Personal VPN Server on Offshore VPS - WireGuard Self-Hosted

Commercial VPN services route traffic from thousands of users through shared IP pools. When you use a commercial VPN, you trust the VPN provider not to log your traffic and not to disclose it to authorities. VPN providers' no-log claims are frequently marketing rather than technically enforced - some have handed over logs that they claimed not to keep. A personal VPS VPN is different: you run the WireGuard server. The server logs what you configure it to log (configure it to log nothing). The VPS provider (Anubiz Host) can see that traffic is going to and from the server but cannot see inside the encrypted WireGuard tunnel. And because the server is yours, no one else's traffic is mixed with yours. For a family of 4-6 devices, a single VPS running WireGuard handles all connections without meaningful performance impact.

Complete WireGuard server setup for multiple devices: ```bash apt update && apt install wireguard -y # Generate server keys wg genkey | tee /etc/wireguard/server_private | wg pubkey > /etc/wireguard/server_public # Create server config cat > /etc/wireguard/wg0.conf << EOF [Interface] Address = 10.66.66.1/24 ListenPort = 51820 PrivateKey = $(cat /etc/wireguard/server_private) PostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE PostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE EOF # Add each device as a peer (repeat for each device): wg genkey | tee device1_private | wg pubkey > device1_public echo " [Peer] PublicKey = $(cat device1_public) AllowedIPs = 10.66.66.2/32" >> /etc/wireguard/wg0.conf # Enable and start echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf && sysctl -p systemctl enable --now wg-quick@wg0 ``` Device client config (device1.conf): ```ini [Interface] PrivateKey = [content of device1_private] Address = 10.66.66.2/24 DNS = 1.1.1.1 [Peer] PublicKey = [content of /etc/wireguard/server_public] Endpoint = YOUR_VPS_IP:51820 AllowedIPs = 0.0.0.0/0 ``` Import this config into the WireGuard app on each device.