XTLS Vision 安装指南
- 将证书文件改名为 fullchain.cer，将私钥文件改名为 private.key，将它们上传到 /etc/ssl/private 目录，执行下面的命令
chown -R nobody:nogroup /etc/ssl/private
使用acme申请SSL证书
-
如果使用acme申请失败，请尝试使用cerbot
-
备份已申请的SSL证书：进入 /etc/ssl/private 目录，下载证书文件 fullchain.cer 和私钥文件 private.key
-
SSL证书有效期是90天，acme每60天自动更新一次
- 安装Xray
- Debian / Ubuntu
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install --beta
- 卸载Xray
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ remove --purge
- 安装Nginx
- Debian 10/11/12
apt install -y gnupg2 ca-certificates lsb-release debian-archive-keyring && curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor > /usr/share/keyrings/nginx-archive-keyring.gpg && echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/mainline/debian `lsb_release -cs` nginx" > /etc/apt/sources.list.d/nginx.list && echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" > /etc/apt/preferences.d/99nginx && apt update -y && apt install -y nginx && mkdir -p /etc/systemd/system/nginx.service.d && echo -e "[Service]\nExecStartPost=/bin/sleep 0.1" > /etc/systemd/system/nginx.service.d/override.conf && systemctl daemon-reload
- Ubuntu 18.04/20.04/22.04
apt install -y gnupg2 ca-certificates lsb-release ubuntu-keyring && curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor > /usr/share/keyrings/nginx-archive-keyring.gpg && echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/mainline/ubuntu `lsb_release -cs` nginx" > /etc/apt/sources.list.d/nginx.list && echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" > /etc/apt/preferences.d/99nginx && apt update -y && apt install -y nginx && mkdir -p /etc/systemd/system/nginx.service.d && echo -e "[Service]\nExecStartPost=/bin/sleep 0.1" > /etc/systemd/system/nginx.service.d/override.conf && systemctl daemon-reload
- 卸载Nginx
systemctl stop nginx && apt purge -y nginx && rm -r /etc/systemd/system/nginx.service.d/
- 下载配置
curl -Lo /usr/local/etc/xray/config.json https://raw.githubusercontent.com/chika0801/Xray-examples/main/VLESS-Vision-TLS/config_server.json && curl -Lo /etc/nginx/nginx.conf https://raw.githubusercontent.com/chika0801/Xray-examples/main/VLESS-Vision-TLS/nginx.conf
- 启动程序
systemctl restart xray && systemctl restart nginx && sleep 0.2 && systemctl status xray && systemctl status nginx
| 项目 | |
|---|---|
| 程序 | /usr/local/bin/xray |
| 配置 | /usr/local/etc/xray/config.json |
| geoip | /usr/local/share/xray/geoip.dat |
| geosite | /usr/local/share/xray/geosite.dat |
| 重启 | systemctl restart xray |
| 状态 | systemctl status xray |
| 查看日志 | journalctl -u xray -o cat -e |
| 实时日志 | journalctl -u xray -o cat -f |