1. Grab a cheap VPS with a decent monthly b/w quota and datacentres near you (Linode or Scaleway come to mind)
2. Buy whatever meets your criteria on https://openwrt.org/toh/start and install OpenWRT on it (I use a Mikrotik RB750GR3 with a Ubiquiti UAP-AC-LITE for wifi)
2. Buy whatever meets your criteria on https://openwrt.org/toh/start and install OpenWRT on it (I use a Mikrotik RB750GR3 with a Ubiquiti UAP-AC-LITE for wifi)
3. Setup Wireguard (https://lists.openwall.net/netdev/2018/08/02/124) on the VPS and OpenWRT
4. Be happy