XTLS Vision 安装指南

服务端

已有SSL证书

• 将证书文件改名为 fullchain.cer，将私钥文件改名为 private.key，将它们上传到 /etc/ssl/private 目录，执行下面的命令

chown -R nobody:nogroup /etc/ssl/private

• 使用证书时权限不足

使用acme申请SSL证书

• 点击查看详细步骤

• 如果使用acme申请失败，请尝试使用cerbot

• 备份已申请的SSL证书：进入 /etc/ssl/private 目录，下载证书文件 fullchain.cer 和私钥文件 private.key

• SSL证书有效期是90天，acme每60天自动更新一次

具体步骤

1. 安装Xray

• Debian / Ubuntu

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install --beta

• 卸载Xray

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ remove --purge

2. 安装Nginx

• Debian 10/11/12

apt install -y gnupg2 ca-certificates lsb-release debian-archive-keyring && curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor > /usr/share/keyrings/nginx-archive-keyring.gpg && echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/mainline/debian `lsb_release -cs` nginx" > /etc/apt/sources.list.d/nginx.list && echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" > /etc/apt/preferences.d/99nginx && apt update -y && apt install -y nginx && mkdir -p /etc/systemd/system/nginx.service.d && echo -e "[Service]\nExecStartPost=/bin/sleep 0.1" > /etc/systemd/system/nginx.service.d/override.conf && systemctl daemon-reload

• Ubuntu 18.04/20.04/22.04

apt install -y gnupg2 ca-certificates lsb-release ubuntu-keyring && curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor > /usr/share/keyrings/nginx-archive-keyring.gpg && echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/mainline/ubuntu `lsb_release -cs` nginx" > /etc/apt/sources.list.d/nginx.list && echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" > /etc/apt/preferences.d/99nginx && apt update -y && apt install -y nginx && mkdir -p /etc/systemd/system/nginx.service.d && echo -e "[Service]\nExecStartPost=/bin/sleep 0.1" > /etc/systemd/system/nginx.service.d/override.conf && systemctl daemon-reload

• 卸载Nginx

systemctl stop nginx && apt purge -y nginx && rm -r /etc/systemd/system/nginx.service.d/

3. 下载配置

curl -Lo /usr/local/etc/xray/config.json https://raw.githubusercontent.com/chika0801/Xray-examples/main/VLESS-Vision-TLS/config_server.json && curl -Lo /etc/nginx/nginx.conf https://raw.githubusercontent.com/chika0801/Xray-examples/main/VLESS-Vision-TLS/nginx.conf

4. 启动程序

systemctl restart xray && systemctl restart nginx && sleep 0.2 && systemctl status xray && systemctl status nginx

项目
程序	/usr/local/bin/xray
配置	/usr/local/etc/xray/config.json
geoip	/usr/local/share/xray/geoip.dat
geosite	/usr/local/share/xray/geosite.dat
重启	systemctl restart xray
状态	systemctl status xray
查看日志	journalctl -u xray -o cat -e
实时日志	journalctl -u xray -o cat -f

客户端配置示例