如何在vps上搭建vpn

ssh root@your_vps_ip

sudo apt update && sudo apt upgrade -y  # Ubuntu/Debian
# 或者
sudo yum update -y                     # CentOS
# 或者
sudo dnf update -y                      # Fedora

# Ubuntu >= 18.04 / Debian >= 10
sudo apt install wireguard resolvconf -y

# CentOS
sudo yum install epel-release -y
sudo yum install wireguard-tools -y

# 对于其他发行版，请参考官方文档：https://www.wireguard.com/install/

cd /etc/wireguard/
umask 077 # 设置权限，确保密钥文件安全
wg genkey | tee server_privatekey | wg pubkey > server_publickey

[Interface]
Address = 10.0.0.1/24 # 服务器的虚拟IP地址
SaveConfig = true
ListenPort = 51820     # 监听的UDP端口，确保防火墙已开放
PrivateKey = [Server Private Key] # 用刚才生成的 server_privatekey 文件内容替换

# 可选的，配置DNS解析（非常重要，避免DNS泄露）
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

sudo systemctl enable wg-quick@wg0
sudo systemctl start wg-quick@wg0
# 检查状态
sudo systemctl status wg-quick@wg0

wg genkey | tee client_privatekey | wg pubkey > client_publickey

wg set wg0 peer [Client Public Key] allowed-ips 10.0.0.2/32
# 保存配置
wg-quick save wg0

[Interface]
PrivateKey = [Client Private Key] # 用 client_privatekey 内容替换
Address = 10.0.0.2/32             # 客户端的虚拟IP，需在服务器允许的IP范围内
DNS = 1.1.1.1, 8.8.8.8           # 设置DNS，防止DNS泄露

[Peer]
PublicKey = [Server Public Key]   # 用 server_publickey 内容替换
Endpoint = your_vps_ip:51820      # 你的VPS公网IP和端口
AllowedIPs = 0.0.0.0/0            # 将所有流量都通过VPN转发
PersistentKeepalive = 25

sudo ufw allow 51820/udp
sudo ufw allow ssh
sudo ufw enable

wget https://github.com/angristan/openvpn-install/raw/master/openvpn-install.sh
chmod +x openvpn-install.sh
sudo ./openvpn-install.sh

# 例如，使用scp命令从本地下载（在你自己电脑的终端里运行，不是在VPS上）
scp root@your_vps_ip:/root/my_phone.ovpn ~/Downloads/