A personal VPN on your own server means your own IP, your own rules and no strangers in the tunnel. With WireGuard the whole setup is one script and about five minutes on a fresh VPS.

Why WireGuard

It is the modern default: a tiny codebase living in the Linux kernel, near-line-rate speed, instant reconnects when the phone hops between Wi-Fi and mobile, and configs small enough to fit in a QR code. Unless a network actively blocks VPN protocols, WireGuard is the right first choice.

Step 1: a fresh VPS

Order any plan with Ubuntu 24.04 or Debian 12 in the country you want your traffic to exit from. The smallest plan handles a family of devices with room to spare.

Step 2: run the installer

curl -O https://serva.one/files/serva-wireguard-install.sh
bash serva-wireguard-install.sh

The script asks a few questions; the defaults are sensible. Under the hood it installs WireGuard, generates server keys, enables IP forwarding, sets up NAT and creates the first client. At the end it prints the client config and a QR code right in the terminal.

Step 3: connect a device

  • Phone: install the official WireGuard app, tap "add tunnel", scan the QR code from the terminal. Done.
  • Laptop: copy the generated .conf file into the WireGuard app for Windows or macOS, or to /etc/wireguard/ on Linux and run wg-quick up.

Step 4: verify

# on the server: handshakes and traffic per peer
wg show

# on the device: your public IP should now be the server IP
curl ifconfig.me

More devices, more countries

Run the same script again to add or remove clients: each device gets its own key pair, so you can revoke a lost phone without touching the others. Want exits in several countries? One small VPS per country, five minutes each.

Honest limits of DIY

A self-hosted tunnel is transparent and fully yours, but it does not hide the fact of VPN usage from networks that inspect traffic, and it needs you to be the admin. If a network blocks WireGuard, or you would rather skip maintenance entirely, our Personal VPN ships the same dedicated IP idea with four protocols, including camouflage ones, and configs generated for you in about a minute.