Private Networks and Tunnels
Hysteria 2
High risk: it opens the chosen UDP port (and TCP 80 for the certificate when a domain is given) in ufw when ufw is active. Installs the pinned Hysteria release, writes /etc/hysteria/config.yaml (mode 640), makes a self-signed certificate when no domain is given, runs Hysteria as a sandboxed systemd service and keeps the password across runs.
What it does
Private Network and Tunnel Installers
What you will be asked
You fill these in during setup.
- Listening port (UDP) port RequiredAdvanced settingsThe port the listening port (udp) listens on. The default is fine unless another service already uses it.
- Password Made for you if left emptyAdvanced settingsThe password clients use. Leave empty to generate one; it is shown once when the run finishes and kept for later runs.
- Domain (optional) OptionalA domain whose A record points to this server. With it, a Let's Encrypt certificate is issued (port 80 must be free) and clients verify the server. Without it, a self-signed certificate is used and the client link carries insecure=1.
- Site to imitate RequiredAdvanced settingsUnauthenticated visitors and probes see this site instead of the proxy. Also the certificate name when no domain is given.