Skip to main content

Linux服务器搭建一个https节点

  1. 下载

    wget -q4O /usr/local/bin/ycycxz-sing-box https://ycycxz.com/dl/ycycxz-sing-box-linux-amd64
    chmod +x /usr/local/bin/ycycxz-sing-box
    mkdir -p /etc/ycycxz-sing-box
    ycycxz-sing-box version
  2. 配置

    端口 用户名 密码

    域名记录解析 80端口不能被占用

    /etc/ycycxz-sing-box/ycycxz.json
    cat <<EOF > /etc/ycycxz-sing-box/ycycxz.json
    {
    "inbounds": [
    {
    "type": "http",
    "listen_port": 42324,
    "users": [
    {
    "username": "ycycxz",
    "password": "ycycxz"
    }
    ],
    "tls": {
    "enabled": true,
    "acme": {
    "domain": "https.ycycxz.com",
    "data_directory": "/etc/ycycxz-sing-box/"
    }
    }
    }
    ]
    }
    EOF
  3. 无密码

    /etc/ycycxz-sing-box/ycycxz.json
    cat <<EOF > /etc/ycycxz-sing-box/ycycxz.json
    {
    "inbounds": [
    {
    "type": "http",
    "listen_port": 42324,
    "tls": {
    "enabled": true,
    "acme": {
    "domain": "https.ycycxz.com",
    "data_directory": "/etc/ycycxz-sing-box/"
    }
    }
    }
    ]
    }
    EOF
  4. 自签证书

    /etc/ycycxz-sing-box/ycycxz.json
    cat <<EOF > /etc/ycycxz-sing-box/ycycxz.json
    {
    "inbounds": [
    {
    "type": "http",
    "listen_port": 42324,
    "users": [
    {
    "username": "ycycxz",
    "password": "ycycxz"
    }
    ],
    "tls": {
    "enabled": true,
    "certificate": "-----BEGIN CERTIFICATE-----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\nXgY=\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN RSA PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgt36SxMpUv4aLph8u\nTlXBkJ0335IjkcOFkpeQ1l8vGauhRANCAAR2XD9fFv2i/d9pWwpM8Lp5kQmpVcII\nu0TxNVULwX61icOOlzTIRIks0hWMsl5g3oEs6sO97Sq4+0gwmHWL4hyb\n-----END RSA PRIVATE KEY-----\n"
    }
    }
    ]
    }
    EOF
  5. 自签证书无密码

    /etc/ycycxz-sing-box/ycycxz.json
    cat <<EOF > /etc/ycycxz-sing-box/ycycxz.json
    {
    "inbounds": [
    {
    "type": "http",
    "listen_port": 42324,
    "tls": {
    "enabled": true,
    "certificate": "-----BEGIN CERTIFICATE-----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\nXgY=\n-----END CERTIFICATE-----\n",
    "key": "-----BEGIN RSA PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgt36SxMpUv4aLph8u\nTlXBkJ0335IjkcOFkpeQ1l8vGauhRANCAAR2XD9fFv2i/d9pWwpM8Lp5kQmpVcII\nu0TxNVULwX61icOOlzTIRIks0hWMsl5g3oEs6sO97Sq4+0gwmHWL4hyb\n-----END RSA PRIVATE KEY-----\n"
    }
    }
    ]
    }
    EOF
  6. systemd

    cat <<EOF > /etc/systemd/system/ycycxz-sing-box.service
    [Unit]
    Description=ycycxz-sing-box
    After=network-online.target

    [Service]
    LimitAS=infinity
    LimitNOFILE=infinity
    LimitNPROC=infinity
    TasksMax=infinity
    ExecStart=/usr/local/bin/ycycxz-sing-box run -c /etc/ycycxz-sing-box/ycycxz.json

    [Install]
    WantedBy=multi-user.target
    EOF
    systemctl daemon-reload
    systemctl enable ycycxz-sing-box
  7. 启动

    systemctl start ycycxz-sing-box
    #systemctl status ycycxz-sing-box
  8. 卸载

    systemctl stop ycycxz-sing-box
    rm /etc/systemd/system/ycycxz-sing-box.service
    systemctl daemon-reload
    rm -rf /etc/ycycxz-sing-box
    rm -f /usr/local/bin/ycycxz-sing-box
  9. 客户端

    用户名 密码 测试小火煎 proxifier adspower browser等

  10. 视频教程