V2Ray + NGINX + Cloudflare Deployment via Docker

Effortlessly deploy V2Ray with Docker, featuring multi-protocol support and fully optimized for compatibility with Cloudflare and other major CDNs.

Project Overview

The v2ray-nginx-cloudflare project provides both original and modular deployment options for a secure, scalable V2Ray instance using Docker containers. This architecture enables seamless integration with Cloudflare and CDNs, offering enhanced security, obfuscation, and performance.

🎯 Two Setup Options:

🔄 Original Setup - Simple VMess-only configuration (legacy)
🆕 Modular Setup - Multi-protocol support with VLESS, VMess, and advanced customization

Whether you're looking to bypass restrictions or set up a robust private proxy, this solution prioritizes reliability, compatibility, and ease of deployment.

🚀 Quick Install (Recommended)

One-command installation - automatically detects your system and sets up everything:

sudo bash <(curl -s https://raw.githubusercontent.com/samrand96/v2ray-nginx-cloudflare/main/easy-install.sh)

What it does:

✅ Detects your Linux distribution (Ubuntu, Debian, CentOS, Fedora, Arch, Alpine, etc.)
✅ Installs Docker and Docker Compose if needed
✅ Lets you choose between original or modular setup
✅ Configures multi-protocol support (VLESS+VMess)
✅ Generates UUID and client configurations
✅ Sets up SSL certificates automatically
✅ Provides ready-to-use connection links

🌟 Multi-Protocol Support (New!)

The modular setup supports three Cloudflare-compatible protocols:

🥇 VLESS + WebSocket + TLS (Best for CDN)

Port: 1310
Path: /
Performance: ⭐⭐⭐⭐⭐
CDN Compatible: ✅ Excellent

🥈 VLESS + gRPC + TLS

Port: 1311
Service: grpc
Performance: ⭐⭐⭐⭐
CDN Compatible: ✅ Good

🥉 VMess + WebSocket + TLS

Port: 1312
Path: /ws
Performance: ⭐⭐⭐
CDN Compatible: ✅ Good (Legacy)

📦 Modular Architecture

v2ray-nginx-cloudflare/
├── .env                          # ⭐ SINGLE source of truth (all config here)
├── .env.example                  # Configuration template
├── docker-compose.modular.yml    # Multi-protocol setup
├── docker-compose.yml            # Original setup (preserved)
├── generate-config.sh            # Script to regenerate V2Ray config
├── vhost/
│   └── default                   # Nginx location blocks for all protocols
├── configs/
│   └── nginx.tmpl                # Nginx-proxy template
└── v2ray/config/
    ├── config.template.json      # V2Ray config template
    └── config.json               # Generated V2Ray config

🎛️ Centralized Configuration:

Single .env file - All services read from one place
No duplicate configs - Change once, apply everywhere
Easy management - Edit .env and restart services
Version control - All settings in environment variables

🐧 System Requirements & Compatibility

Supported Linux Distributions:

✅ Ubuntu (18.04, 20.04, 22.04, 24.04+)
✅ Debian (9, 10, 11, 12+)
✅ CentOS/RHEL (7, 8, 9)
✅ Rocky Linux / AlmaLinux
✅ Fedora (35+)
✅ Arch Linux / Manjaro
✅ Alpine Linux
✅ openSUSE / SLES

Hardware Requirements:

CPU: 1+ cores
RAM: 512MB+ (1GB+ recommended)
Storage: 2GB+ free space
Network: Public IP with port 80/443 access

Recommended VPS:

Hetzner offers excellent performance and value:

2 vCPU, 4 GB RAM, 20 TB Bandwidth
IPv4 & IPv6 support
€4.5/month with €20 credit: https://bit.ly/ssr_vps

📱 Client Configurations

Quick Connection Links:

Replace your-domain.com and your-uuid with your actual values:

VLESS WebSocket (Recommended):

vless://[email protected]:443?type=ws&security=tls&path=%2Fvless-ws&host=your-domain.com#VLESS-WS

VLESS gRPC:

vless://[email protected]:443?type=grpc&security=tls&serviceName=grpc&host=your-domain.com#VLESS-gRPC

VMess WebSocket:

vmess://eyJ2IjoiMiIsInBzIjoiVk1lc3MtV1MiLCJhZGQiOiJ5b3VyLWRvbWFpbi5jb20iLCJwb3J0IjoiNDQzIiwidHlwZSI6Im5vbmUiLCJpZCI6InlvdXItdXVpZCIsImFpZCI6IjAiLCJuZXQiOiJ3cyIsInBhdGgiOiIvdm1lc3Mtd3MiLCJob3N0IjoieW91ci1kb21haW4uY29tIiwidGxzIjoidGxzIn0=

📱 Recommended Client Apps:

Android:

v2rayNG - Supports all protocols
Clash Meta for Android - Modern and user-friendly

iOS:

OneClick - Supports VLESS and VMess
Shadowrocket - Paid but excellent

Desktop:

V2Ray Desktop - Official client
Clash Verge - Modern GUI with Clash Meta core
NekoRay - Feature-rich client

🛠️ Manual Installation Guide

If you prefer manual setup or need custom configuration:

1. Prepare DNS

Create an A record pointing to your server's IP. Temporarily disable CDN proxy.

2. Install Docker

# Download and run our universal installer
curl -fsSL https://raw.githubusercontent.com/samrand96/v2ray-nginx-cloudflare/main/install-docker.sh | sudo bash

3. Clone Repository

git clone https://github.com/samrand96/v2ray-nginx-cloudflare.git
cd v2ray-nginx-cloudflare

4. Choose Setup Type

Option A: Modular Setup (Recommended)

# Copy environment template
cp .env.example .env

# Generate UUID
UUID=$(uuidgen 2>/dev/null || cat /proc/sys/kernel/random/uuid)

# Edit the SINGLE configuration file
nano .env  # Set DOMAIN, LETSENCRYPT_EMAIL, and V2RAY_UUID

# Generate V2Ray config from template
./generate-config.sh

# Start all services
docker compose -f docker-compose.modular.yml up -d

Option B: Original Setup (Legacy)

# Generate UUID
UUID=$(uuidgen)

# Update config
sed -i "s/<UPSTREAM-UUID>/$UUID/g" v2ray/config/config.json
sed -i "s/YOUR_DOMAIN/your-domain.com/g" docker-compose.yml
sed -i "s/YOUR_EMAIL/[email protected]/g" docker-compose.yml

# Start services
docker compose up -d

5. Enable Cloudflare CDN

Return to your DNS settings and enable the proxy/CDN feature.

🔧 Advanced Configuration

Centralized Configuration (Modular Setup):

All configuration is in the root .env file:

# Domain and SSL
DOMAIN=your-domain.com
[email protected]

# V2Ray UUID (generate with: uuidgen)
V2RAY_UUID=your-uuid-here

# Protocol ports (fixed in vhost/default)
VLESS_WS_PORT=1310      # VLESS WebSocket
VLESS_GRPC_PORT=1311    # VLESS gRPC
VMESS_WS_PORT=1312      # VMess WebSocket

# Protocol paths
VLESS_WS_PATH=/
VLESS_GRPC_SERVICE=grpc
VMESS_WS_PATH=/ws

After editing .env, regenerate V2Ray config:

./generate-config.sh
docker compose -f docker-compose.modular.yml restart v2ray

Resource Limits:

Add to .env file:

CPU_LIMIT=1.0
MEMORY_LIMIT=512M
MEMORY_RESERVATION=256M

Service Management:

# Individual service control
docker compose -f docker-compose.modular.yml stop v2ray
docker compose -f docker-compose.modular.yml start nginx
docker compose -f docker-compose.modular.yml restart nginx-proxy-acme

# Rebuild and restart
docker compose -f docker-compose.modular.yml up -d --force-recreate

# View logs
docker compose -f docker-compose.modular.yml logs -f v2ray
docker compose -f docker-compose.modular.yml logs -f nginx

🔐 Security Best Practices

🆔 Unique UUID: Always generate a new UUID for V2Ray
🔒 Strong SSL: Use "Full (strict)" mode in Cloudflare
📊 Monitor logs: Regularly check for suspicious activity
🔄 Keep updated: Update service versions in .env files
🛡️ Firewall: Only expose necessary ports (80, 443)

🐛 Troubleshooting

Connection Issues:

# Check service status
docker compose -f docker-compose.modular.yml ps

# View all logs
docker compose -f docker-compose.modular.yml logs

# Test configuration
docker compose -f docker-compose.modular.yml exec v2ray v2ray -test -config /etc/v2ray/config.json

Certificate Issues:

# Check ACME logs
docker compose -f docker-compose.modular.yml logs nginx-proxy-acme

# Force renewal
docker compose -f docker-compose.modular.yml exec nginx-proxy-acme /app/force_renew

Clean Restart:

# Stop all services
docker compose -f docker-compose.modular.yml down

# Clean rebuild
docker compose -f docker-compose.modular.yml build --no-cache
docker compose -f docker-compose.modular.yml up -d

1. Check if all containers are running

docker compose -f docker-compose.modular.yml ps

2. Check V2Ray container logs

docker compose -f docker-compose.modular.yml logs v2ray

3. Check nginx logs

docker compose -f docker-compose.modular.yml logs nginx

4. Check docker-gen logs

docker compose -f docker-compose.modular.yml logs dockergen

5. Check if V2Ray is listening on the correct ports

docker compose -f docker-compose.modular.yml exec v2ray netstat -tlnp

6. Test V2Ray connectivity from nginx container

docker compose -f docker-compose.modular.yml exec nginx curl -I http://v2ray:1310

7. Check generated nginx configuration

docker compose -f docker-compose.modular.yml exec nginx cat /etc/nginx/conf.d/default.conf

8. Check if V2Ray config was generated properly

docker compose -f docker-compose.modular.yml exec v2ray cat /etc/v2ray/config.json

📊 Performance Comparison

Protocol	Speed	CPU Usage	Compatibility	Cloudflare CDN
VLESS+WS	⭐⭐⭐⭐⭐	⭐⭐⭐⭐⭐	⭐⭐⭐⭐	✅ Excellent
VLESS+gRPC	⭐⭐⭐⭐	⭐⭐⭐⭐	⭐⭐⭐	✅ Good
VMess+WS	⭐⭐⭐	⭐⭐⭐	⭐⭐⭐⭐⭐	✅ Good

🆚 Setup Comparison

Feature	Original Setup	Modular Setup
Protocols	VMess only	VLESS + VMess + gRPC
Customization	Limited	Extensive
Performance	Good	Excellent
Maintenance	Manual	Automated
CDN Optimization	Basic	Advanced
Resource Control	No	Yes

🎯 Detailed Client Configurations

VLESS + WebSocket + TLS (Recommended)

Connection Details:

Server: your-domain.com
Port: 443
UUID: your-generated-uuid
Network: ws
Path: /
TLS: true

V2Ray Client JSON:

{
  "outbounds": [{
    "protocol": "vless",
    "settings": {
      "vnext": [{
        "address": "your-domain.com",
        "port": 443,
        "users": [{
          "id": "your-generated-uuid",
          "encryption": "none"
        }]
      }]
    },
    "streamSettings": {
      "network": "ws",
      "security": "tls",
      "wsSettings": {
        "path": "/",
        "headers": {
          "Host": "your-domain.com"
        }
      },
      "tlsSettings": {
        "serverName": "your-domain.com"
      }
    }
  }]
}

Clash Meta YAML:

proxies:
  - name: "VLESS-WS"
    type: vless
    server: your-domain.com
    port: 443
    uuid: your-generated-uuid
    network: ws
    tls: true
    ws-opts:
      path: /
      headers:
        Host: your-domain.com

VLESS + gRPC + TLS

Connection Details:

Server: your-domain.com
Port: 443
UUID: your-generated-uuid
Network: grpc
Service: grpc
TLS: true

V2Ray Client JSON:

{
  "outbounds": [{
    "protocol": "vless",
    "settings": {
      "vnext": [{
        "address": "your-domain.com",
        "port": 443,
        "users": [{
          "id": "your-generated-uuid",
          "encryption": "none"
        }]
      }]
    },
    "streamSettings": {
      "network": "grpc",
      "security": "tls",
      "grpcSettings": {
        "serviceName": "grpc"
      },
      "tlsSettings": {
        "serverName": "your-domain.com"
      }
    }
  }]
}

VMess + WebSocket + TLS

Connection Details:

Server: your-domain.com
Port: 443
UUID: your-generated-uuid
AlterID: 0
Network: ws
Path: /ws
TLS: true

V2Ray Client JSON:

{
  "outbounds": [{
    "protocol": "vmess",
    "settings": {
      "vnext": [{
        "address": "your-domain.com",
        "port": 443,
        "users": [{
          "id": "your-generated-uuid",
          "alterId": 0,
          "security": "auto"
        }]
      }]
    },
    "streamSettings": {
      "network": "ws",
      "security": "tls",
      "wsSettings": {
        "path": "/ws",
        "headers": {
          "Host": "your-domain.com"
        }
      },
      "tlsSettings": {
        "serverName": "your-domain.com"
      }
    }
  }]
}

📚 Additional Resources

V2Ray Documentation: https://www.v2ray.com/
Nginx Documentation: https://nginx.org/en/docs/
Let's Encrypt: https://letsencrypt.org/docs/
Docker Compose: https://docs.docker.com/compose/

🤝 Contributing

We welcome contributions! For issues, improvements, or new features:

Fork the repository
Create a feature branch
Submit a pull request

For questions or support, open an issue in the GitHub repository.

📄 License

This project is licensed under the terms specified in the LICENSE file.

Name		Name	Last commit message	Last commit date
Latest commit History 29 Commits
configs		configs
services		services
v2ray/config		v2ray/config
vhost		vhost
.env.example		.env.example
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
cloudflare_ip_list.txt		cloudflare_ip_list.txt
debug-location.conf		debug-location.conf
docker-compose.modular.yml		docker-compose.modular.yml
docker-compose.yml		docker-compose.yml
easy-install.sh		easy-install.sh
generate-config.sh		generate-config.sh
install-docker.sh		install-docker.sh
setup-logging.sh		setup-logging.sh
setup.py		setup.py
vmess.py		vmess.py

License

samrand96/v2ray-nginx-cloudflare

Folders and files

Latest commit

History

Repository files navigation

V2Ray + NGINX + Cloudflare Deployment via Docker

Project Overview

🎯 Two Setup Options:

🚀 Quick Install (Recommended)

🌟 Multi-Protocol Support (New!)

🥇 VLESS + WebSocket + TLS (Best for CDN)

🥈 VLESS + gRPC + TLS

🥉 VMess + WebSocket + TLS

📦 Modular Architecture

🎛️ Centralized Configuration:

🐧 System Requirements & Compatibility

Supported Linux Distributions:

Hardware Requirements:

Recommended VPS:

📱 Client Configurations

Quick Connection Links:

VLESS WebSocket (Recommended):

VLESS gRPC:

VMess WebSocket:

📱 Recommended Client Apps:

Android:

iOS:

Desktop:

🛠️ Manual Installation Guide

1. Prepare DNS

2. Install Docker

3. Clone Repository

4. Choose Setup Type

Option A: Modular Setup (Recommended)

Option B: Original Setup (Legacy)

5. Enable Cloudflare CDN

🔧 Advanced Configuration

Centralized Configuration (Modular Setup):

Resource Limits:

Service Management:

🔐 Security Best Practices

🐛 Troubleshooting

Connection Issues:

Certificate Issues:

Clean Restart:

1. Check if all containers are running

2. Check V2Ray container logs

3. Check nginx logs

4. Check docker-gen logs

5. Check if V2Ray is listening on the correct ports

6. Test V2Ray connectivity from nginx container

7. Check generated nginx configuration

8. Check if V2Ray config was generated properly

📊 Performance Comparison

🆚 Setup Comparison

🎯 Detailed Client Configurations

VLESS + WebSocket + TLS (Recommended)

V2Ray Client JSON:

Clash Meta YAML:

VLESS + gRPC + TLS

V2Ray Client JSON:

VMess + WebSocket + TLS

V2Ray Client JSON:

📚 Additional Resources

🤝 Contributing

📄 License

About

Topics

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases 2

Packages 0

Uh oh!

Languages

Packages