Add AmneziaWG VPN tutorial for CAX ARM#1455
Open
bivlked wants to merge 1 commit into
Open
Conversation
Walks through setting up a personal AmneziaWG 2.0 VPN server on a Hetzner CAX ARM (Ampere) cloud instance using amneziawg-installer, with client configs (QR + vpn:// URI) for the Amnezia VPN app and CLI-based client management. Single-server personal-VPN scope, complementary to the existing website-hosting tutorial by @khashashin (cross-linked in both directions). License: MIT
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a new tutorial
tutorials/self-host-dpi-resistant-vpn-on-hetzner-cax-arm/01.en.mdcovering how to set up a personal AmneziaWG 2.0 VPN server on a Hetzner CAX ARM cloud server usingamneziawg-installer.Affiliation disclosure
I am the author and maintainer of amneziawg-installer, the open-source Bash installer used in this tutorial (MIT-licensed). The installer is the core of the walkthrough; the rest of the tutorial is Hetzner-specific guidance (Cloud Console fields, Cloud Firewall note, ARM
aarch64specifics, Hetzner CAX pricing tier mapping).Scope
End-user use case: someone in a network where plain WireGuard is fingerprinted and dropped wants to run their own VPN endpoint on a small ARM server in the EU and connect their phone or laptop to it. The tutorial walks through:
CAX11ARM server with Ubuntu 24.04amneziawg-installerscript in non-interactive modeawg-quickTotal length around eight to twelve minutes of reading.
Relationship to the existing AmneziaWG tutorial
@khashashin's Making Your Website Accessible from Restricted Regions (Feb 2026) covers a different use case — a website operator on Hetzner who needs to serve users in DPI-throttled regions through a reverse-proxy + AmneziaWG tunnel between two servers. My tutorial is a single-server personal-VPN scenario.
The two tutorials are explicitly cross-linked in both directions: this one points readers with a website-hosting need to @khashashin's tutorial in the introduction and the conclusion; @khashashin's tutorial already references
amneziawg-installerin its Resources section after PR #1443 was merged on 2026-04-27.Pre-submission checks
---, all required fields populated,short_description145 chars under the 160-char limit)<10.0.0.1>,<your_host>, no real IPs from the test box)amneziawg-installerv5.11.4 release behaviourCredit attribution
A heads-up for the Hetzner Community tutorial credit: my Hetzner account is registered under
ivan@bondarev.net, which is different from the commit author email visible on GitHub. Please attach the credit to theivan@bondarev.netaccount if accepted.What I am asking for
A review for fit and any required changes before merge. Happy to revise:
header-xplaceholder per template — I do not have a strong preference)product; can change tocloudor other if more appropriate)