Home

Jump to bottom

Billionaire DendiBoss edited this page Apr 12, 2026 · 2 revisions

1984 VPN — Self-Hosted Infrastructure Wiki

Stack

Protocol: VLESS+Reality (XRay) — bypasses Roskomnadzor DPI
Hosting: Hetzner Helsinki CX22
Panel: Self-hosted VPN management panel
Proxy: Caddy (auto SSL)
Distribution: Telegram bot + Libermall
Payments: Telegram Stars + Tegro.Money

Quick Deploy

# 1. Master server
sudo bash -c "$(curl -sL https://github.com/Gozargah/Marzban-scripts/raw/master/marzban.sh)" @ install
apt install -y caddy

# 2. Edge node
sudo bash -c "$(curl -sL https://github.com/Gozargah/Marzban-scripts/raw/master/marzban-node.sh)" @ install

# 3. Open ports on edge
ufw --force enable && ufw allow 22 && ufw allow 62050 && ufw allow 62051 && ufw allow 2053 && ufw reload

Key Lessons

Port 443 conflicts with Caddy — use 2053 for VLESS
Node cert must be ssl_client_cert.pem from panel's Download certificate button
Always use SERVICE_PROTOCOL: "rest" in node docker-compose
Never use nano for configs — use heredoc cat > file << 'EOF'
UFW via Termius: always ufw --force enable

Docs