Jang go Tsenya Panel ya 3X-UI mo VPS

3X-UI ke panel ya web ya Xray-core. E go letlelela go laola di-inbound (VLESS, VMess, Trojan, Shadowsocks le tse dingwe), go ntsha dikgolagano tsa subscription, go baya meedi ya traffic le matlha a go fela, le go lebelela dikgolagano tsa nako e e ntseng jaanong ntle le go fetola JSON ka seatla. Bakeng sa batho ba ba setseng ba na le VPS, ke tsela e nngwe ya tse di bonako tsa go nna le stack ya proxy e e ka tlhokomelwang, e seng peakanyo ya nako e le nngwe e e sa kgoneng go ntšhwafadiwa morago ga dikgwedi tse thataro.

Kaelo e e kwetswe bakeng sa VPS e ntšha ya Ubuntu 22.04 kgotsa 24.04, e e tshwanang le di-image tse dintsi tsa Hiddence Linux morago ga go tshuba ga ntlha. Re tla tsenya kago ya MHSanaei 3X-UI e e dirisiwang thata, re fetole sephiri sengwe le sengwe sa default fa o tsena la ntlha, re baya panel kwa morago ga HTTPS, re bule fela di-port tse o di tlhokang tota, re tlhame inbound ya VLESS + Reality, mme re tsamaye ka di-app tsa client. Fa o setse o latetse athikele ya rona ya Marzban, mogopolo o a tshwana — panel e e mo godimo ga Xray — mme tsela ya go tsenya, peakanyo ya difaele, le tiro ya letsatsi le letsatsi di farologane, ka jalo o se ka wa tswakanya tse pedi mo server e le nngwe ntle le fa o itse sentle go kgaoganya di-port.

Ke ka ntlha yang 3X-UI go na le peakanyo e e tala ya Xray

Peakanyo e e tala ya Xray e siame bakeng sa modirisi a le mongwe le inbound e le nngwe. Fa o tsenya ditsala, o fetola di-key tsa Reality, kgotsa o tlhoka URL ya subscription e e ka tsenngwang ke mogala ka tobetsa e le nngwe, panel e boloka diiri. 3X-UI e boloka badirisi mo database ya selegae, e ka simolola Xray sesha ka tsela e e phepa morago ga diphetogo, mme e naya dashboard e e khutshwane ya traffic le maemo a online. Ga se lesira la go sa itsege ka bolona: lefelo la VPS, fingerprint ya TLS, mofuta wa inbound, le tshiamiso ya gago ya tiriso di santse di laola gore peakanyo e itshwara jang mo network.

• Web UI ya di-inbound, di-client, traffic le go fela go na le JSON e e fetotsweng ka seatla
• Dikgolagano tsa subscription tse di agilweng mo teng tsa v2rayN, v2rayNG, Streisand, Happ le di-client tse di tshwanang
• Tsenyo ka taelo e le nngwe mmogo le tsela e e kwadilweng ya ntšhwafatso
• E bereka sentle mo VPS e nnye (1 vCPU / 1 GB RAM e lekane bakeng sa tiriso ya gago)
• O nna le root mo server ya gago — panel ga e romele di-config kwa cloud ya motho yo mongwe

Se o se tlhokang pele ga o simolola

O se ka wa tlola dikarolo tsa domain le firewall. Panel e e tlogetsweng mo HTTP mo port 2053 ka password ya default e a tlhatlhobiwa ke di-bot mo diiring. Baakanya dilo tse, mme o golagane jaaka root (kgotsa modirisi wa sudo) ka SSH.

• VPS ya Linux e e nang le IPv4 address e e bulegileng (Ubuntu 22.04/24.04 e a kgothalediwa)
• Bonyane 1 GB RAM le 10 GB disk; 2 GB RAM e nna motlhofo fa o tsamaisa le ditirelo tse dingwe
• Pono ya root kgotsa sudo ka SSH
• Domain kgotsa subdomain e e bontshang A record kwa IP ya VPS (e a tlhokega bakeng sa setifikeiti se se siameng sa panel)
• Dikarolo tse 20–30, mmogo le nako ya go leta DNS fa o sa tswa go tlhama A record

Kgato 1: Ntšhwafatsa system mme o baya timezone

VPS e ntšha gantsi e nna le dintšhwafatso tsa tshireletso tse di saletseng le UTC jaaka nako. Ntšhwafatsa di-package pele gore installer e se ka ya lwantshana le OpenSSL kgotsa curl e e tsofetseng. Go baya timezone ga go tlhokege bakeng sa Xray ka boyona, mme go dira gore di-log tsa panel le matlha a go fela ga disetifikeiti di nne motlhofo go di bala.

ssh root@YOUR_VPS_IP

apt update && apt -y upgrade
apt -y install curl wget ca-certificates gnupg socat tar unzip

timedatectl set-timezone UTC
hostnamectl set-hostname panel

# Confirm DNS for your subdomain (should print your VPS IP):
dig +short panel.example.com

Kgato 2: Tsenya 3X-UI

Script ya semmuso ya go tsenya ya kago ya MHSanaei 3X-UI e tsaya release e ntšha, e tsenya Xray-core, e tlhama tirelo ya systemd mme e gatisitse URL ya go tsena la ntlha. Bala output ka kelotlhoko: e na le tsela e e sa solofelwang le username/password e e dirilweng. Di kopisetse ka bonako mo password manager. Fa script e botsa ka port ya panel, nna le 2053 kgotsa tlhopha port e kgolo e e sa dirisiweng; gopola fela yone bakeng sa kgato ya firewall.

bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh)

# After install, useful commands:
x-ui                    # interactive menu (start/stop/restart, reset, update)
systemctl status x-ui    # confirm the service is active
ss -tulpn | grep x-ui    # see which port the panel listens on

Kgato 3: Go tsena la ntlha le go nonotsha ka bonako

Bula URL e e gatisitsweng ke installer, gantsi http://YOUR_IP:2053/<tsela-e-e-sa-solofelwang>. Tsena ka dintlha tse di dirilweng, mme o ye kwa Panel Settings (kgotsa Configuration). Fetola username le password go tsa gago tse di kgethegileng. Fa panel e go letlelela go fetola tsela ya motheo ya web, dira jalo — tsela e telele e e sa solofelwang e kgaola palo e tona ya di-scan tsa tseleng. Baya port ya go reetsa fa o batla e e farologaneng le 2053. Boloka mme o simolole panel gape go tswa mo UI kgotsa ka systemctl restart x-ui, mme o tsene gape mo URL e ntšha.

Morago, tshuba two-factor authentication fa kago ya gago e e naya, mme o tima di-template tsa inbound tse o sa kitleng o di dirisa. Kwa ditlhophisong tsa Xray, tlogela version ya core e e tsileng le panel ntle le fa o na le lebaka le le kgethegileng la go tshwara kago e nngwe. O se ka wa senola panel mo port 80/443 jaanong fa di-port tseo di tla dirisiwa moragonyana ke Reality kgotsa reverse proxy — tlhopha leano le le lengwe mme o le tshwarelele.

• Emisetsa login ya admin e e dirilweng ka bonako
• Nna le tsela ya sephiri ya web; o se ka wa sutisa panel kwa /
• Rata port ya panel e e seng ya default mme o e kwale
• O se ka wa dirisa password e gape mo ditirelong tse dingwe

Kgato 4: Setifikeiti sa TLS sa panel

Di-browser di tla tlhagisa mo HTTP, mme go romela password ya admin ka mokwalo o o bulegileng mo network e e bulegileng ke mogopolo o o sa siamang. 3X-UI e ka kopa setifikeiti sa Let's Encrypt fa port 80 e gololesegile mme domain e bontsha VPS e. Mo panel, bula karolo ya setifikeiti / SSL, tsenya panel.example.com, mme o kope setifikeiti. Fa port 80 e setse e tserweng, dirisa tsela ya DNS-01 kgotsa baya Caddy/Nginx kwa pele mme o reverse-proxy kwa 127.0.0.1:2053.

# Quick check that port 80 is free before the panel ACME challenge:
ss -tulpn | grep ':80'

# If you terminate TLS on Caddy instead of inside 3X-UI:
# Caddyfile example (panel stays on 127.0.0.1:2053):
# panel.example.com {
#     reverse_proxy 127.0.0.1:2053
# }

Kgato 5: Tlhama inbound ya VLESS Reality

Mo Inbounds, tlhama inbound e ntšha. Default e e tiileng ya di-network tse dintsi ke VLESS le Reality le TCP. Tlhopha port e e seng ya panel — 443 e tlwaelegile fa go se sepe se se golagantsweng koo; go seng jalo dirisa port e kgolo ya TCP mme o nne o tshwana mo firewall. Dira UUID ya client ya ntlha, dira di-key pair tsa Reality mo UI, mme o baya dest / serverNames kwa ntlheng e e siameng e o letleletsweng go e etsisa (saete e e itsege e e tshegetsang TLS 1.3). Boloka inbound mme o netefatse gore Xray e reload ntle le diphoso mo di-log tsa panel.

Mme tsenya di-client tse dingwe mo inbound eo fa o di tlhoka: modirisi mongwe le mongwe o amogela UUID, email tag e e sa tlhokegeng, le moedi wa traffic kgotsa nako o o sa tlhokegeng. Kopisa kgolagano ya go golagana kgotsa URL ya subscription go tswa mo mola wa modirisi. O se ka wa gatisa dikgolagano tseo mo di-chat tse di bulegileng; di lekana le password.

# On the server, confirm Xray is listening on the inbound port (example: 443):
ss -tulpn | grep -E ':443|:2053'

# Follow Xray logs if a client cannot connect:
journalctl -u x-ui -f

Kgato 6: Firewall — di-port fela tse o di tlhokang

UFW mo Ubuntu e a lekana. Letlelela SSH pele gore o se ka wa itswalela ntle, mme port ya panel le port ya inbound. Fa o kopile setifikeiti sa Let's Encrypt go tswa mo panel, letlelela le 80/tcp ka nako ya go ntsha. Inbound ya Reality mo 443 e tlhoka 443/tcp (e seng panel mo port e e tshwanang).

ufw allow OpenSSH
ufw allow 2053/tcp comment '3x-ui panel (change if you picked another port)'
ufw allow 443/tcp comment 'VLESS Reality inbound'
# ufw allow 80/tcp comment 'only if panel ACME needs it'
ufw enable
ufw status verbose

Golaganya di-client

Mo Windows, v2rayN e ka tsenya kgolagano ya VLESS go tswa mo clipboard. Mo Android, v2rayNG kgotsa di-client tse di tshwanang tsa Xray di dira jalo go tswa mo QR code. Mo iOS, dirisa client e e tshegetsang VLESS Reality (sekao Streisand kgotsa Happ, go ikaega ka se se leng teng jaanong mo kgaolong ya gago). Morago ga go tsenya, tshuba profile mme o tlhole lenaane la online la panel. Fa client e nna offline, mabaka a a tlwaelegileng ke port e e fosagetseng, UDP e e tlogetsweng e tshubilwe mo inbound ya TCP fela, Reality serverName e e sa tshwaneng le dest, kgotsa firewall ya selegae mo laptop.

• Windows: v2rayN — tsenya kgolagano ya VLESS, baya routing jaaka o tlhoka (global kgotsa e e ikaegileng ka melao)
• Android: v2rayNG — scan QR go tswa mo tsebeng ya modirisi ya panel
• macOS / iOS: client e e nang le tshegetso ya VLESS + Reality; manega kgolagano e e tshwanang
• URL ya subscription: e tsenye mo client gore diphetogo tsa UUID di se ka tsa tlhoka go tsenngwa gape ka seatla

Dintšhwafatso, pabalelo le pabalesego ya go tsenya gape

Pele ga ntšhwafatso nngwe le nngwe ya panel, tsaya pabalelo go tswa mo UI (database + config). E boloke kwa ntle ga VPS. Dintšhwafatso gantsi ke x-ui mme kgetho ya update mo menu, kgotsa script e e tshwanang ya go tsenya e e lemogang tsenyo e e leng teng. Morago ga ntšhwafatso, netefatsa gore tirelo ya systemd e a bereka le gore di-inbound di santse di reetsa. Fa o tsenya OS gape, busetsa pabalelo mo panel go na le go tlhama UUID nngwe le nngwe ka seatla.

x-ui   # choose update when prompted, or:
# bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh)

# Backup files commonly live under /etc/x-ui/ — copy them off-box:
ls -la /etc/x-ui/
# Example offsite copy:
# scp -r /etc/x-ui/ you@backup-host:~/x-ui-backup-$(date +%F)/

Go rarabolola mathata

Bontsi jwa go palelwa ga letsatsi la ntlha ke DNS, di-port kgotsa masimo a Reality. Tsamaya lenaane le pele ga o tsenya panel gape. Go tsenya gape ntle le pabalelo ke tsela e batho ba latlhegelwang ke UUID nngwe le nngwe ya client.

• Ga o kgone go bula web UI: tlhola systemctl status x-ui, ss -tulpn, le UFW. Netefatsa gore o tsentse tsela ya sephiri mo URL.
• O lebetse password ya admin: tsamaisa x-ui mo server mme o dirise kgetho ya go busetsa.
• Client e golagana mme e ema: port ya inbound e thibetswe, kgotsa o tshubile UDP mo inbound ya TCP Reality.
• Diphoso tsa TLS mo panel: A record ya domain ga e ise e bontshe fa, kgotsa port 80 e tshwere ka nako ya ACME.
• Handshake ya Reality e a palelwa: dest/serverNames ga di tshwane, kgotsa tirelo e nngwe e setse e golagantswe mo 443.
• CPU e kwa godimo: di-inbound tse dintsi thata mo leano la 1 vCPU, kgotsa scan/flood mo port e e bulegileng — tlhola ss le palo ya online ya panel.

Dintlha tsa tshireletso tse di botlhokwa tota

Tshwara panel jaaka serweboleta sa admin sa production. E ka tlhama badirisi ba bantšha le go bala UUID nngwe le nngwe. Kgaola yo o ka fitlhelang port ya web: fa o na le IP e e tsitsitseng ya ofisi, letlelela IP eo fela mo UFW bakeng sa 2053/tcp. Nna le SSH mo di-key, e seng di-password. O se ka wa tsamaisa di-website tse di bulegileng tse di sa amaneng mo IP e e tshwanang fa o dirisa Reality mo 443 — di-stack tsa TLS tse di ganetsanang mo port e le nngwe ke motlhofo o o tlwaelegileng wa go kgaoga. Fetola password ya admin fa screenshot ya panel e kile ya tswa mo chat.

• Di-key tsa SSH fela; tima go tsena ka password morago ga gore di-key di bereke
• Kgaola port ya panel mo firewall fa o kgona
• Boloka /etc/x-ui kwa ntle ga server ka lenaneo
• O se ka wa abelana di-URL tsa subscription mo ditlhopheng tse di bulegileng tsa Telegram
• Leba disk: di-log le dipalopalo tsa traffic di gola mo inbound e e phuthaphuthang

Dikeletso tsa tiriso

• Inbound e le nngwe e e nang le di-client tse dintsi e motlhofo go e tsamaisa go na le di-inbound tse lesome tse di tshwanang
• Rea di-client ka sedirisiwa (laptop-anna, phone-ben) gore ditshwantsho tsa traffic di nne le bokao
• Fa o tlhoka le reverse proxy ya website, baya saete mo IP e nngwe kgotsa port e nngwe — o se ka wa lwantsha Reality bakeng sa 443
• Morago ga restart nngwe le nngwe ya x-ui, testa client e le nngwe pele ga o tlogela SSH session
• Bala changelog pele ga o ntšhwafatsa; tlola go tlolela 'latest' mo Labotlhano bosigo

Jaanong o na le 3X-UI e e tsentshitsweng jaaka tirelo ya systemd, URL ya admin e e tswaletsweng, TLS mo panel, inbound ya VLESS Reality, melao ya firewall e e tshwanang le di-port tseo, le mokgwa wa pabalelo. Tsenya di-client go tswa mo tsebeng ya inbound, tsenya kgolagano mo sedirisiweng sengwe le sengwe, mme o ntšhwafatse panel fela morago ga pabalelo. Fa sengwe se senyega, menu ya x-ui mo VPS ke tsela ya go busetsa — e seng go tsenya gape ka botlalo.