hwdsl2/setup-ipsec-vpn

This project gives you a one-command way to turn a Linux server into your own private VPN, so the traffic from your laptop or phone is encrypted on the way to that server and out to the internet. The README explains the point in plain terms: while you are connected, nobody sitting between you and the VPN server can read what you are sending, which is useful on unsecured networks like coffee shops, airports, or hotel rooms. It supports three flavours of IPsec VPN, IPsec/L2TP, Cisco IPsec, and IKEv2, so devices that already have built-in VPN support can connect without installing extra software. Under the hood it uses Libreswan as the IPsec server and xl2tpd as the L2TP provider, and the project's job is to install and configure them automatically. Setup is a single line that downloads and runs a shell script as root, the script can generate random credentials for you, or you can supply your own through edited variables or environment variables. It then prints the login details, hands out VPN profiles that auto-configure iOS, macOS, and Android, and includes helper scripts to add or remove VPN users and certificates. It also works as a prebuilt Docker image, and the same author maintains separate installers for WireGuard, OpenVPN, and Headscale so you can run several on one box. You would use this when you want your own VPN instead of a paid service, for privacy on public Wi-Fi, to remotely reach a home network, or to control where your traffic exits. It supports a wide range of Linux distributions on cloud servers, VPS providers, Raspberry Pi, and is documented for one-click deploys on Linode, AWS, and Azure.