trojan

mkdir -p /etc/trojan-go

openssl genrsa -out /etc/trojan-go/server.key 1024

# CN={hostname} 修改sni
openssl req -new -x509 -days 3650 -key /etc/trojan-go/server.key -out /etc/trojan-go/server.crt -subj "/C=XX/L=Default City/O=Default Company Ltd/CN=*.wangqs.cn"

# openssl req -new -key server.key -out server.csr
# openssl x509 -req -in server.csr -out server.crt -signkey server.key -days 3650

# password 修改密码

cat > /etc/trojan-go/config.json <<EOF
{
    "run_type": "server",
    "local_addr": "0.0.0.0",
    "local_port": 443,
    "remote_addr": "hello.wangqs.cn",
    "remote_port": 443,
    "password": [
        ""
    ],
    "websocket": {
        "enabled": true,
        "path": "/ws"
    },
    "mux": {
        "enabled": true,
        "concurrency": 8,
        "idle_timeout": 60
    },
    "ssl": {
        "cert": "/etc/trojan-go/server.crt",
        "key": "/etc/trojan-go/server.key"
    }
}
EOF

curl -fsSL https://get.docker.com -o get-docker.sh
sudo sh get-docker.sh
sudo systemctl start docker

# 修改需要映射的端口
docker run -d --name trojan-go -p 443:443 --restart=always -v /etc/trojan-go:/etc/trojan-go teddysun/trojan-go