One-off, in person at my house in SE23 (full address shared once booked). I'm abroad, so I'll be on a video call with you throughout. The kit (already at the house): - GL.iNet Brume 3 (MT2500) VPN router — brand new, in box - Community Fibre 1 Gbps broadband, already live, with their router/mesh and ONT The job: - Connect the Brume 3 to the Community Fibre router (Ethernet) and power it on - First-time setup of the Brume 3 with me on the video call — I set the admin and Wi-Fi passwords myself - Check whether my line is behind CGNAT or has a public IP (router WAN IP: 100.64–100.127 range = CGNAT) and tell me which - Enable the WireGuard server on the Brume 3 and GL.iNet DDNS - If public IP: set up port forwarding on the Community Fibre router (UDP 51820 to Brume 3) so the VPN is reachable from outside - Enable GoodCloud remote management on the Brume 3 and bind it to my account so I can manage it myself afterwards - Stay on the call while I connect from abroad and confirm my traffic exits via the house IP - Leave everything powered and connected, and send me a photo of the final cabling You must have: - Set up WireGuard or OpenVPN servers on routers before (GL.iNet / OpenWrt experience a plus) - A working understanding of CGNAT, DDNS and port forwarding - Your own laptop to work from Estimated 1–2 hours. A keyholder will let you in and be there for access — the technical work and decisions happen with me on video. One honesty clause: if the line turns out to be behind CGNAT with no public IP, the VPN can't be made reachable from outside on the day — you'd still be paid for the visit and the diagnosis, and we'll have established exactly what's needed next.