I set up Streisand on a $5/mo Digital Ocean droplet a while back and the whole family uses it on all our devices with great results. It is pretty much a 'fire and forget' solution that I haven't had to touch in over a year.
That said, if I was going to pick one protocol out of the selection offered by streisand, it would be l2tp/ipsec instead of openvpn (assuming you're hosting on digital ocean. The networks on AWS and GCE are more restrictive and you can't serve l2tp/ipsec from there). I found this to be easier to set up (the client-side software is already included in most operating systems) and to have the best performance.
I posted this elsewhere but it bears repeating. This project is designed to be simple, auditable, and disposable, and have the minimum attack surface and maintenance costs.
Other tools are great, but the cost of swapping certificates and IP addresses and zone files can weigh you down.
Streisand would do well to have numerous playbooks that remix roles for smaller services (if they don't already).
I wish they would allow VPN users through based on an address based authentication.
Both even use Ansible.
I also am not pleased that their easy-rsa tarball is not easily auditable rather than pulling it as a subrepository directly from OpenVPN.
edit: I have audited the easy-rsa tarball. It's still not a totally appropriate way to manage things.
Also this project is intended to be broadly accessible to people who feel they can do the basics of managing a server.