. I also had to manually provision my Android phone on IKEv2 (ipsec), Algo used to provide a strongswan config but unfortunately they dropped this in favour of wireguard. But you can still set it up manually (and on Samsung devices you don't even need strongswan). Wireguard is faster, yes, but my work blocks pretty much every port they don't know, except IKEv2/ipsec because many contractors use it to connect to their work :)

https://github.com/trailofbits/algo Also supports it. Have been using it for personal VPN deployments, very easy to use and each time I notice they have made moves to be more secure.

I would suggest using Algo VPN to set up WireGuard https://github.com/trailofbits/algo

For anyone wanting to try it, WireGuard with Algo VPN [1] to set it up on a server is a great combination. I found it quite easy to setup and use. Algo has built-in support for various cloud providers, where, when you run it from, day, your desktop, it can setup the VPN server for you based on answers to some questions (with sensible defaults) and some information on connecting to the provider (like an API key, for example). You also get QR code images that you can use to install a VPN profile on your phone. You can also run Algo from within a server and have it setup the VPN for you. [1]: https://github.com/trailofbits/algo

The thing is that it's not really complicated anymore. It may be my area of expertise, but just following basic step-by-step instructions, it took me about 10 minutes to have a full ad-blocking, Wireguard VPN server on a DigitalOcean droplet by using Algo: https://github.com/trailofbits/algo , including the setup for my phone and iPad.

Check out Algo [0] if you're interested in setting up a personal WireGuard VPN server. It's simple and hassle-free, especially if you are not familiar with server administration and don't want to be bogged down by details. I have one deployed on Digital Ocean ($5/mo droplet). All you need to do is run the setup script, answer a few yes/no questions (optional features), paste in your API key, and update the firewall setting on Digital Ocean's dashboard. If anything goes wrong, deploying a new one only takes minutes. [0] https://github.com/trailofbits/algo

There are so many servers and apps being installed by Sovereign that I'm certain few would be able to keep it secure (https://github.com/sovereign/sovereign/wiki/Software-used-by...). The big win for the cloud is that you're paying a fraction of the cost for access to a, typically, enormous security and operations team. If you want to build software like this that allows people to self-host, you need to scale down what you deploy to what a single person can reasonably manage. This isn't it. Fun todo: Install this somewhere, nmap it for open ports, then ask "How many of these services had a remotely exploitable CVE in the last year?" "If one of these services had one tomorrow, would I know to patch it and take action faster than someone would takeover my box?" I don't see any containment mechanisms on any of these services beyond what's in