🔒 1984 VPN — Open Source VPN Infrastructure

Freedom of information. Privacy by design. Named after George Orwell's dystopian novel as a symbol of resistance against censorship.

---

📖 About

1984 VPN is a self-hosted commercial VPN service infrastructure built for the Russian-speaking market. This repository contains the complete documentation, configuration templates, and deployment guides for running a production-ready VPN business using:

• Marzban — open source VPN panel
• VLESS + Reality (XRay) — DPI-resistant protocol that bypasses Roskomnadzor blocking
• Hetzner — European hosting infrastructure
• Telegram — distribution channel and admin interface

Why VLESS+Reality?

WireGuard and OpenVPN are actively blocked by Russian DPI (Deep Packet Inspection). VLESS+Reality masks VPN traffic as regular HTTPS, making it virtually undetectable and unblockable.

---

🌐 Ecosystem & Integrations

Service	Purpose	Link
Tegro.Money	Payment processing & balance top-up	tegro.money
Libermall Marketplace	VPN key distribution & sales	libermall.com
Tegro.money	Business portal	tegro.money

💳 Balance top-up is available via Tegro.Money API — supporting TON, USDT, and other cryptocurrencies without KYC.

🛒 VPN key distribution is available through Libermall Marketplace — buy and sell activation codes.

---

🏗️ Architecture

┌─────────────────────────────────────────────────┐
│                  CLIENT LAYER                    │
│  Telegram Bot  │  Web Dashboard  │  API          │
└────────────────────────┬────────────────────────┘
                         │
┌────────────────────────▼────────────────────────┐
│              MASTER SERVER (Hetzner)             │
│  Marzban Panel  │  Caddy Proxy  │  SQLite DB     │
│  panel.1984vpn.com                               │
└────────────────────────┬────────────────────────┘
                         │ Marzban Node Protocol
┌────────────────────────▼────────────────────────┐
│               EDGE NODE (Hetzner)                │
│  XRay Core  │  VLESS+Reality  │  No Logs        │
│  "Dirty transit" — expendable if compromised     │
└─────────────────────────────────────────────────┘

Three-Server Design Philosophy

Server	Role	What it runs
Master	Brain	Marzban panel, SQLite DB, Caddy reverse proxy
Telegram Bot	Sales	Customer bot on Railway (aiogram 3)
Edge Node	Traffic	XRay, VLESS+Reality, zero logs

The Edge Node is intentionally isolated — it never knows who users are, only passes encrypted traffic. If seized, no user data is exposed.

---

⚡ Quick Start

See the full deployment guide in the Wiki.

Prerequisites

• 2× Hetzner VPS (CX22, Ubuntu 24.04, Helsinki)
• Domain name (e.g. 1984vpn.com) on Cloudflare
• Telegram Bot token from @BotFather

1. Deploy Master Server

# Install Marzban
sudo bash -c "$(curl -sL https://github.com/Gozargah/Marzban-scripts/raw/master/marzban.sh)" @ install

# Create admin
marzban cli admin create --sudo

# Install Caddy
apt install -y caddy

2. Configure Caddy (SSL Reverse Proxy)

cat > /etc/caddy/Caddyfile << 'EOF'
panel.yourdomain.com {
    reverse_proxy localhost:8000
}
EOF
systemctl restart caddy

3. Configure Marzban

Add to /opt/marzban/.env:

TELEGRAM_API_TOKEN = "your_bot_token"
TELEGRAM_ADMIN_ID = your_telegram_id

4. Deploy Edge Node

sudo bash -c "$(curl -sL https://github.com/Gozargah/Marzban-scripts/raw/master/marzban-node.sh)" @ install

Place the SSL client certificate from your Marzban panel (Download certificate button) at:

/var/lib/marzban-node/ssl_client_cert.pem

5. Configure VLESS+Reality

Generate keys on master:

docker exec marzban-marzban-1 xray x25519

Add to Marzban Core Settings (JSON):

{
  "inbounds": [{
    "tag": "VLESS TCP REALITY",
    "listen": "0.0.0.0",
    "port": 2053,
    "protocol": "vless",
    "streamSettings": {
      "network": "tcp",
      "security": "reality",
      "realitySettings": {
        "dest": "yahoo.com:443",
        "serverNames": ["yahoo.com"],
        "privateKey": "YOUR_PRIVATE_KEY",
        "shortIds": ["abcd1234"]
      }
    }
  }]
}

---

💰 Monetization

Payment Options

• Telegram Stars — native Telegram payment, no KYC
• TON / USDT — crypto via Tegro.Money
• Activation codes — sell on Libermall Marketplace

Business Model

• Free trial → Paid subscription (monthly/yearly)
• Referral program (2-level)
• White-label for partners (custom bot token)
• Promo codes for marketplace distribution

---

📱 Client Apps

Platform	App	Protocol
iOS	V2Box / Streisand	VLESS+Reality
Android	V2RayNG	VLESS+Reality
Windows	v2rayN / Hiddify	VLESS+Reality
macOS	FoXray / V2Box	VLESS+Reality

---

🗂️ Repository Structure

1984vpn/
├── docs/               # Documentation
│   ├── deployment.md   # Full deployment guide
│   ├── node-setup.md   # Edge node setup
│   └── bot-setup.md    # Telegram bot setup
├── configs/            # Configuration templates
│   ├── Caddyfile       # Caddy reverse proxy config
│   ├── xray-config.json # XRay/VLESS configuration
│   └── marzban.env     # Environment variables template
├── bot/                # Customer Telegram bot (Railway)
│   ├── bot.py          # Main bot file
│   ├── requirements.txt
│   └── Procfile
└── README.md

---

📊 Capacity Planning

CX22 Edge Node (~€7/mo)	Users
Light users (5 GB/mo)	~4000
Average users (30 GB/mo)	~650
Heavy users (100 GB/mo)	~200

Scale horizontally by adding edge nodes in different locations.

---

🔐 Security Notes

• Edge nodes are "dirty transit" — no user data, expendable
• Master server should never be the edge node
• Use Cloudflare proxy for panel domain (hides real IP)
• Rotate edge node IPs periodically if blocked
• SSL certificates auto-renewed via Caddy + Let's Encrypt

---

📄 License

MIT License — see LICENSE

---

🔗 Links

🌐 Website	tegro.money
💳 Payments	tegro.money
🛒 Marketplace	libermall.com
📢 Telegram	@defiton