Easiest solution which is almost plug-and-go is plebvpn with RaspiBlitz. Has hybrid mode with tor as a back up for clearnet. Can highly recommend that.