I spun up a Streisand server on a Digital Ocean VM years ago, it worked pretty well. I eventually replaced it with Algo[1] which has also worked nicely.

1: https://trailofbits.github.io/algo/

There’s Dev-Sec which is more about multi-OS-platform as well as multi-IaS (Ansible, Puppet, Chef).

Covers SSH, NGINX, Apache, Windows hardening, MySQL, and Linux hardening.

Free, to boot.

https://github.com/dev-sec/ansible-collection-hardening

This was never quite the right model. Too many services increase the surface area of attack. My recommendation for a personal vpn is algo: https://github.com/trailofbits/algo

I generally agree about the surface area of attack, but this project was supposed to be aimed more at censorship circumvention. Algo may help with that, but I doubt it will get past a well funded government agency, e.g. in the Middle East or China.