Time for project: 2 weeks
Wireguard Server setup.
Client access integration to website and client software which uses IPV6.
Server specification: VPN servers + one Master server which is in-house.
(When the VPN server(hired servers) boots, it fetches the correct disk image by iPXE (for example) from
the in-house encrypted boot server (master).
As soon as the disk image has been downloaded, a verification of the kernel and initrd signature is performed to ensure that nothing has been tampered with.
The operating system is loaded into the RAM memory, and the server can finally boot if the verification passes.
If the verification fails, the server will reboot and retry this process until the verification signature is valid and it's safe to boot.)