安装nginx

配置tls1.3

在nginx配置文件内加入

location /路径/
        {
        proxy_redirect off;
        proxy_read_timeout 1200s;
        proxy_pass http://127.0.0.1:11234; #端口
        proxy_http_version 1.1;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $http_host;
 
 
        # Config for 0-RTT in TLSv1.3
        #proxy_set_header Early-Data $ssl_early_data;
 
        }

安装v2ray

bash <(curl -L -s https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh)
#安装历史版本
#bash <(curl -L -s https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh) --version v4.44.0
#启动服务
systemctl enable v2ray

配置v2ray

cd /usr/local/etc/v2ray/
nano config.json

输入以下内容

{
  "log" : {
    "access": "/var/log/v2ray/access.log",
    "error": "/var/log/v2ray/error.log",
    "loglevel": "warning"
  },
  "inbound": {
    "port": 11234,  #端口
    "listen":"127.0.0.1",
    "protocol": "vmess",
    "settings": {
      "clients": [
        {
          "id": "aaaa",  #id
          "level": 1,
          "alterId": 64,
      "email": "akcp1234@gmail.com"
        }
      ]
    },
     "streamSettings": {
      "network": "ws",
      "wsSettings": {
          "path": "/路径/"  #路径
        }
     }
  },
  "outbound": {
    "protocol": "freedom",
    "settings": {}
  }
}

重启服务

systemctl restart v2ray.service
systemctl restart nginx.service

如果出现启动错误，可以使用下面的命令查看

/usr/local/bin/v2ray run -config /usr/local/etc/v2ray/config.json

nginx配置
第一部分

user  root;
worker_processes  auto;
#error_log  /etc/nginx/error.log warn;
pid    /run/nginx.pid;
events {
    use epoll;
    worker_connections  1024;
    multi_accept on;
}
http {
    include /etc/nginx/mime.types; #注意路径
    default_type  application/octet-stream;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
        server_names_hash_bucket_size 512;
        client_header_buffer_size 32k;
        large_client_header_buffers 4 32k;
        client_max_body_size 10G;

        sendfile        on;
        tcp_nopush     on;
        tcp_nodelay on;
        keepalive_timeout 720;

        fastcgi_connect_timeout 3600;
        fastcgi_send_timeout 3600;
        fastcgi_read_timeout 3600;
        fastcgi_buffer_size 64k;
        fastcgi_buffers 4 64k;
        fastcgi_busy_buffers_size 128k;
        fastcgi_temp_file_write_size 256k;
        fastcgi_intercept_errors on;

        gzip on;
    gzip_min_length  1k;
    gzip_buffers     4 16k;
    gzip_http_version 1.1;
    gzip_comp_level 2;
    gzip_types     text/plain application/javascript application/x-javascript text/javascript text/css application/xml;
    gzip_vary on;
    gzip_proxied   expired no-cache no-store private auth;
    gzip_disable   "MSIE [1-6]\.";
    server_tokens off;
    include /etc/nginx/conf.d/*.conf;
}

第二部分

server {
     listen 0.0.0.0:443;
     server_name  www.网址.com;
#    root /html;#路径，按具体情况修改
     ssl on;
     ssl_certificate /etc/nginx/ssl/www.网址.com.crt;   #pem文件路径
     ssl_certificate_key /etc/nginx/ssl/www.网址.com.key; #key文件路径
     ssl_session_timeout 5m;
     ssl_protocols  TLSv1.2 TLSv1.3;
     ssl_ciphers           TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+ECDSA+AES128:EECDH+aRSA+AES128:RSA+AES128:EECDH+ECDSA+AES256:EECDH+aRSA+AES256:RSA+AES256:EECDH+ECDSA+3DES:EECDH+aRSA+3DES:RSA+3DES:!MD5;
     ssl_prefer_server_ciphers off;
     proxy_set_header X-Forwarded-For $remote_addr;
     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
     server_tokens off;
#    add_header Content-Security-Policy "upgrade-insecure-requests;connect-src *";


}
server {
     listen       0.0.0.0:80;
     server_name  www.网址.com;
     return 301 https://www.网址.com$request_uri;
}