Zero‑Touch Deployment for 3x‑ui • VLESS + Trojan + TLS + Nginx 444 + Fail2ban
VPN Fortress — fully automated, hardened deployment script for 3x‑ui, designed to create a censorship‑resistant, production‑grade VPN node in a single command.
Fortress Edition (V7.0) — optimized for stealth, reliability, and high‑performance traffic
This script is designed for a fully automated (Zero-Touch) installation of the 3x-ui panel on a clean Ubuntu server. The result is a ready-to-use, bulletproof architecture for bypassing censorship, completely eliminating the need to manually configure tunnels and certificates.
| Feature | Description |
|---|---|
| 🔐 Auto TLS + DB Injection | Let's Encrypt certificate issued and injected directly into 3x‑ui SQLite — no ERR_SSL_PROTOCOL_ERROR |
| 🛰 Dual‑Protocol Stack | VLESS/TLS (443) + hidden Trojan‑WS (8022) with automatic Xray fallback routing |
| 🎭 Camouflage Mode | Random corporate HTML template deployed to /var/www/html — server looks like a normal website |
| 🛡 Nginx 444 Firewall | Unknown hosts get instant HTTP 444 (connection drop) — blocks bots, scanners, CDN spoofing |
| 👮 Fail2ban Protection | Blocks SSH bruteforce attacks out of the box (5 retries = 1 hour IP ban) |
| 🧹 Log Management | Limits systemd journal logs to 100MB / 10 days to prevent server disk overflow |
| 📞 VoIP Support | Properly routes UDP (QUIC) traffic to ensure flawless audio/video calls |
| 🔧 Hardened Panel | Random username, password, port (20k–25k), hidden base path — all written directly to DB |
| 💾 Daily Backups | Cron job snapshots x-ui.db with 7‑day retention |
| ⚡ Zero‑Touch Install | Fully automatic with domain (install.sh YOUR_DOMAIN), or interactive mode if run without arguments |
- A completely clean Ubuntu server (20.04, 22.04, or 24.04).
- A registered domain pointing to the IP address of your new server (A-record).
- Open ports 80 and 443 in your cloud provider's external firewall (Security Groups).
At the end of the process, the script will output the following directly to your console:
- A secure HTTPS link to access your 3x-ui web panel, along with the generated login and password.
- A ready-to-use vless:// link for your primary high-speed connection.
- A ready-to-use trojan:// link for your hidden fallback tunnel.
Connect to your server via SSH as the root user and run the following command:
curl -fsSL https://raw.githubusercontent.com/fdoo24/3x-ui-autoinstall/refs/heads/main/install.sh | bashwget -qO install.sh https://raw.githubusercontent.com/fdoo24/3x-ui-autoinstall/refs/heads/main/install.sh && bash install.shУстановка ноды для MySuperVPN 2:
curl -fsSL https://raw.githubusercontent.com/fdoo24/3x-ui-autoinstall/refs/heads/main/setup_node.sh | bash