Install V2ray Manual

Install V2ray

bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh)

Install Nginx / certbot Tools

• 事先添加 v2ray.domain.com 域名 DNS 解析到 server；

• 证书默认通常会生成到 /etc/letsencrypt/live/v2ray.domain.com/ 目录里；

• 同时会在 nginx 默认配置文件 default.conf 新增配置了站点及证书；

sudo apt install certbot nginx *certbot-nginx
sudo certbot --nginx -d v2ray.domain.com # 生成 ssl 域名证书

配置 V2ray

• 创建配置文件 /usr/local/etc/v2ray/config.json ，内容配置可参考如下：

 {
  "log": {
    "access": "/var/log/v2ray/access.log",
    "error": "/var/log/v2ray/error.log",
    "loglevel": "warning"
  },
  "inbound": {
    "port": 1088, # 端口按需修改，如有防火墙需放开tcp
    "protocol": "vmess",
    "settings": {
      "clients": [
        {
          "id": "UUID", # UUID配置自己唯一标识
          "level": 1,
          "alterId": 0
        }
      ]
    },
    "streamSettings": {
      "network": "ws",
      "wsSettings": {
        "path": "/gfw"
      },
      "security": "tls",
      "tlsSettings": {
        "serverName": "v2ray.domain.com",
        "certificates": [
          {
            "certificateFile": "/etc/letsencrypt/live/v2ray.domain.com/fullchain.pem", # 域名证书
            "keyFile": "/etc/letsencrypt/live/v2ray.domain.com/privkey.pem"
          }
        ]
      }
    }
  },
  "outbound": {
    "protocol": "freedom",
    "settings": {}
  },
  "inboundDetour": [],
  "outboundDetour": [
    {
      "protocol": "socks",
      "tag": "socks-out", #这个需要事先配置 cloudflare ware 代理，用于支持 chatgpt 
      "settings": {
        "servers": [
          {
            "address": "127.0.0.1",
            "port": 40000
          }
        ]
      }
    },
    {
      "protocol": "blackhole",
      "settings": {},
      "tag": "blocked"
    }
  ],
  "dns": {
    "servers": [
      "https+local://8.8.8.8/dns-query",
      "8.8.8.8",
      "1.1.1.1",
      "localhost"
    ]
  },
  "transport": {
    "kcpSettings": {
      "uplinkCapacity": 100,
      "downlinkCapacity": 100,
      "congestion": true
    }
  },
  "routing": {
    "strategy": "rules",
    "settings": {
      "rules": [
        {
          "type": "field",
          "ip": [
            "0.0.0.0/8",
            "10.0.0.0/8",
            "100.64.0.0/10",
            "127.0.0.0/8",
            "169.254.0.0/16",
            "172.16.0.0/12",
            "192.0.0.0/24",
            "192.0.2.0/24",
            "192.168.0.0/16",
            "198.18.0.0/15",
            "198.51.100.0/24",
            "203.0.113.0/24",
            "::1/128",
            "fc00::/7",
            "fe80::/10"
          ],
          "outboundTag": "blocked"
        },
        {
          "type": "field",
          "domain": [
            "openai.com",
            "*.openai.com"
          ],
          "outboundTag": "socks-out"
        }
      ]
    }
  }
}

• 非必须的配置调节

vim /etc/systemd/system/v2ray.service
[service]
#change use nobody to root 
User=root
#add env change V2RAY_VMESS_AEAD_FORCED to false
Environment="V2RAY_VMESS_AEAD_FORCED=false"

• 加载配置并启动 V2ray 服务

sudo systemctl daemon-reload # 如修改 service 服务配置则需重新加载
sudo systemctl enable v2ray.service # 配置开机自启动
sudo systemctl start v2ray.service

新增 Nginx 代理

server {
	listen 80 ;
	listen [::]:80 ;
	server_name v2ray.domain.com;
	if ($host = v2ray.domain.com) {
		return 301 https://$host$request_uri;
	}
	return 404;
}

server {
	listen 443 ssl http2;
	server_name dontoo.yousri.org;

	ssl_certificate /etc/letsencrypt/live/v2ray.domain.com/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/v2ray.domain.com/privkey.pem;
	include /etc/letsencrypt/options-ssl-nginx.conf;
	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

	location /gfw {
		proxy_redirect off;
		proxy_pass https://127.0.0.1:1088;
		proxy_http_version 1.1;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";
		proxy_set_header Host $http_host;
		proxy_intercept_errors on;
		error_page 400 = https://yousri.org/;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	}
}

安装 Cloudflare Warp 支持访问 ChatGPT

curl -fsSL https://pkg.cloudflareclient.com/pubkey.gpg | sudo gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ $(lsb_release -cs) main" \
| sudo tee /etc/apt/sources.list.d/cloudflare-client.list
sudo apt-get update && sudo apt-get install cloudflare-warp
warp-cli registration new
warp-cli mode proxy
warp-cli connect
curl --proxy 'socks5://127.0.0.1:40000' ipinfo.io