> also note you may want to use the LEAP project for that, which
> facilitates a big deal of setup on both client and server side.
> https://leap.se/en/docs/platform/tutorials/single-node-vpn LEAP does
> not requires systemd

helas, I must correct myself here: LEAP went heavy on systemd :/

which is already creating problems and of course forcing compromises
on the security model, for instance with this bug
https://leap.se/git/leap_platform.git/commit/1241fb2f62733b8b8b561f9746505f23cd81e3be

what a pity, a project getting some much philantropic funding for
security ending up in that row. I'll try to talk about that with them,
yet the emphasis added on Debian here is not promising
https://leap.se/en/docs/platform they might have had already some sort
of discussion.

nevertheless, there is reusable code in there.

ciao