feat(init): init

2019-11-06 10:58:06 +08:00 · 2019-11-06 10:58:06 +08:00 · 40e064b2c8
commit 40e064b2c8
12 changed files with 724 additions and 0 deletions
--- a/.idea/workspace.xml
+++ b/.idea/workspace.xml
@ -0,0 +1,138 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ChangeListManager">
+    <list default="true" id="4fe3faa1-f146-4e59-967f-8e274313fba6" name="Default Changelist" comment="" />
+    <ignored path="$PROJECT_DIR$/.tmp/" />
+    <ignored path="$PROJECT_DIR$/temp/" />
+    <ignored path="$PROJECT_DIR$/tmp/" />
+    <option name="EXCLUDED_CONVERTED_TO_IGNORED" value="true" />
+    <option name="SHOW_DIALOG" value="false" />
+    <option name="HIGHLIGHT_CONFLICTS" value="true" />
+    <option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
+    <option name="LAST_RESOLUTION" value="IGNORE" />
+  </component>
+  <component name="FileEditorManager">
+    <leaf />
+  </component>
+  <component name="FindInProjectRecents">
+    <findStrings>
+      <find>jerry-ap/v2ray-network</find>
+    </findStrings>
+    <replaceStrings>
+      <replace>mack-a/v2ray-agent</replace>
+    </replaceStrings>
+  </component>
+  <component name="Git.Settings">
+    <option name="RECENT_GIT_ROOT_PATH" value="$PROJECT_DIR$" />
+  </component>
+  <component name="IdeDocumentHistory">
+    <option name="CHANGED_PATHS">
+      <list>
+        <option value="$PROJECT_DIR$/README.md" />
+      </list>
+    </option>
+  </component>
+  <component name="ProjectFrameBounds" extendedState="6">
+    <option name="x" value="79" />
+    <option name="y" value="-697" />
+    <option name="width" value="1280" />
+    <option name="height" value="697" />
+  </component>
+  <component name="ProjectLevelVcsManager" settingsEditedManually="true" />
+  <component name="ProjectView">
+    <navigator proportions="" version="1">
+      <foldersAlwaysOnTop value="true" />
+    </navigator>
+    <panes>
+      <pane id="ProjectPane">
+        <subPane>
+          <expand>
+            <path>
+              <item name="v2ray-agent" type="b2602c69:ProjectViewProjectNode" />
+              <item name="v2ray-agent" type="462c0819:PsiDirectoryNode" />
+            </path>
+          </expand>
+          <select />
+        </subPane>
+      </pane>
+      <pane id="Scope" />
+    </panes>
+  </component>
+  <component name="PropertiesComponent">
+    <property name="JavaScriptLanguageLevel" value="ES6" />
+    <property name="JavaScriptWeakerCompletionTypeGuess" value="true" />
+    <property name="WebServerToolWindowFactoryState" value="false" />
+    <property name="ignore_missing_gitignore" value="true" />
+    <property name="last_opened_file_path" value="$PROJECT_DIR$" />
+    <property name="nodejs_interpreter_path.stuck_in_default_project" value="$USER_HOME$/.nvm/versions/node/v6.10.0/bin/node" />
+    <property name="nodejs_npm_path_reset_for_default_project" value="true" />
+    <property name="settings.editor.selected.configurable" value="Errors" />
+  </component>
+  <component name="RunDashboard">
+    <option name="ruleStates">
+      <list>
+        <RuleState>
+          <option name="name" value="ConfigurationTypeDashboardGroupingRule" />
+        </RuleState>
+        <RuleState>
+          <option name="name" value="StatusDashboardGroupingRule" />
+        </RuleState>
+      </list>
+    </option>
+  </component>
+  <component name="SvnConfiguration">
+    <configuration />
+  </component>
+  <component name="TaskManager">
+    <task active="true" id="Default" summary="Default task">
+      <changelist id="4fe3faa1-f146-4e59-967f-8e274313fba6" name="Default Changelist" comment="" />
+      <created>1573007543792</created>
+      <option name="number" value="Default" />
+      <option name="presentableId" value="Default" />
+      <updated>1573007543792</updated>
+      <workItem from="1573007546616" duration="991000" />
+    </task>
+    <servers />
+  </component>
+  <component name="TimeTrackingManager">
+    <option name="totallyTimeSpent" value="991000" />
+  </component>
+  <component name="ToolWindowManager">
+    <frame x="79" y="-697" width="1280" height="697" extended-state="6" />
+    <editor active="true" />
+    <layout>
+      <window_info id="Favorites" side_tool="true" />
+      <window_info active="true" content_ui="combo" id="Project" order="0" visible="true" weight="0.2494043" />
+      <window_info id="Structure" order="1" side_tool="true" weight="0.25" />
+      <window_info anchor="bottom" id="Docker" show_stripe_button="false" />
+      <window_info anchor="bottom" id="Version Control" />
+      <window_info anchor="bottom" id="Terminal" />
+      <window_info anchor="bottom" id="Event Log" side_tool="true" />
+      <window_info anchor="bottom" id="Message" order="0" />
+      <window_info anchor="bottom" id="Find" order="1" />
+      <window_info anchor="bottom" id="Run" order="2" />
+      <window_info anchor="bottom" id="Debug" order="3" weight="0.4" />
+      <window_info anchor="bottom" id="Cvs" order="4" weight="0.25" />
+      <window_info anchor="bottom" id="Inspection" order="5" weight="0.4" />
+      <window_info anchor="bottom" id="TODO" order="6" />
+      <window_info anchor="right" id="Commander" internal_type="SLIDING" order="0" type="SLIDING" weight="0.4" />
+      <window_info anchor="right" id="Ant Build" order="1" weight="0.25" />
+      <window_info anchor="right" content_ui="combo" id="Hierarchy" order="2" weight="0.25" />
+    </layout>
+  </component>
+  <component name="TypeScriptGeneratedFilesManager">
+    <option name="version" value="1" />
+  </component>
+  <component name="UnknownFeatures">
+    <option featureType="com.intellij.fileTypeFactory" implementationName="*.md" />
+  </component>
+  <component name="editorHistoryManager">
+    <entry file="file://$PROJECT_DIR$/README.md">
+      <provider selected="true" editor-type-id="text-editor">
+        <state relative-caret-position="22">
+          <caret line="1" column="46" lean-forward="true" selection-start-line="1" selection-end-line="1" selection-end-column="46" />
+        </state>
+      </provider>
+    </entry>
+  </component>
+</project>
--- a/README.md
+++ b/README.md
@ -0,0 +1,355 @@
+# v2ray-network
+本项目旨在更好的学习新知识，采用CDN+TLS+Nginx+v2ray进行伪装并突破防火墙。
+
+# 技能点列表
+- [bandwagonhost[centos7]链接一](https://bandwagonhost.com)
+- [bandwagonhost[centos7]链接二](https://bwh1.net)【境外vps或者其他vps厂商】
+- [cloudflare](cloudflare.com)【CDN】
+- [godaddy](https://www.godaddy.com/)【域名厂商】
+- [letsencrypt](https://letsencrypt.org/)【HTTPS】
+- [Nginx](https://www.nginx.com/)【反向代理】
+- [v2ray](v2ray.com)【代理工具】
+
+# 1.准备工作
+## 1.注册[cloudflare](cloudflare.com)
+## 2.注册[godaddy](https://www.godaddy.com/)并购买域名
+- 域名可选择xyz结尾的国际域名，可采用多字符乱码的方式组合域名，(比如wk1c.xyz)首年大概8RMB左右，第二年可以直接买一个新的。
+
+## 3.修改godaddy域名的DNS解析
+### 1.登录cloudflare，添加域名
+<img src="https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/cloudflare.png" width=400>
+
+### 2.选择套餐
+- 如果仅仅只享受科学上网功能，选择free即可
+- 如果需要更好的网络环境、更快的速度，可选择相应的套餐
+<img src="https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/cloudflare_plan.png" width=400>
+
+### 3.根据提示修改godaddy的dns解析
+- cloudflare提示界面
+<img src="https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/cloudflare_dns.png" width=400>
+
+- godaddy DNS管理，根据上面的cloudflare提示界面修改为相应的dns
+<img src="https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/godayddy_dns.png" width=400>
+
+## 4.增加cloudflare域名解析
+- 添加域名解析(记录)，可以选择二级域名，这样就可以一个月解析到不同的服务器，name填写你要解析的二级域名的host部分，比如ls.example.com 只填写ls即可
+<img src="https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/cloudflare_record_dns.png" width=400>
+
+## 5.修改godaddy SSL/TLS
+- 如果vps选择使用https，需要把类型修改为Full
+<img src="https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/cloudflare_tls.png" width=400>
+
+# 2.vps配置Nginx、https
+## 1.安装Nginx
+```
+yum install nginx
+```
+## 2.nginx配置文件
+
+- 1.下载配置文件并替换默认文件
+```
+cd /etc/nginx&&rm -rf /etc/nginx/nginx.conf&&wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/config/nginx.conf
+# 如果缺少wget 则执行下面的命令，然后重复上面的命令
+yum install wget
+```
+- 将下载好的文件中关于ls.xxx.xyz的内容都替换成你的二级域名
+
+## 3.生成https
+
+- 1.安装acme.sh
+```
+curl https://get.acme.sh | sh
+% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
+                               Dload  Upload   Total   Spent    Left  Speed
+100   671  100   671    0     0    680      0 --:--:-- --:--:-- --:--:--   679
+% Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
+                               Dload  Upload   Total   Spent    Left  Speed
+100  112k  100  112k    0     0   690k      0 --:--:-- --:--:-- --:--:--  693k
+[Fri 30 Dec 01:03:32 GMT 2016] Installing from online archive.
+[Fri 30 Dec 01:03:32 GMT 2016] Downloading https://github.com/Neilpang/acme.sh/archive/master.tar.gz
+[Fri 30 Dec 01:03:33 GMT 2016] Extracting master.tar.gz
+[Fri 30 Dec 01:03:33 GMT 2016] Installing to /home/user/.acme.sh
+[Fri 30 Dec 01:03:33 GMT 2016] Installed to /home/user/.acme.sh/acme.sh
+[Fri 30 Dec 01:03:33 GMT 2016] Installing alias to '/home/user/.profile'
+[Fri 30 Dec 01:03:33 GMT 2016] OK, Close and reopen your terminal to start using acme.sh
+[Fri 30 Dec 01:03:33 GMT 2016] Installing cron job
+no crontab for user
+no crontab for user
+[Fri 30 Dec 01:03:33 GMT 2016] Good, bash is found, so change the shebang to use bash as preferred.
+[Fri 30 Dec 01:03:33 GMT 2016] OK
+[Fri 30 Dec 01:03:33 GMT 2016] Install success!
+```
+
+- 2.生成https证书
+```
+# 替换ls.xxx.xyz为自己的域名
+sudo ~/.acme.sh/acme.sh --issue -d ls.xxx.xyz --standalone -k ec-256
+
+# 如果提示Please install socat tools first.则执行，安装完成后继续重复执行上面的命令
+yum install socat
+```
+
+- 3.安装证书
+```
+# 替换ls.xxx.xyz为自己的域名
+~/.acme.sh/acme.sh --installcert -d ls.xxx.xyz --fullchainpath /etc/nginx/ls.xxx.xyz.crt --keypath /etc/nginx/ls.xxx.xyz.key --ecc
+```
+
+- 4.修改/etc/nginx/nginx.conf
+```
+# 将下面这部分前面的#去掉，并将ssl_certificate、ssl_certificate_key修改成自己的路径
+
+# ssl on;
+# ssl_certificate /etc/nginx/ls.xx.xyz.crt;
+# ssl_certificate_key /etc/nginx/ls.xx.xyz.key;
+# ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+# ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
+# ssl_prefer_server_ciphers on;
+```
+
+- 5.每一次生成https证书后有效期只有三个月，需要快过期时更新（剩余七天内可以重新生成）
+```
+# 替换ls.xxx.xyz为自己的域名
+sudo ~/.acme.sh/acme.sh --renew -d ls.xxx.xyz --force --ecc
+```
+
+# 3.配置v2ray
+## 1.安装v2ray
+
+```
+bash <(curl -L -s https://install.direct/go.sh)
+```
+
+## 2.v2ray配置文件
+
+- 下载config_ws_tls.json
+```
+cd&&wget https://raw.githubusercontent.com/mack-a/v2ray-agent/master/config/config_ws_tls.json
+```
+
+- 配置文件的id可以自己生成一个新的，替换即可
+```
+/usr/bin/v2ray/v2ctl  uuid
+```
+
+## 3.启动v2ray
+```
+/usr/bin/v2ray/v2ray -config ./config_ws_tls.json&
+```
+
+# 4.客户端
+## 1.MacOS
+- 下载V2RayU[点我下载](https://github.com/yanue/V2rayU/releases/download/1.4.1/V2rayU.dmg)
+- 下载后打开，服务器设置，修改address即可
+<img src="https://raw.githubusercontent.com/mack-a/v2ray-agent/master/fodder/v2rayU_服务器配置.png" width=400>
+
+- pac设置，添加下面的链接
+```
+https://raw.githubusercontent.com/gfwlist/gfwlist/master/gfwlist.txt
+```
+
+- 选择使用Pac模式，即可
+## 2.windows
+- 下载v2rayN[点我下载](https://github.com/2dust/v2rayN/releases/download/2.44/v2rayN.zip)
+- 使用方法 [点我查看](https://github.com/233boy/v2ray/wiki/V2RayN%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B)
+
+<hr/>
+<h3>到这里就配置完成，可以测试是否能上被q的网站</h3>
+<hr/>
+
+# 5.其余设置
+## 1.开机自启
+### 1.配置Nginx开机自启
+- 创建service文件
+```
+cd /etc/systemd/system&&touch nginxReboot.service
+```
+
+- 将下面内容复制到/etc/systemd/system/nginxReboot.service
+```
+[Unit]
+Description=nginx - high performance web server
+After=network.target remote-fs.target nss-lookup.target
+
+[Service]
+Type=forking
+PIDFile=/run/nginx.pid
+Environment=PATH=/root/.nvm/versions/node/v12.8.1/bin:/usr/bin/v2ray/:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin
+ExecStartPre=/usr/sbin/nginx -t -c /etc/nginx/nginx.conf
+ExecStart=/usr/sbin/nginx -c /etc/nginx/nginx.conf
+ExecReload=/usr/sbin/nginx -s reload
+ExecStop=/usr/sbin/nginx -s stop
+ExecQuit=/usr/sbin/nginx -s quit
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target
+```
+
+- 设置开机自启
+```
+sudo systemctl enable nginxReboot.service
+```
+- 可能出现的错误
+```
+# 可能会出现 (13: Permission denied) while connecting to upstream:[nginx]
+// 解决方法 执行下面的命令
+setsebool -P httpd_can_network_connect 1
+```
+
+### 2.配置v2ray_ws_tls开机自启
+- 创建service文件
+```
+cd /etc/systemd/system&&touch v2ray_ws_tls.service
+```
+
+- 将下面内容复制到/etc/systemd/system/v2ray_ws_tls.service
+```
+[Unit]
+Description=V2Ray WS TLS Service
+After=network.target
+Wants=network.target
+
+[Service]
+Type=simple
+PIDFile=/run/v2rayWSTLS.pid
+ExecStart=/usr/bin/v2ray/v2ray -config /root/config_ws_tls.json
+Restart=on-failure
+# Don't restart in the case of configuration error
+RestartPreventExitStatus=23
+
+[Install]
+WantedBy=multi-user.target
+```
+- 设置开机自启
+```
+sudo systemctl enable v2ray_ws_tls.service
+```
+### 3.测试开机自启是否成功
+- 重启vps
+```
+reboot
+```
+- 重启后查看程序是否正常启动
+```
+# 执行下方命令查看v2ray是否启动
+ps -ef|grep v2ray
+
+root      4533     1  0 03:03 ?        00:00:00 /usr/bin/v2ray/v2ray -config /root/config_ws_tls.json
+root      4560  1287  0 03:04 pts/0    00:00:00 grep --color=auto v2ray
+
+# 执行下方命令查看nginx是否启动，
+ps -ef|grep nginx
+``
+root       762     1  0 02:20 ?        00:00:00 nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
+nginx      763   762  0 02:20 ?        00:00:00 nginx: worker process
+root      4562  1287  0 03:04 pts/0    00:00:00 grep --color=auto nginx
+```
+# 6.异常处理
+## 1.偶尔断流
+- 修改cloudflare Firwall Rules->create a Firewall rule
+- - 设置Field:URI path
+- - 设置：value:/v2
+- - Choose an action:Allow
+
+# 7.开启Centos bbr拥塞控制算法[我的测试机是centos 8]
+## 1.检查是否安装bbr
+- 有一些vps会自带bbr模块 比如搬瓦工的某些机器，执行下面命令
+```
+lsmod | grep bbr
+```
+- 如果输出类似内容则已经开启bbr 到这里就可以结束了
+```
+tcp_bbr                20480  28
+```
+## 2.yum更新
+```
+yum update
+```
+## 3.查看系统版本
+- 执行下面命令
+```
+cat /etc/redhat-release
+```
+
+- 如果release后面的数字大于7.3即可
+```
+CentOS Linux release 7.7.1908 (Core)
+```
+## 4.安装elrepo并升级内核
+- 分别依次执行下面命令
+```
+rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
+rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-2.el7.elrepo.noarch.rpm
+yum --enablerepo=elrepo-kernel install kernel-ml -y
+```
+- 正常情况下会输出下面内容
+```
+Transaction Summary
+================================================================================
+Install  1 Package
+Total download size: 39 M
+Installed size: 169 M
+Downloading packages:
+kernel-ml-4.9.0-1.el7.elrepo.x86_64.rpm                    |  39 MB   00:00
+Running transaction check
+Running transaction test
+Transaction test succeeded
+Running transaction
+Warning: RPMDB altered outside of yum.
+  Installing : kernel-ml-4.9.0-1.el7.elrepo.x86_64                          1/1
+  Verifying  : kernel-ml-4.9.0-1.el7.elrepo.x86_64                          1/1
+Installed:
+  kernel-ml.x86_64 0:4.9.0-1.el7.elrepo
+Complete!
+```
+## 5.更新grud文件并重启
+- 依次执行下面的命令，重启后需要等待数秒重新使用ssh连接
+```
+egrep ^menuentry /etc/grub2.cfg | cut -f 2 -d \'
+grub2-set-default 0
+reboot
+```
+## 6.开机后检查内容是否为4.9及以上版本
+- 执行下面的命令
+```
+uname -r
+```
+- 输出结果
+```
+5.3.7-1.el7.elrepo.x86_64
+```
+## 7.开启bbr
+- 执行下面的命令
+```
+vim /etc/sysctl.conf
+```
+- 添加如下内容
+```
+net.core.default_qdisc = fq
+net.ipv4.tcp_congestion_control = bbr
+```
+- 加载系统参数
+```
+sysctl -p
+```
+## 8.验证bbr是否开启成功
+### 测试方法1
+- 执行下面的命令
+```
+sysctl net.ipv4.tcp_available_congestion_control
+```
+- 输出下面内容即为成功
+```
+net.ipv4.tcp_available_congestion_control = bbr cubic reno
+```
+
+### 测试方法2
+- 执行下面的命令
+```
+lsmod | grep bbr
+```
+- 输出下面内容即为成功
+```
+tcp_bbr                20480  28
+```
--- a/config/config_ws_tls.json
+++ b/config/config_ws_tls.json
@ -0,0 +1,79 @@
+{
+  "log": {
+    "access": "",
+    "error": "",
+    "loglevel": "debug"
+  },
+  "stats": {},
+  "api": {
+    "services": [
+      "StatsService"
+    ],
+    "tag": "api"
+  },
+  "policy": {
+    "levels": {
+      "1": {
+        "handshake": 4,
+        "connIdle": 300,
+        "uplinkOnly": 2,
+        "downlinkOnly": 5,
+        "statsUserUplink": false,
+        "statsUserDownlink": false
+      }
+    },
+    "system": {
+      "statsInboundUplink": true,
+      "statsInboundDownlink": true
+    }
+  },
+  "allocate": {
+    "strategy": "always",
+    "refresh": 5,
+    "concurrency": 3
+  },
+  "inbounds": [
+    {
+      "port": 31290,
+      "listen": "127.0.0.1",
+      "protocol": "vmess",
+      "settings": {
+        "clients": [
+          {
+            "id": "a4f7ef9b-6951-2397-098d-bb1e660b3805",
+            "alterId": 64,
+            "level": 1,
+            "email": "xxx_ls_ws_username@v2ray.com"
+          }
+        ]
+      },
+      "streamSettings": {
+        "network": "ws",
+        "wsSettings": {
+          "path": "/v2"
+        }
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "freedom",
+      "settings": {
+      }
+    }
+  ],
+  "routing": {
+    "settings": {
+      "rules": [
+        {
+          "inboundTag": [
+            "api"
+          ],
+          "outboundTag": "api",
+          "type": "field"
+        }
+      ]
+    },
+    "strategy": "rules"
+  }
+}
--- a/config/nginx.conf
+++ b/config/nginx.conf
@ -0,0 +1,88 @@
+# For more information on configuration, see:
+#   * Official English Documentation: http://nginx.org/en/docs/
+#   * Official Russian Documentation: http://nginx.org/ru/docs/
+
+user nginx;
+worker_processes auto;
+error_log /var/log/nginx/error.log;
+pid /run/nginx.pid;
+
+# Load dynamic modules. See /usr/share/nginx/README.dynamic.
+include /usr/share/nginx/modules/*.conf;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile            on;
+    tcp_nopush          on;
+    tcp_nodelay         on;
+    keepalive_timeout   65;
+    types_hash_max_size 2048;
+
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+    # Load modular configuration files from the /etc/nginx/conf.d directory.
+    # See http://nginx.org/en/docs/ngx_core_module.html#include
+    # for more information.
+    include /etc/nginx/conf.d/*.conf;
+
+   server {
+       	listen       80;
+       	listen       [::]:80;
+       	server_name  ls.xxx.xyz; # 这里需要修改为你的
+       	root         /usr/share/nginx/html;
+
+        # Load configuration files for the default server block.
+       	include /etc/nginx/default.d/*.conf;
+
+       	location / {
+       	}
+   	    location ~ /.well-known {
+        	allow all;
+        }
+        error_page 404 /404.html;
+            location = /40x.html {
+        }
+
+        error_page 500 502 503 504 /50x.html;
+            location = /50x.html {
+        }
+   }
+    #server {
+        #	listen 80;
+        #	server_name ls.xxx.xyz;
+        #	return 301 https://$host$request_uri;
+    #}
+    server {
+	    listen 443 ssl;
+        # ssl_certificate /etc/nginx/ls.xx.xyz.crt;
+        # ssl_certificate_key /etc/nginx/ls.xx.xyz.key;
+        # ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+        # ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
+        # ssl_prefer_server_ciphers on;
+        server_name ls.xxx.xyz; # 这里需要修改
+        location / {
+        }
+        location /v2 {
+            proxy_redirect off;
+            proxy_pass http://127.0.0.1:31290;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            # proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header Host $host;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        }
+
+    }
+}
--- a/fodder/cloudflare.png
+++ b/fodder/cloudflare.png
--- a/fodder/cloudflare_dns.png
+++ b/fodder/cloudflare_dns.png
--- a/fodder/cloudflare_plan.png
+++ b/fodder/cloudflare_plan.png
--- a/fodder/cloudflare_record_dns.png
+++ b/fodder/cloudflare_record_dns.png
--- a/fodder/cloudflare_tls.png
+++ b/fodder/cloudflare_tls.png
--- a/fodder/godayddy_dns.png
+++ b/fodder/godayddy_dns.png
--- a/fodder/v2rayU_服务器配置.png
+++ b/fodder/v2rayU_服务器配置.png
--- a/install.sh
+++ b/install.sh
@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+export PATH="/usr/bin/:#$PATH"
+nginxStatus=false
+v2rayStatus=false
+httpsStatus=false
+# todo 先完善正常步骤
+initNginx(){
+    echo -e '\033[36m   检查Nginx中... \033[0m'
+    existProcessNginx=`ps -ef|grep nginx|grep -v grep`
+    existNginx=`command -v nginx`
+    if [ -z "$existProcessNginx" ] && [ -z "$existNginx" ]
+    then
+        echo '安装Nginx中，如遇到是否安装输入y'
+        yum update
+        yum install nginx
+        echo '步骤二：Nginx安装成功，执行下一步'
+        installV2Ray
+    else
+        # todo
+        echo '检查到Nginx存在，是否停止并卸载，输入y/Y确认：'
+        read -e unstallStatus
+        if [[ $unstallStatus -eq "y" ||  $unstallStatus -eq "Y" ]]
+        then
+            echo '卸载'
+        else
+            echo '不卸载，停止脚本'
+        fi
+    fi
+}
+installHttps(){
+    echo 'https'
+}
+installV2Ray(){
+    echo -e '\033[36m   检查V2Ray中... \033[0m'
+
+}
+checkOS(){
+    systemVersion=`cat /etc/redhat-release|grep CentOS|awk '{print $1}'`
+    if [ -n "$systemVersion" ] && [ "$systemVersion" == "CentOS" ]
+    then
+        echo ''
+        echo -e '\033[35m步骤一：系统为CentOS，执行下一步 \033[0m'
+        return 1
+    else
+        echo '目前仅支持Centos'
+    fi
+}
+init(){
+    echo -e "\033[35m此脚本会执行以下内容: \033[0m"
+    echo -e "\033[36m  1.检查系统版本是否为CentOS \033[0m"
+    echo -e "\033[36m  2.检测nginx是否安装并配置 \033[0m"
+    echo -e "\033[36m  3.检测https是否安装并配置 \033[0m"
+    echo -e "\033[36m  4.检测V2Ray是否安装并配置 \033[0m"
+    echo -e "\033[35m是否进入手动模式y，键入回车进入自动模式: \033[0m"
+    read -e automatic
+    if [ "$automatic" = "y" ]
+    then
+        echo '手动模式'
+    else
+        checkOS
+        echo "$?"
+    fi
+}
+init