Squid Proxy Setup on Ubuntu

I run an Ubuntu-based VPS and need a clean, fully-anonymous HTTP/HTTPS proxy installed and configured with Squid. The main goal is to route my outbound traffic through this server without revealing the originating IP, so I’m looking for a hardened, privacy-focused setup rather than simple caching.

Here’s what I expect:
• Latest stable Squid built or installed from the official repos, tuned for high privacy (no X-Forwarded-For, Via, or other revealing headers).
• Access control lists allowing only the IPs I supply, along with optional username/password auth so I can open it up later if required.
• Basic traffic logging kept to a minimum or disabled entirely once we confirm it’s running as intended.
• IPTables or UFW rules tightened so only the proxy ports stay open.
• Clear, step-by-step handover notes: commands you ran, config file locations, and how to add/remove authorised IPs in the future.

I already have root SSH access; you just need to tell me if you prefer a fresh snapshot before you start. Once the service is online, I’ll verify anonymity with external leak-test sites—no real IP or extra headers should appear.