3x-ui-skill

Overview

This skill walks users through the complete setup of a secure and hardened VPS-based VPN server using 3x-ui (Xray), with two VLESS+Reality inbounds (XHTTP and TCP+Vision) for maximum DPI resistance. It includes server hardening steps such as non-root user creation, SSH key-based access, UFW firewall configuration, kernel sysctl settings, and fail2ban setup. The skill is tailored for users in regions with advanced DPI detection, such as Russia in 2026, and provides a single subscription link for the Happ client.

Capabilities

• ▸Server hardening (non-root user, SSH key-based access, UFW, kernel sysctl, fail2ban)
• ▸Installation of 3x-ui (Xray) with two VLESS+Reality inbounds (XHTTP and TCP+Vision)
• ▸Generation of a single subscription link for the Happ client
• ▸Configuration of BBR for improved TCP throughput
• ▸Disabling ICMP for stealth and security

Best for

Setting up a secure and hardened VPS-based encrypted proxy server, configuring a 3x-ui (Xray) installation with two VLESS+Reality inbounds, and providing a single subscription link for the Happ client. Useful for users in regions with advanced DPI detection.

Works with

Security considerations

This skill involves server hardening steps such as non-root user creation, SSH key-based access, and firewall configuration. It does not handle credentials or private keys directly, but it does require the user to provide a root password from the hosting provider. The skill is designed to be secure and does not exfiltrate data to external endpoints.

Categories