{"id":40405,"date":"2020-02-27T11:53:14","date_gmt":"2020-02-27T03:53:14","guid":{"rendered":"http:\/\/4563.org\/?p=40405"},"modified":"2020-02-27T11:53:14","modified_gmt":"2020-02-27T03:53:14","slug":"%e5%8e%9f%e5%88%9b-%e8%ae%a9trojan%e5%92%8c-lnmp-oneinstack%e5%85%b1%e5%ad%98%e7%9a%84%e6%96%b9%e6%b3%95","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=40405","title":{"rendered":"[\u539f\u521b] \u8ba9Trojan\u548c LNMP\/oneinstack\u5171\u5b58\u7684\u65b9\u6cd5"},"content":{"rendered":"\n

\t\t\t\t\tnic2013<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

[\u539f\u521b] \u8ba9Trojan\u548c LNMP\/oneinstack\u5171\u5b58\u7684\u65b9\u6cd5<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 nic2013 \u4e8e 2020-2-27 11:27 \u7f16\u8f91 <\/p>\n

\u6838\u5fc3\u5185\u5bb9\uff1a\u8ba9 Trojan\u76d1\u542c\u975e443\u7aef\u53e3\u3002<\/p>\n

\u65b0\u5efa\u4e00\u4e2a vhost \u8ba9 LNMP\/oneinstack \u81ea\u52a8\u7533\u8bf7\u597d Let’s Encrypt \u8bc1\u4e66\u3002<\/p>\n

\u4fee\u6539 vhost \u9ed8\u8ba4\u914d\u7f6e\u6587\u4ef6\u3002<\/p>\n

server
      {
      listen 80;
      server_name www.hostloc.com hostloc.com;<\/p>\n

    root \/data\/wwwroot\/default;
    index index.html index.htm index.php;
}<\/p>\n

\u5728 \/usr\/local\/nginx\/conf\/nginx.conf\u7684 http \u5b57\u6bb5\u6dfb\u52a0\u5982\u4e0b\u4ee3\u7801<\/p>\n

    log_formatmain’$remote_addr – $remote_user [$time_local] "$request" ‘
                      ‘$status $body_bytes_sent "$http_referer" ‘
                      ‘"$http_user_agent" "$http_x_forwarded_for"’;<\/p>\n

\/usr\/local\/nginx\/sbin\/nginx -t \u6d4b\u8bd5\u4e00\u4e0b\uff0c\u65e0\u8bef\u540e service nginx restart<\/p>\n

\u8ba9 Trojan\u76d1\u542c\u975e443\u7aef\u53e3\uff0c\u6bd4\u5982\u76d1\u542c90\u7aef\u53e3\u3002<\/p>\n

cd \/usr\/src \u76ee\u5f55\uff0c\u4e0b\u8f7d Trojan \u670d\u52a1\u7aef https:\/\/github.com\/trojan-\u9ad8\u5899\/trojan\/releases\/download\/v1.14.1\/trojan-1.14.1-linux-amd64.tar.xz<\/p>\n

\u89e3\u538b tar xf trojan-1.14.1-linux-amd64.tar.xz<\/p>\n

\u5728 \/usr\/src\/trojan \u76ee\u5f55\u65b0\u5efa\u4e00\u4e2a server.conf \u914d\u7f6e\u6587\u4ef6<\/p>\n

{
    "run_type": "server",
    "local_addr": "0.0.0.0",
    "local_port": 90,
    "remote_addr": "127.0.0.1",
    "remote_port": 80,
    "password": [
      "password1"
    ],
    "log_level": 1,
    "ssl": {
      "cert": "\/usr\/local\/nginx\/conf\/ssl\/\u8bc1\u4e66\u5b9e\u9645\u8def\u5f84.crt",
      "key": "\/usr\/local\/nginx\/conf\/ssl\/\u8bc1\u4e66\u5b9e\u9645\u8def\u5f84.key",
      "key_password": "",
      "cipher_tls13":"TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",
"prefer_server_cipher": true,
      "alpn": [
            "http\/1.1"
      ],
      "reuse_session": true,
      "session_ticket": false,
      "session_timeout": 600,
      "plain_http_response": "",
      "curves": "",
      "dhparam": ""
    },
    "tcp": {
      "no_delay": true,
      "keep_alive": true,
      "fast_open": false,
      "fast_open_qlen": 20
    },
    "mysql": {
      "enabled": false,
      "server_addr": "127.0.0.1",
      "server_port": 3306,
      "database": "trojan",
      "username": "trojan",
      "password": ""
    }
}<\/p>\n

\u521b\u5efa Trojan \u81ea\u542f\u670d\u52a1<\/p>\n

Debian9 \u7cfb\u7edf\u627e\u5230\/lib\/systemd\/system\/\u76ee\u5f55\uff0c\u5e76\u521b\u5efatrojan.service\u6587\u4ef6<\/p>\n

CentOS7 \u7cfb\u7edf\u627e\u5230\/usr\/lib\/systemd\/system\/\u76ee\u5f55\uff0c\u5e76\u521b\u5efatrojan.service\u6587\u4ef6<\/p>\n

\u6253\u5f00trojan.service\u6587\u4ef6\uff0c\u5e76\u5199\u5165\u4ee5\u4e0b\u4ee3\u7801<\/p>\n

Description=trojan
After=network.target
   <\/p>\n

Type=simple
PIDFile=\/usr\/src\/trojan\/trojan\/trojan.pid
ExecStart=\/usr\/src\/trojan\/trojan -c "\/usr\/src\/trojan\/server.conf"
ExecReload=
ExecStop=\/usr\/src\/trojan\/trojan
PrivateTmp=true
   <\/p>\n

WantedBy=multi-user.target<\/p>\n

\u8bbe\u7f6e\u542f\u52a8 Trojan \u670d\u52a1<\/p>\n

systemctl start trojan.service#\u542f\u52a8 Trojan<\/p>\n

systemctl enable trojan.service#\u8bbe\u7f6e Trojan \u670d\u52a1\u5f00\u673a\u81ea\u542f<\/p>\n

systemctl stop trojan.service#\u505c\u6b62 Trojan<\/p>\n

\u4e0b\u8f7d Trojan \u5ba2\u6237\u7aef\u8f6f\u4ef6<\/p>\n

https:\/\/github.com\/trojan-\u9ad8\u5899\/trojan\/releases\/download\/v1.14.1\/trojan-1.14.1-win.zip<\/p>\n

\u628a\u670d\u52a1\u5668\u4e0a\u7684 fullchain.crt \u8bc1\u4e66\u653e\u5230\u672c\u5730 Trojan \u5ba2\u6237\u7aef\u6587\u4ef6\u5939\uff0c\u91cd\u547d\u540d\u4e3afullchain.cer\u3002<\/p>\n

\u4fee\u6539 Trojan \u6587\u4ef6\u5939\u91cc\u9762\u7684config.json\u6587\u4ef6<\/p>\n

{
    "run_type": "client",
    "local_addr": "127.0.0.1",
    "local_port": 1080,
    "remote_addr": "www.hostloc.com",
    "remote_port": 90, #\u4e0evps\u670d\u52a1\u7aef\u7aef\u53e3\u4e00\u81f4
    "password": [
      "password1"
    ],
    "log_level": 1,
    "ssl": {
      "verify": true,
      "verify_hostname": true,
      "cert": "fullchain.cer",
      "cipher_tls13":"TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",
"sni": "",
      "alpn": [
            "h2",
            "http\/1.1"
      ],
      "reuse_session": true,
      "session_ticket": false,
      "curves": ""
    },
    "tcp": {
      "no_delay": true,
      "keep_alive": true,
      "fast_open": false,
      "fast_open_qlen": 20
    }
}<\/p>\n

\t\t\t\t<\/p>\n

\t\t\t\t\thong2351<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u5927\u4f6c \uff01\uff01\u8d77\u6765\u9876\t\t\t\t<\/p>\n

\t\t\t\t\thehekotete<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u76d1\u542c\u522b\u7684\u7aef\u53e3\u548css\u6709\u5565\u533a\u522b\uff1f\uff1f\u975e443\u7684ssl\u770b\u8d77\u6765\u5c31\u4e0d\u9760\u8c31\t\t\t\t<\/p>\n

\t\t\t\t\tnic2013<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\thehekotete \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-2-27 11:24
\u76d1\u542c\u522b\u7684\u7aef\u53e3\u548css\u6709\u5565\u533a\u522b\uff1f\uff1f\u975e443\u7684ssl\u770b\u8d77\u6765\u5c31\u4e0d\u9760\u8c31<\/p>\n

\u8bf4\u7684\u4e5f\u5bf9\u3002\t\t\t\t<\/p>\n

\t\t\t\t\tSFA<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : \t<\/p>\n

<\/h3>\n

\t\t\u5e94\u8be5\u7528nginx\u518d\u505a\u4e00\u6b21\u53cd\u4ee3\uff0c\u8ba9Trojan\u8d70443\u51fa\u53bb\t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

nic2013 \u5927\u4f6c\u6709\u8bdd\u8bf4 : […<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/40405"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=40405"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/40405\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=40405"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=40405"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=40405"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}