Proton VPN

Promptfree, for everyone, and the only version there is

Open the prompt in Claude CodeOpen the prompt in CodexOpen the prompt in Cursor

Copy

Build me a personal WireGuard tunnel to a server I rent, and be clear about what it does and does not give me.

STACK
- WireGuard on a small VPS; do not write a VPN protocol
- A short setup script and QR codes for phone clients

THE SERVER
- WireGuard listening on UDP, a single peer per device, keys generated on the device where possible
- IP forwarding and NAT configured; firewall allowing only the WireGuard port and SSH from one address
- Unattended security upgrades, and nothing else installed on the box

CLIENTS
- One config per device, never shared between them
- Kill switch on each platform: on Linux and macOS, a firewall rule allowing traffic only through the tunnel interface
- Document the exact behaviour when the tunnel drops, per platform

DNS
- Run a resolver on the server so queries do not leak to the local network
- Block ad and tracker domains there with a list, updated weekly

WHAT THIS IS AND IS NOT, IN THE README, IN THESE WORDS
- This hides your traffic from the local network and your internet provider. It does not make you anonymous
- Your traffic all leaves one IP address that is yours alone, which is easier to identify than a shared one, not harder
- If you need to be unidentifiable, this is the wrong tool and Tor is the conversation

Include a README on key rotation, the DNS blocklist job and the monthly cost.