搭建naiveproxy
wget https://go.dev/dl/go1.22.2.linux-amd64.tar.gz
tar -zxvf go1.22.2.linux-amd64.tar.gz -C /usr/local/
cp /etc/profile /etc/profile.bak
echo export GOROOT=/usr/local/go >> /etc/profile
echo export PATH=/usr/local/go/bin:$PATH >> /etc/profile
source /etc/profile
go version
go install github.com/caddyserver/xcaddy/cmd/xcaddy@latest
~/go/bin/xcaddy build --with github.com/caddyserver/forwardproxy@caddy2=github.com/klzgrad/forwardproxy@naive
如果第二条指令执行出错，可以尝试执行go env -w GO111MODULE=on 再重试，还不行的话请自行搜索升级go版本方法
acme.sh申请证书
转换密码
{
order forward_proxy before file_server
}
:443, na.daehub.com {
tls /etc/letsencrypt/live/daehub.com/fullchain.pem /etc/letsencrypt/live/daehub.com/privkey.pem
forward_proxy {
basic_auth user password
hide_ip
hide_via
probe_resistance
}
file_server {
root /usr/share/nginx/html
}
}caddy fmt --overwrite Caddyfile
caddy adapt Caddyfile > config.jsonconfig.json
{
"apps": {
"http": {
"servers": {
"srv0": {
"listen": [
":57418"
],
"routes": [
{
"handle": [
{
"auth_credentials": [
"ZFhObGNqcHdZWE56"
],
"handler": "forward_proxy",
"hide_ip": true,
"hide_via": true,
"probe_resistance": {}
}
]
},
{
"handle": [
{
"handler": "reverse_proxy",
"headers": {
"request": {
"set": {
"Host": [
"{http.reverse_proxy.upstream.hostport}"
],
"X-Forwarded-Host": [
"{http.request.host}"
]
}
}
},
"transport": {
"protocol": "http",
"tls": {}
},
"upstreams": [
{
"dial": "www.cloudreve.org:443"
}
]
}
]
}
],
"tls_connection_policies": [
{
"match": {
"sni": [
"1199.eu.org"
]
},
"certificate_selection": {
"any_tag": [
"cert0"
]
}
}
],
"automatic_https": {
"disable": true
}
}
}
},
"tls": {
"certificates": {
"load_files": [
{
"certificate": "/root/.acme.sh/1199.eu.org/fullchain.cer",
"key": "/root/.acme.sh/1199.eu.org/1199.eu.org.key",
"tags": [
"cert0"
]
}
]
}
}
}
}
ln -s /root/caddy /usr/bin/caddy/etc/systemd/system/naive.service
[Unit]
Description=Caddy
Documentation=https://caddyserver.com/docs/
After=network.target network-online.target
Requires=network-online.target
[Service]
Type=notify
User=root
Group=root
ExecStart=/usr/bin/caddy run --environ --config /root/config.json
ExecReload=/usr/bin/caddy reload --config /root/config.json
TimeoutStopSec=5s
LimitNOFILE=1048576
LimitNPROC=512
PrivateTmp=true
ProtectSystem=full
AmbientCapabilities=CAP_NET_BIND_SERVICE
[Install]
WantedBy=multi-user.targetsystemctl enable naive.service
systemctl start naive.service
如果懒，也可以一键脚本
wget -N https://gitlab.com/rwkgyg/naiveproxy-yg/raw/main/naiveproxy.sh && bash naiveproxy.sh