Make a Proton account
A good website to make a burner email for this is
mail.com(they don't verify info). or you can make your own Proton email and use account instead)
Go to Settings > Network > Vpn > Click the (+)
Set Service name to something silly idc
Set Provider Type to IPsec (iKEv2)
Set Server Hostname to Hostname
Double check Authentication Type is Username and password
Set Username to Credentials
Set Password to Credentials
Double check Server CA Certificate is set to
ProtonVPN Root CA [ProtonVPN Root CA]
Toggle Save identity and password so you dont have to remember
all of this
Click connect
ONC making
You can also use this info along with the premade file here to make a new one
(using the same certs as they are the default certs for PVN CA Root)