容器配置

v2ray【弃用，改用xray】

docker compose

services:
  v2fly:
    image: ghcr.io/v2fly/v2ray:latest-extra
    container_name: v2ray
    restart: unless-stopped
    ports:
      - "60000:60000"
    volumes:
      - /opt/v2ray/config:/etc/v2ray:ro
      - /opt/v2ray/share:/opt/v2ray/share
      - /opt/v2ray/logs:/var/log/v2ray

反向代理配置

location / {
    proxy_pass http://127.0.0.1:60000; 
    proxy_set_header Host $host; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header REMOTE-HOST $remote_addr; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection "upgrade"; 
    proxy_set_header X-Forwarded-Proto $scheme; 
    proxy_set_header X-Forwarded-Port $server_port; 
    proxy_http_version 1.1; 
    add_header X-Cache $upstream_cache_status; 
    proxy_ssl_server_name off; 
    proxy_ssl_name $proxy_host; 
}

xray

docker compose

services:
  xray:
    image: ghcr.io/xtls/xray-core
    container_name: xray
    restart: unless-stopped
    ports:
      - "61000:61000"
      - "61001:61001"
    volumes:
      - /opt/xray/config:/usr/local/etc/xray
      - /opt/xray/share:/usr/local/share/xray
      - /opt/xray/logs:/var/log/xray

反向代理配置

location / {
    proxy_pass http://127.0.0.1:61000; 
    proxy_set_header Host $host; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header REMOTE-HOST $remote_addr; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection "upgrade"; 
    proxy_set_header X-Forwarded-Proto $scheme; 
    proxy_set_header X-Forwarded-Port $server_port; 
    proxy_http_version 1.1; 
    add_header X-Cache $upstream_cache_status; 
    proxy_ssl_server_name off; 
    proxy_ssl_name $proxy_host; 
}

derper

docker compose

services:
  derper:
    image: fredliang/derper:latest
    container_name: derper
    restart: unless-stopped
    entrypoint: ["/app/derper"]
    command:
      - "--hostname=us1.derp.1vmp.com"
      - "--certmode=manual"
      - "--certdir=/app/certs"
      - "--a=:443"
      - "--stun=true"
      - "--stun-port=3478"
      - "--http-port=80"
      - "--verify-clients=true"
    ports:
      - "9080:80/tcp"
      - "9443:443/tcp"
      - "3478:3478/udp"
    volumes:
      - /var/run/tailscale/tailscaled.sock:/var/run/tailscale/tailscaled.sock
      - /opt/derper/certs:/app/certs
      - /opt/derper/data:/var/lib/derper

证书申请脚本

cd /opt/derper/certs
mv fullchain.pem us1.derp.1vmp.com.crt
mv privkey.pem us1.derp.1vmp.com.key
docker restart derper

asf-bot

docker compose

version: "3.8"

services:
  asf-bot:
    image: ghcr.io/chr233/asf-bot:latest
    container_name: asf-bot
    restart: unless-stopped
    network_mode: host

    volumes:
      - /opt/asf-bot/config:/app/config:ro
      - /opt/asf-bot/logs:/app/logs

使用 host 模式以便接入 tailscale