I recalled that I wanted to set up my own home-made VPN following How I made a home VPN with dynamic DNS for secure remote access. It seems that someone is going to make this far easier: enters https://github.com/anywherelan/awl
It’s still in beta but we shall keep an eye on it. I hope it will be included into Debian repositories soon.