3x-ui + VLESS REALITY 单节点部署教程

1
services:
2
  xray:
3
    image: teddysun/xray:26.7.11
4
    container_name: xray
5
    restart: unless-stopped
6
    environment:
7
      - TZ=Asia/Shanghai
8
      - SUB_URL=https://<VPS_IP>:<SUB_PORT>/sub/<SUB_ID>
9
      - PROXY_PORT=<PROXY_PORT>
10
    ports:
11
      - "<PROXY_PORT>:<PROXY_PORT>"
12
    entrypoint: ["/bin/sh", "-c"]
13
    command:
14
      - |
15
        set -e
16
        echo "fetching subscription: $$SUB_URL"
17
        SUB=$$(wget --no-check-certificate -O - "$$SUB_URL") || { echo "wget failed"; exit 1; }
18
        echo "raw length: $${#SUB}"
19
        DECODED=$$(echo "$$SUB" | base64 -d 2>/dev/null || echo "$$SUB")
20
        VLESS_URL=$$(echo "$$DECODED" | grep "^vless://" | head -1)
21
        [ -z "$$VLESS_URL" ] && { echo "no vless node"; echo "$$DECODED" | head -5; exit 1; }
22
        echo "node: $${VLESS_URL%%\?*}"
23
        URL="$${VLESS_URL#vless://}"
24
        URL="$${URL%%#*}"
25
        UUID="$${URL%%@*}"
26
        URL="$${URL#*@}"
27
        HOST="$${URL%%:*}"
28
        URL="$${URL#*:}"
29
        PORT="$${URL%%\?*}"
30
        PARAMS="$${URL#*\?}"
31
        gp() { echo "$$PARAMS" | tr '&' '\n' | grep "^$$1=" | cut -d'=' -f2; }
32
        FLOW=$$(gp flow); SECURITY=$$(gp security); SNI=$$(gp sni)
33
        PBK=$$(gp pbk); SID=$$(gp sid); FP=$$(gp fp); TYPE=$$(gp type)
34
        echo "host=$$HOST port=$$PORT sni=$$SNI flow=$$FLOW sid=$$SID fp=$${FP:-chrome}"
35
        cat > /etc/xray/config.json << EOF
36
        {
37
          "log": { "loglevel": "warning" },
38
          "inbounds": [{
39
            "tag": "mixed-in",
40
            "listen": "0.0.0.0",
41
            "port": $$PROXY_PORT,
42
            "protocol": "mixed",
43
            "settings": { "udp": true },
44
            "sniffing": { "enabled": true, "destOverride": ["http", "tls"] }
45
          }],
46
          "outbounds": [
47
            {
48
              "tag": "proxy",
49
              "protocol": "vless",
50
              "settings": {
51
                "vnext": [{
52
                  "address": "$$HOST",
53
                  "port": $$PORT,
54
                  "users": [{"id": "$$UUID", "flow": "$$FLOW", "encryption": "none"}]
55
                }]
56
              },
57
              "streamSettings": {
58
                "network": "$${TYPE:-tcp}",
59
                "security": "$$SECURITY",
60
                "realitySettings": {
61
                  "serverName": "$$SNI",
62
                  "fingerprint": "$${FP:-chrome}",
63
                  "publicKey": "$$PBK",
64
                  "shortId": "$$SID",
65
                  "spiderX": "/"
66
                }
67
              }
68
            },
69
            { "tag": "direct", "protocol": "freedom" }
70
          ],
71
          "routing": {
72
            "domainStrategy": "IPIfNonMatch",
73
            "rules": [
74
              { "type": "field", "ip": ["$$HOST/32", "geoip:private"], "outboundTag": "direct" },
75
              { "type": "field", "domain": ["geosite:cn"], "outboundTag": "direct" },
76
              { "type": "field", "ip": ["geoip:cn"], "outboundTag": "direct" }
77
            ]
78
          }
79
        }
80
        EOF
81
        echo "config written, starting xray"
82
        exec xray run -c /etc/xray/config.json
83
    logging:
84
      driver: json-file
85
      options:
86
        max-size: 10m
87
        max-file: "3"