无

CentOS/Ubuntu

若是CentOS，则可从EPEL仓库中安装 Nginx

yum install epel-release
yum install nginx

Cloudflare+namecheap/Freenom

在namecheap或Freenom上注册一个域名，然后修改域名的DNS为cloudflare分配的新的DNS

到 https://dash.cloudflare.com/profile/api-tokens 创建一个Token。如下

注意，SSL/TLS 还需要设置为 Full或Full (strict)

Nginx

cat <<EOF>/etc/nginx/conf.d/default.conf
server {
    listen       443 ssl;
    server_name  ${DOMAIN};
    ssl_certificate ssl/${DOMAIN}.crt;       
    ssl_certificate_key ssl/${DOMAIN}.key;   
 
    location /ws {                         
        proxy_redirect off;
        proxy_pass http://127.0.0.1:10086;       
        proxy_http_version 1.1;
        proxy_set_header Upgrade \$http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host \$http_host;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_connect_timeout 60s;
        proxy_read_timeout 86400s;
        proxy_send_timeout 60s;
    }
}

v2ray

Server

编辑 /etc/v2ray/config.json 添加以下内容。

{
  "inbounds": [{
    "port": 10086,           
    "listen":"127.0.0.1",
    "protocol": "vmess",
    "settings": {
      "clients": [
        {
          "id": "${UUID}", 
          "level": 1,
          "alterId": 64      
        }
      ]
    },
    "streamSettings": {
      "network": "ws",
      "wsSettings": {
        "path": "/ws"   
      }
    }
  }],
  "outbounds": [{
    "protocol": "freedom",
    "settings": {}
  },{
    "protocol": "blackhole",
    "settings": {},
    "tag": "blocked"
  }],
  "routing": {
    "rules": [
      {
        "type": "field",
        "ip": ["geoip:private"],
        "outboundTag": "blocked"
      }
    ]
  }
}

其中 id通过 cat /proc/sys/kernel/random/uuid分配

Client

{
    "dns": {
        "servers": [
            "8.8.4.4",
            "1.1.1.1",
            "8.8.8.8",
            "114.114.114.114"
        ]
    },
    "inbounds": [
        {
            "listen": "127.0.0.1",
            "port": 15490,
            "protocol": "dokodemo-door",
            "settings": {
                "address": "127.0.0.1"
            },
            "sniffing": {
            }
        },
        {
            "listen": "0.0.0.0",
            "port": 8888,
            "protocol": "http",
            "settings": {
            },
            "sniffing": {
                "enabled": false
            }
        },
        {
            "listen": "0.0.0.0",
            "port": 1088,
            "protocol": "socks",
            "settings": {
                "auth": "noauth",
                "userLevel": 0
            },
            "sniffing": {
                "enabled": false
            }
        }
    ],
    "log": {
        "loglevel": "warning"
    },
    "outbounds": [
        {

            "protocol": "vmess",
            "sendThrough": "0.0.0.0",
            "settings": {
                "vnext": [
                    {
                        "address": "域名",
                        "port": 443,
                        "users": [
                            {
                                "alterId": 64,
                                "id": "服务器UUID",
                                "level": 0,
                                "security": "none"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "dsSettings": {
                    "path": "/"
                },
                "httpSettings": {
                    "host": [
                    ],
                    "path": "/"
                },
                "kcpSettings": {
                    "congestion": false,
                    "downlinkCapacity": 100,
                    "header": {
                        "type": "none"
                    },
                    "mtu": 1350,
                    "readBufferSize": 1,
                    "tti": 24,
                    "uplinkCapacity": 5,
                    "writeBufferSize": 1
                },
                "network": "ws",
                "quicSettings": {
                    "header": {
                        "type": "none"
                    },
                    "key": "",
                    "security": ""
                },
                "security": "tls",
                "sockopt": {
                    "mark": 0,
                    "tcpFastOpen": false,
                    "tproxy": "off"
                },
                "tcpSettings": {
                    "header": {
                        "request": {
                            "headers": {
                            },
                            "method": "GET",
                            "path": [
                            ],
                            "version": "1.1"
                        },
                        "response": {
                            "headers": {
                            },
                            "reason": "OK",
                            "status": "200",
                            "version": "1.1"
                        },
                        "type": "none"
                    }
                },
                "tlsSettings": {
                    "allowInsecure": true,
                    "allowInsecureCiphers": false,
                    "alpn": [
                    ],
                    "certificates": [
                    ],
                    "disableSystemRoot": false,
                    "serverName": ""
                },
                "wsSettings": {
                    "headers": {
                    },
                    "path": "/ws"
                }
            },
            "tag": "server"
        },
        {
            "protocol": "freedom",
            "sendThrough": "0.0.0.0",
            "settings": {
                "domainStrategy": "AsIs",
                "redirect": ":0",
                "userLevel": 0
            },
            "streamSettings": {
                "kcpSettings": {
                }
            },
            "tag": "outBound_DIRECT"
        },
        {
            "protocol": "blackhole",
            "sendThrough": "0.0.0.0",
            "settings": {
                "response": {
                    "type": "none"
                }
            },
            "streamSettings": {
                "kcpSettings": {
                }
            },
            "tag": "outBound_BLACKHOLE"
        }
    ],
    "policy": {
        "system": {
            "statsInboundDownlink": true,
            "statsInboundUplink": true,
            "statsOutboundDownlink": true,
            "statsOutboundUplink": true
        }
    },
    "routing": {
        "domainStrategy": "AsIs",
        "rules": [
            {
                "ip": [
                    "geoip:private"
                ],
                "outboundTag": "outBound_DIRECT",
                "type": "field"
            },
            {
                "ip": [
                    "geoip:cn"
                ],
                "outboundTag": "outBound_DIRECT",
                "type": "field"
            },
            {
                "domain": [
                    "geosite:cn"
                ],
                "outboundTag": "outBound_DIRECT",
                "type": "field"
            }
        ]
    },
    "stats": {
    }
}

一键配置脚本

整个过程用bash脚本处理

#!/bin/bash

# 域名，自行修改
export DOMAIN=
export UUID=$(cat /proc/sys/kernel/random/uuid)
# cloudflare中创建的token，自行修改
export CF_Token=""

curl -X GET "https://api.cloudflare.com/client/v4/user/tokens/verify" \
     -H "Authorization: Bearer ${CF_Token}" \
     -H "Content-Type:application/json"

apt install curl wget -y 
apt install socat -y
apt install nginx -y

bash <(curl -L -s https://install.direct/go.sh)
cat <<EOF>/etc/v2ray/config.json
{
  "inbounds": [{
    "port": 10086,           
    "listen":"127.0.0.1",
    "protocol": "vmess",
    "settings": {
      "clients": [
        {
          "id": "${UUID}", 
          "level": 1,
          "alterId": 64      
        }
      ]
    },
    "streamSettings": {
      "network": "ws",
      "wsSettings": {
        "path": "/ws"   
      }
    }
  }],
  "outbounds": [{
    "protocol": "freedom",
    "settings": {}
  },{
    "protocol": "blackhole",
    "settings": {},
    "tag": "blocked"
  }],
  "routing": {
    "rules": [
      {
        "type": "field",
        "ip": ["geoip:private"],
        "outboundTag": "blocked"
      }
    ]
  }
}
EOF

# yum -y update
# yum -y install epel-release
# yum -y install nginx

systemctl enable v2ray
systemctl restart v2ray

mkdir /etc/nginx/ssl 
mv /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.back  
cat <<EOF>/etc/nginx/conf.d/default.conf
server {
    listen       443 ssl;
    server_name  ${DOMAIN};
    ssl_certificate ssl/${DOMAIN}.crt;       
    ssl_certificate_key ssl/${DOMAIN}.key;   
 
    location /ws {                         
        proxy_redirect off;
        proxy_pass http://127.0.0.1:10086;       
        proxy_http_version 1.1;
        proxy_set_header Upgrade \$http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host \$http_host;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_connect_timeout 60s;
        proxy_read_timeout 86400s;
        proxy_send_timeout 60s;
    }
}
EOF
systemctl stop nginx
systemctl enable nginx

mv ~/.acme.sh ~/.acme.sh.back 
curl  https://get.acme.sh | sh
source ~/.bashrc
cd ~/.acme.sh
./acme.sh --issue --dns dns_cf -d ${DOMAIN} --standalone -k ec-256
cat ${DOMAIN}_ecc/fullchain.cer >/etc/nginx/ssl/${DOMAIN}.crt
cat ${DOMAIN}_ecc/${DOMAIN}.key>/etc/nginx/ssl/${DOMAIN}.key
systemctl restart nginx
./acme.sh --installcert -d ${DOMAIN} -d *.${DOMAIN} \
          --fullchainpath /etc/nginx/ssl/${DOMAIN}.crt \
          --keypath /etc/nginx/ssl/${DOMAIN}.key \
          --reloadcmd "systemctl force-reload nginx" \
          --ecc


echo "DOMAIN: " => ${DOMAIN}
echo "UUID: " => ${UUID}
echo "CF_Token: " => ${CF_Token}