@maple oh god yeah it's a pain in the arse
there's algo ( https://github.com/trailofbits/algo ) which is a bunch of scripts for setting up an IPSEC vpn which might be helpful but I had problems with that when I tried it a while ago, those are probably fixed now though