Have a super-simple openvpn server

• Create a debian buster machine
• Install docker.io from buster
• Start a docker-compose.yml that runs kylemanna/openvpn or any other docker hub image
• Supervise the docker-compose with a systemd unit so it always runs
• Add it as a gw to riseup-vpn
• Patch the riseup-vpn webapp to add a beta tag to the new gw
• Configure the client to have a config parameter --beta with will pick openvpn gateways which are flagged as beta (or dev or however we want to flag them)