VPS Baseline: Install, Harden, and Disable Logs
TL;DR: A VPN node is a small Linux box with SSH, a tunnel daemon, and a kill-switch. Before installing OpenVPN or WireGuard, lock SSH to a non-standard port (e.g., 28422), disable root login, turn fail2ban on, and stop writing access logs to disk.