Private Networks and Tunnels
sing-box (TUIC)
High risk: it opens the chosen UDP port in ufw when ufw is active. Installs the pinned sing-box release to /usr/local/bin, writes /etc/sing-box/config.json (mode 640) with one TUIC user, makes a self-signed certificate, checks the configuration with sing-box check, runs sing-box as a sandboxed systemd service and keeps the client id and password across runs.
What it does
Private Network and Tunnel Installers
What you will be asked
You fill these in during setup.
- Listening port (UDP) port RequiredAdvanced settingsThe port the listening port (udp) listens on. The default is fine unless another service already uses it.
- Client id (UUID) Made for you if left emptyAdvanced settingsThe id the client uses. Leave empty to generate one; it is shown once when the run finishes and kept for later runs.
- Password Made for you if left emptyAdvanced settingsThe password the client uses with the client id. Leave empty to generate one; it is shown once when the run finishes and kept for later runs.
- Certificate name (SNI) RequiredAdvanced settingsThe name in the self-signed certificate and in the client link. A common site name blends in best.