Private Networks and Tunnels
Xray VLESS + Reality
High risk: it opens the chosen port in ufw when ufw is active. Installs the pinned Xray-core release to /usr/local/bin and /usr/local/share/xray, creates the Reality key pair and short id once (kept in /usr/local/etc/xray, mode 600), writes config.json and runs Xray as a sandboxed systemd service. Safe to run again.
What it does
Private Network and Tunnel Installers
What you will be asked
You fill these in during setup.
- Listening port port RequiredAdvanced settingsThe port the listening port listens on. The default is fine unless another service already uses it.
- Client id (UUID) Made for you if left emptyAdvanced settingsThe secret id the client uses. Leave empty to generate one; it is shown once when the run finishes and kept for later runs.
- Site to imitate (SNI) RequiredAdvanced settingsA real site with TLS 1.3 and HTTP/2 on port 443 that is reachable from this server and not blocked where your users are. The connection looks like a visit to it.