XUI-REVERSE-PROXY (Russian)
Proxy using VLESS-TCP-XTLS-Vision and VLESS-TCP-REALITY (Steal from yourself) behind reverse-proxy NGINX
This script is designed to quickly and easily set up a hidden proxy server, with masking via NGINX. In this variant, all incoming requests are handled by NGINX, and the server acts as a proxy server only if the request contains the correct path (URI). This increases security and helps to hide the true purpose of the server.
Important
This script has been tested on Debian 12 in a KVM virtualization environment. You will need your own domain, which needs to be bound to Cloudflare for it to work correctly. It is recommended to run the script as root on a freshly installed system.
Note
The script is configured according to routing rules for users in Russia.
- Upgrade the system and reboot the server.
- Configure Cloudflare:
- Bind your domain to Cloudflare.
- Add the following DNS records:
| Type | Name | Content | Proxy status |
|---|---|---|---|
| A | your_domain_name | your_server_ip | DNS only |
| CNAME | www | your_domain_name | DNS only |
- SSL/TLS settings in Cloudflare:
- Go to SSL/TLS > Overview and select Full for the Configure option.
- Set the Minimum TLS Version to TLS 1.3.
- Enable TLS 1.3 (true) under Edge Certificates.
- Xray server configuration with 3X-UI:
- VLESS-TCP-XTLS-Vision и VLESS-TCP-REALITY (Steal from yourself).
- Connection of subscription and JSON subscription for automatic configuration updates.
- Configuring NGINX reverse proxy on port 443.
- providing security:
- Automatic system updates via unattended-upgrades.
- Configuring Cloudflare SSL certificates with automatic updates to secure connections.
- Configuring WARP to protect traffic.
- Enabling BBR - improving the performance of TCP connections.
- Configuring UFW (Uncomplicated Firewall) for access control.
- Configuring SSH, to provide the minimum required security.
- Disabling IPv6 to prevent possible vulnerabilities.
- Encrypting DNS queries using systemd-resolved or AdGuard Home (Temporarily removed).
- Selecting a random website from an array to add an extra layer of privacy and complexity for traffic analysis.
To begin configuring the server, simply run the following command in a terminal:
bash <(curl -Ls https://github.com/cortez24rus/xui-reverse-proxy/raw/refs/heads/main/xui-rp-install-server.sh)To install the bot on the server, just run the base script with the -bot flag:
bash <(https://github.com/cortez24rus/xui-reverse-proxy/raw/refs/heads/main/xui-rp-install-server.sh) -botbash <(curl -Ls https://github.com/cortez24rus/xui-reverse-proxy/raw/refs/heads/main/xui-rp-random-site.sh)The script will then prompt you for the necessary configuration information:
- Once the configuration is complete, the script will display all the necessary links and login information for the XUI administration panel.
- All configurations can be modified as needed due to the flexibility of the settings.
