3x-UI 面板安装
2026-03-05
bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh)
部署ssl证书时 最好是使用80端口
FinalShell：https://www.hostbuf.com/t/988.html✅3X-UI面板：https://github.com/MHSanaei/3x-ui
安装3X-UI面板命令
bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh)
安装过程中询问设置面板端口
Would you like to customize the Panel Port settings? (If not, a random port will be applied) [y/n]:
输入n或回车，随机生成端口
输入y，自定义端口，安全方面建议高位端口40000-65535
如果后面无法打开面板地址，要放行端口：比如端口1234，输入命令：ufw allow 1234
②设置面板SSL证书
═══════════════════════════════════════════ SSL Certificate Setup (MANDATORY) ═══════════════════════════════════════════ For security, SSL certificate is required for all panels. Let's Encrypt now supports both domains and IP addresses! Choose SSL certificate setup method: 1. Let's Encrypt for Domain (90-day validity, auto-renews) 2. Let's Encrypt for IP Address (6-day validity, auto-renews) 3. Custom SSL Certificate (Path to existing files) Note: Options 1 & 2 require port 80 open. Option 3 requires manual paths.
项目最近更新，为提高面板安全性，会先默认设置面板SSL证书。提供3种SSL证书部署方式：
1. Let’s Encrypt for Domain (90-day validity, auto-renews)：
域名Let’s Encrypt免费证书，90天有效期，会自动续期。需要提前在cloudflare解析到服务器ip，一定要关闭小云朵，否则申请证书会失败（DNS 仅解析）2. Let’s Encrypt for IP Address (6-day validity, auto-renews)
IP地址（推荐，更简单）：Let’s Encrypt免费证书，6天有效期，会自动续期3. Custom SSL Certificate (Path to existing files)
自有证书（不推荐，复杂）：上传到证书对应文件夹
Do you have an IPv6 address to include? (leave empty to skip):
询问是否包含IPv6 地址也申请证书，没有IPv6，直接回车跳过
Port to use for ACME HTTP-01 listener (default 80):
ACME HTTP-01 监听器要用哪个端口，回车默认80端口
③保存面板信息
═══════════════════════════════════════════ Panel Installation Complete! ═══════════════════════════════════════════ Username: JgOr5n58R Password: IZkvvlA25xy Port: 41257 WebBasePath: 7fPm0VT2VFLfxLbUtr Access URL: https://97.100.100.35:41457/7fPm0VT2VFLfxLbUtr ═══════════════════════════════════════════ ⚠ IMPORTANT: Save these credentials securely! ⚠ SSL Certificate: Enabled and configured
Username：用户名
Password：密码
Port：端口
WebBasePath：路径
Aceess URL：面板访问地址
④开启BBR加速
输入命令x-ui，进入3X-UI管理菜单，选择数字23，选择两次1，Enable BBR
Please enter your selection [0-25]: 23 1. Enable BBR 2. Disable BBR 0. Back to Main Menu Choose an option: 1
⑤防火墙设置
输入命令x-ui，进入3X-UI管理菜单，选择数字21，进入防火墙设置界面
Please enter your selection [0-25]: 21 1. Install Firewall 2. Port List [numbered] 3. Open Ports 4. Delete Ports from List 5. Enable Firewall 6. Disable Firewall 7. Firewall Status 0. Back to Main Menu
1. Install Firewall #安装防火墙ufw
2. Port List [numbered] #查看防火墙已经放行的监视端口
3. Open Ports #打开放行端口
4. Delete Ports from List #删除关闭已放行端口
5. Enable Firewall #启动防火墙
6. Disable Firewall #禁用防火墙
7. Firewall Status #查看防火墙状态
0. Back to Main Menu #返回主菜单
3x-UI面板设置
①登录面板：https://域名或ip:端口/根路径
如果没有创建SSL证书，会提示：安全警报，此连接不安全。在激活TLS进行数据保护之前，请勿输入敏感信息。
②点击【面板设置常规】
面板url根路径：让访问地址更短，前后要加/
面板监听端口：可以更改
更改后重启面板生效
③点击【安全设定】
可以更改用户名和密码
④添加节点：点击入站列表》添加入站
组合1：vless+TCP+Reality
备注：随意
协议：选择vless
端口：随机
传输：选择TCP
安全：选reality
Dest（Target）/SNI：改成yahoo.com、tesla.com、amd.com
点击【Get New Cert】获取公钥和私钥
组合2：vless+XHTTP+Reality
备注：随意
协议：选择vless
端口：随机
传输：选择XHTTP
路径：任意设置，英文
安全：选reality
Dest（Target）/SNI：改成yahoo.com、tesla.com、amd.com
点击【Get New Cert】获取公钥和私钥
客户端配置
扫描二维码、或复制粘贴链接导入客户端
Windows（v2rayN）：https://github.com/2dust/v2rayN/releases （下载v2rayN-windows-64-SelfContained.zip版）
Android（v2rayNG）：https://github.com/2dust/v2rayNG/releases
Mac（v2rayN）：https://github.com/2dust/v2rayN/releases
IOS（shadowrocket）：https://apps.apple.com/app/shadowrocket/id932747118
免费安装shadowrocket方法：https://freechao.com/9054.html