Easiest solution which is almost plug-and-go is plebvpn with RaspiBlitz. Has hybrid mode with tor as a back up for clearnet. Can highly recommend that. 

 Had raspiblitz for years. My pi stopped being reliable so I switched to start9. 

 Yeah I'm actually running it on Intel NUC which has been reliable for me.