중국 황금방패 뚫는 VPN 3대장 직접 설치하기

sudo iptables -F && sudo iptables -X && sudo netfilter-persistent save && sudo netfilter-persistent reload

sudo apt update -y && sudo apt install nano curl -y 

sudo usermod -aG docker $USER

cd

nano docker-compose.yml

version: "3"
services:
  wireguard:
    image: linuxserver/wireguard
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asis/Seoul
      - SERVERPORT=51820 #optional
      - PEERS=1 #optional
      - PEERDNS=auto #optional
    volumes:
      - ./appdata/config:/config
      - /lib/modules:/lib/modules
    ports:
      - 51820:51820/udp
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped


  v2ray:
    image: teddysun/v2ray
    container_name: v2ray
    volumes:
      - ./v2ray:/etc/v2ray
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    environment:
      - V2RAY_VMESS_AEAD_FORCED=false
    ports:
      - 51821:51821
      - 51822:51822

cat /proc/sys/kernel/random/uuid

$ cat /proc/sys/kernel/random/uuid
ee615b4a-67d4-40af-95b0-eda861814f33

mkdir v2ray

nano ./v2ray/config.json

{
"log" : {
    "access": "/etc/v2ray/access.log",
    "error": "/etc/v2ray/error.log",
    "loglevel": "warning"
    },
"inbounds": [
    {
    "port": 51821,
    "protocol": "vmess",
    "settings": {
        "clients": [
            {
        "id": "생성된 UUID 붙여넣으면 됩니다",
        "level": 0,
        "alterId": 100
            }
        ]
        }
    },
    {
    "port":51822,
    "protocol":"shadowsocks",
    "settings":{
    "method":"aes-128-gcm",
    "password":"shadowsocks용 비밀번호"
    }
    }
    ],
"outbounds": [
    {
    "protocol": "freedom",
    "settings": {}
    },
    {
    "protocol":"blackhole",
    "settings":{},
    "tag":"blocked"
    }
    ],
"routing":{
    "rules":[{
    "type":"field",
    "ip":["geoip:private"],
    "outboundTag":"blocked"
    }]
    }
}

"id": "ee615b4a-67d4-40af-95b0-eda861814f33",

docker compose up -d

~$ docker compose up -d
Creating network "sammy_default" with the default driver
Pulling wireguard (linuxserver/wireguard:)...
latest: Pulling from linuxserver/wireguard
a0648e14f3d7: Pull complete
8f32220516a1: Pull complete
272a6146d1eb: Pull complete
8f6670fd7afe: Pull complete
08940ef2634d: Pull complete
8909d7b7a74f: Pull complete
Digest: sha256:d28973a4fe4f873d1af8238c61b4120411449a4eff8c51913504a5771c051a5b
Status: Downloaded newer image for linuxserver/wireguard:latest
Pulling v2ray (v2fly/v2fly-core:)...
latest: Pulling from v2fly/v2fly-core
df20fa9351a1: Pull complete
326f265b50a0: Pull complete
a5ff762995cc: Pull complete
2c6b146db8e1: Pull complete
5f8017a3d958: Pull complete
Digest: sha256:d5f0f332564a791cda755a7ed52123d0fd37fd2b7843ec3d6d05b4474762bd9e
Status: Downloaded newer image for v2fly/v2fly-core:latest
Creating wireguard ... done
Creating v2ray     ... done

sudo bash -c "$(wget -qO- https://raw.githubusercontent.com/Jigsaw-Code/outline-server/master/src/server_manager/install_scripts/install_server.sh)"

~$ sudo bash -c "$(wget -qO- https://raw.githubusercontent.com/Jigsaw-Code/outline-server/master/src/server_manager/install_scripts/install_server.sh)"
> Verifying that Docker is installed .......... OK
> Verifying that Docker daemon is running ..... OK
> Creating persistent state dir ............... OK
> Generating secret key ....................... OK
> Generating TLS certificate .................. OK
> Generating SHA-256 certificate fingerprint .. OK
> Writing config .............................. OK
> Starting Shadowbox .......................... OK
> Starting Watchtower ......................... OK
> Waiting for Outline server to be healthy .... OK
> Creating first user ......................... OK
> Adding API URL to config .................... OK
> Checking host firewall ...................... BLOCKED
OK


CONGRATULATIONS! Your Outline server is up and running.


To manage your Outline server, please copy the following line (including curly
brackets) into Step 2 of the Outline Manager interface:


{"apiUrl":"https://34.64.85.175:25228/5g4WxTQ8KGMHQgybOvTRbw","certSha256":"71F58631C4FDBCC8677A38EEA2D6A570B43859CE6B38FEE6E39699BCD7EE8A78"}


You won’t be able to access it externally, despite your server being correctly
set up, because there's a firewall (in this machine, your router or cloud
provider) that is preventing incoming connections to ports 25228 and 13776.


Make sure to open the following ports on your firewall, router or cloud provider:
- Management port 25228, for TCP
- Access key port 13776, for TCP and UDP

{"apiUrl":"https://34.64.85.175:25228/5g4WxTQ8KGMHQgybOvTRbw","certSha256":"71F58631C4FDBCC8677A38EEA2D6A570B43859CE6B38FEE6E39699BCD7EE8A78"}

- Management port 25228, for TCP
- Access key port 13776, for TCP and UDP

sudo ufw allow 22/tcp
sudo ufw allow 13776/tcp
sudo ufw allow 13776/udp
sudo ufw allow 25228/tcp
sudo ufw allow 51820/udp
sudo ufw allow 51821/tcp
sudo ufw allow 51822/tcp

sudo firewall-cmd --permanent --add-port=22/tcp
sudo firewall-cmd --permanent --add-port=13776/tcp
sudo firewall-cmd --permanent --add-port=13776/udp
sudo firewall-cmd --permanent --add-port=25228/tcp
sudo firewall-cmd --permanent --add-port=51820/udp
sudo firewall-cmd --permanent --add-port=51821/tcp
sudo firewall-cmd --permanent --add-port=51822/tcp
sudo firewall-cmd --reload

sudo cat appdata/config/peer1/peer1.conf

~$ sudo cat appdata/config/peer1/peer1.conf
[Interface]
Address = 10.13.13.2
PrivateKey = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
ListenPort = 51820
DNS = 10.13.13.1


[Peer]
PublicKey = yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
Endpoint = 134.164.185.75:51820
AllowedIPs = 0.0.0.0/0, ::/0

docker compose logs wireguard