This Qubes 4.2 guide should work for you:
If you want a non-GUI setup I would recommend this wireguard guide:
In this guide you will also find a very simple solution for VPN harding: