- Removes gcc/make/git and the microsocks git clone+build step - Installs dante-server from apt — zero compilation required - danted uses 'external: tun0' to explicitly route all proxied traffic through the VPN interface, more reliable than iptables-based routing - Config is generated at runtime after tun0 is confirmed up