Automated VPN SaaS Infrastructure

🇷🇺 Читать на русском

An automated infrastructure for deploying and managing a VPN service using Marzban, Xray (VLESS/Reality), and a Telegram Bot for automated billing and user provisioning.

Architecture & Tech Stack

• Core VPN: Xray-core with XTLS-Reality protocol for DPI evasion.
• Management Panel: Marzban (Dockerized).
• Reverse Proxy: Caddy (handles web traffic routing and SSL).
• Automation Bot: Python 3.11, Aiogram 3, YooKassa API (payments).
• Infrastructure as Code: Docker Compose, Bash scripting.

Features

• 🔐 VLESS/Reality Configuration: Secure outbound proxy setup bypassing modern blockades.
• 💳 Automated Billing: Integration with YooKassa for seamless subscription purchases.
• 🤖 Telegram Bot Management: Users can buy subscriptions, get guides, and retrieve their connection strings automatically.
• 🐳 Containerized Setup: Easy deployment via Docker Compose and reverse proxy routing via Caddy UNIX sockets.

Repository Structure

• /infrastructure - Docker Compose, Caddyfile, and sanitized Xray core configurations.
• /bot - Source code for the Telegram billing and management bot.
• /scripts - Bash tools for manual user management and automated UUID generation.
• /docs - Bot logic diagrams and user flow documentation.

Note: For security reasons, all .env files, production database dumps, and real cryptographic keys have been sanitized from this repository.