#X-ui面板安装
stty erase ^H
apt update -y
apt install -y curl socat
bash <(curl -Ls https://raw.githubusercontent.com/vaxilu/x-ui/master/install.sh) 

#离线安装命令
cd /root/
rm x-ui/ /usr/local/x-ui/ /usr/bin/x-ui -rf
tar zxvf x-ui-linux-amd64.tar.gz
chmod +x x-ui/x-ui x-ui/bin/xray-linux-* x-ui/x-ui.sh
cp x-ui/x-ui.sh /usr/bin/x-ui
cp -f x-ui/x-ui.service /etc/systemd/system/
mv x-ui/ /usr/local/
systemctl daemon-reload
systemctl enable x-ui
systemctl restart x-ui

#安装trojan
apt-get install trojan
#apt-get --purge remove trojan

#修改trojan服务配置文件，
vim /lib/systemd/system/trojan.service
User=nobody 改为 User=root

#常用命令
systemctl start trojan
systemctl stop trojan
systemctl restart trojan
systemctl enable trojan
systemctl disable trojan
systemctl status trojan

#生成自建证书，复制到trojan目录
openssl req -x509 -newkey rsa:4096 -nodes -out cert.pem -keyout key.pem -days 36500
cp cert.pem key.pem /etc/trojan

#申请证书，复制到trojan目录
ufw allow 80
ufw allow 443
apt install socat
curl https://get.acme.sh | sh
~/.acme.sh/acme.sh --register-account -m 邮箱
~/.acme.sh/acme.sh  --issue -d 域名   --standalone
cd /root/.acme.sh/域名
cp 域名.key fullchain.cer /etc/trojan

#编辑trojan配置文件，修改端口密码和证书路径，默认使用自建证书
vim /etc/trojan/config.json

{
    "run_type": "server",
    "local_addr": "0.0.0.0",
    "local_port": 9622,
    "remote_addr": "127.0.0.1",
    "remote_port": 80,
    "password": [
        "l1icznxqwhD&53J^"
    ],
    "log_level": 1,
    "ssl": {
        "cert": "/etc/trojan/cert.pem",   //fullchain.cer
        "key": "/etc/trojan/key.pem",  //域名.key
        //"sni": "域名",
        "key_password": "",
        "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384",
        "cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",
        "prefer_server_cipher": true,
        "alpn": [
            "http/1.1"
        ],
        "alpn_port_override": {
            "h2": 81
        },
        "reuse_session": true,
        "session_ticket": false,
        "session_timeout": 600,
        "plain_http_response": "",
        "curves": "",
        "dhparam": ""
    },
    "tcp": {
        "prefer_ipv4": false,
        "no_delay": true,
        "keep_alive": true,
        "reuse_port": false,
        "fast_open": false,
        "fast_open_qlen": 20
    },
    "mysql": {
        "enabled": false,
        "server_addr": "127.0.0.1",
        "server_port": 3306,
        "database": "trojan",
        "username": "trojan",
        "password": "",
        "key": "",
        "cert": "",
        "ca": ""
    }
}