关于自建隧道爬长城的一些笔记

域名：

static点xiaolizhi点top

不对外售

下载解压 trojan-go到/root/trojan目录下

cd /root/trojan

安装acme:

curl https://get.acme.sh | sh

安装socat:

apt install socat 或者yum install socat

添加软链接:

ln -s /root/.acme.sh/acme.sh /usr/local/bin/acme.sh

注册账号:

acme.sh --register-account -m sbpkdyx@gmail.com

开放80端口:

ufw allow 80

申请证书:

acme.sh --issue -d 38.xiaolizhi.top --standalone -k ec-256 --debug

安装证书:

acme.sh --installcert -d 38.xiaolizhi.top --ecc --key-file /root/trojan/server.key --fullchain-file /root/trojan/server.crt

如果默认CA无法颁发，则可以切换下列CA:请修改成--
切换 Let's Encrypt:

acme.sh --set-default-ca --server letsencrypt

下面这两个不可用
切换Buypass:

acme.sh -set-default-ca -server buypass

切换ZeroSSL:

acme.sh-set-default-ca -server zerossl

证书配置

CertConfig:
CertMode: dns
CertDomain: "speed.xiaolizhi.top"
CertFile: /etc/XrayR/cert/speed.xiaolizhi.top.cert
KeyFile: /etc/XrayR/cert/speed.xiaolizhi.top.key
Provider: hurricane
Email: sbpkdyx@gmail.com
DNSEnv:
HE_USERNAME: your_he_username
HE_PASSWORD: your_he_password

ControllerConfig:
ListenIP: 0.0.0.0 # IP address you want to listen
UpdatePeriodic: 60 # Time to update the nodeinfo, how many sec.
EnableDNS: false # Enable custom DNS config, Please ensure that you set the dns.json well
CertConfig:
CertMode: dns # Option about how to get certificate: none, file, http, tls, dns. Choose "none" will forcedly disable the tls config.
CertDomain: "speed.xiaolizhi.top" # Domain to cert
CertFile: /etc/XrayR/cert/speed.xiaolizhi.top.cert # Provided if the CertMode is file
KeyFile: /etc/XrayR/cert/speed.xiaolizhi.top.key
Provider: cloudflare # DNS cert provider, Get the full support list here: https://go-acme.github.io/lego/dns/
Email: sbpkdyx@gmail.com
DNSEnv: # DNS ENV option used by DNS provider
CLOUDFLARE_EMAIL: ******
CLOUDFLARE_API_KEY: *****