skills.rest
Buywatermelon
BuywatermelonCOMMUNITY
Explore all skills by this author →
GitHub

deploying-xray-nodes

Automate Xray-core Trojan proxy node deployment with TLS, kernel, and firewall configuration.

12|2|Updated Mar 1, 2026
Search Tags:#deployment#vpn#server#proxy#tls#xray#trojan
One-click install
npx skills add https://github.com/Buywatermelon/tunpilot --skill deploying-xray-nodes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: deploying-xray-nodes
Source: https://github.com/Buywatermelon/tunpilot/tree/main/plugin/skills/deploying-xray-nodes
Command: npx skills add https://github.com/Buywatermelon/tunpilot --skill deploying-xray-nodes

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the deployment and configuration of secure, high-performance Xray-core Trojan proxy nodes, simplifying complex server setups.

Core Features & Use Cases

  • Automated Deployment: Installs Xray-core, tunes kernel parameters, and configures TLS certificates (ACME or self-signed).
  • Security Hardening: Implements systemd hardening and firewall rules for a secure setup.
  • Use Case: Deploy a new Xray Trojan node on a remote server with a custom domain, ensuring it's production-ready with automatic certificate renewal and optimized network settings.

Quick Start

Deploy a new Xray-core Trojan proxy node on the server root@1.2.3.4 using the domain node.example.com.

Frequently Asked Questions about deploying-xray-nodes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Xray Trojan proxy deployment with TLS on a remote server?▼

Automating Xray Trojan proxy deployment installs Xray-core, tunes kernel parameters, and configures TLS certificates using ACME or self-signed options to ensure your remote server is production-ready.

Can I deploy an Xray Trojan node without a registered domain name?▼

Yes, you can deploy an Xray Trojan node without a registered domain. The deployment supports both domain-based and domain-less configurations using self-signed TLS certificates for secure connections.

How does certificate fingerprint pinning enhance Xray proxy security?▼

Certificate fingerprint pinning enhances Xray proxy security by validating the exact TLS certificate presented, preventing man-in-the-middle attacks even if a certificate authority is compromised.

What's included in security hardening for an Xray-core server setup?▼

Security hardening for an Xray-core server setup includes implementing systemd hardening parameters and configuring firewall rules to restrict unauthorized access and protect the proxy infrastructure.

Do I need to manually renew ACME certificates for my Xray Trojan node?▼

No, manual ACME certificate renewal is not needed. The automated deployment configures Xray-core with automatic certificate renewal to ensure continuous TLS encryption without downtime.

Related Skills

Explore More Software Engineering Skills→
AlteriomAlteriom

ssh-essentials

Enforce key-based authentication, server hardening, and jump-host access for SSH.

Official
Advanced
dgethingsdgethings

aws-cloud-monitoring

Monitor AWS network health via CloudWatch metrics, alarms, and logs.

Community
Intermediate
theslashdojotheslashdojo

dynamic-forward

Create a local SOCKS proxy over SSH for flexible client traffic routing.

Official
Intermediate
wenermewenerme
7

mihomo-docs

Guide mihomo YAML configuration for DNS, proxies, and routing rules.

Community
Advanced