Marzban-Guide

Clone Repository

Install git:

sudo apt install -y git

Clone the repository:

git clone https://github.com/strohsnow/Marzban-Guide ~/Marzban-Guide

Install XanMod Kernel

Register the PGP key:

wget -qO - https://dl.xanmod.org/archive.key \
  | sudo gpg --dearmor -vo /usr/share/keyrings/xanmod-archive-keyring.gpg

Add the repository:

echo 'deb [signed-by=/usr/share/keyrings/xanmod-archive-keyring.gpg] http://deb.xanmod.org releases main' \
  | sudo tee /etc/apt/sources.list.d/xanmod-release.list

Check platform compatibility:

wget -qO - https://dl.xanmod.org/check_x86-64_psabi.sh | awk -f -

Install the kernel:

sudo apt update && sudo apt dist-upgrade && sudo apt install linux-xanmod-x64v3

Reboot to switch the kernel:

sudo reboot now

Probe all modules:

sudo depmod -a

Enable BBR:

sudo nano /etc/sysctl.conf

net.core.default_qdisc = fq
net.ipv4.tcp_congestion_control = bbr

Load the settings:

sudo sysctl -p

Install UFW

Install ufw:

sudo apt install -y ufw

Deny incoming:

sudo ufw default deny incoming

Allow outgoing:

sudo ufw default allow outgoing

Allow SSH:

sudo ufw allow ssh comment 'SSH'

Allow HTTP:

sudo ufw allow http comment 'HTTP'

Allow HTTPS:

sudo ufw allow https comment 'HTTPS'

Enable UFW:

sudo ufw enable

Allow Cloudflare IPs

Run the script:

sudo bash ~/Marzban-Guide/cloudflare-ufw.sh

Add a cron job:

sudo crontab -e

0 0 * * 1 /bin/bash /path/to/Marzban-Guide/cloudflare-ufw.sh > /dev/null 2>&1

Configure Cloudflare

Add DNS record:

A        @  server_ipv4  Proxied
A  reality  server_ipv4  DNS Only

Issue SSL Certificates

Install certbot:

sudo apt install python3-certbot-dns-cloudflare

Get Cloudflare API token to edit zone DNS:

https://dash.cloudflare.com/profile/api-tokens

Create a Cloudflare credentials file:

sudo nano ~/cloudflare.ini

dns_cloudflare_api_token = YOUR_API_TOKEN

Restrict access to the file:

sudo chmod 600 ~/cloudflare.ini

Issue a wildcard certificate:

sudo certbot certonly \
  --dns-cloudflare \
  --dns-cloudflare-credentials ~/cloudflare.ini \
  -d yourdomain.com -d *.yourdomain.com \
  -n --agree-tos --no-eff-email -m your@email.com

Install WARP

Get WARP+ license (optional):

https://t.me/warpplus

Install WARP:

cd && sudo bash <(curl -fsSL https://gitlab.com/fscarmen/warp/-/raw/main/menu.sh) w

Install Marzban

Run the installation script:

sudo bash -c "$(curl -sL https://github.com/Gozargah/Marzban-scripts/raw/master/marzban.sh)" @ install --database mariadb

Update to the latest core:

sudo marzban core-update

Copy docker-compose.yml file:

sudo cp ~/Marzban-Guide/docker-compose.yml /opt/marzban/docker-compose.yml

Copy nginx.conf file:

sudo cp ~/Marzban-Guide/nginx.conf /opt/marzban/nginx.conf

Adjust Nginx configuration:

sudo nano /opt/marzban/nginx.conf

Marzban-Guide/nginx.conf

Line 34 in 334024c

server_name yourdomain.com;

Marzban-Guide/nginx.conf

Line 36 in 334024c

location ~* /(SECRET_DASHBOARD_PATH|statics|sub|api|docs|redoc|openapi.json) {

Marzban-Guide/nginx.conf

Lines 62 to 63 in 334024c

	ssl_certificate /etc/letsencrypt/live/yourdomain.com/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/yourdomain.com/privkey.pem;

Marzban-Guide/nginx.conf

Line 77 in 334024c

ssl_trusted_certificate /etc/letsencrypt/live/yourdomain.com/chain.pem;

Adjust Marzban environment variables:

sudo nano /opt/marzban/.env

UVICORN_HOST = "127.0.0.1"
UVICORN_PORT = 8000
DASHBOARD_PATH = "/SECRET_DASHBOARD_PATH/"
XRAY_JSON = "/var/lib/marzban/xray_config.json"
XRAY_SUBSCRIPTION_URL_PREFIX = "https://yourdomain.com"
XRAY_EXECUTABLE_PATH = "/var/lib/marzban/xray-core/xray"
XRAY_ASSETS_PATH = "/var/lib/marzban/xray-core"

Configure Xray

Copy xray_config.json file:

sudo cp ~/Marzban-Guide/xray_config.json /var/lib/marzban/xray_config.json

Generate Xray keys:

sudo /var/lib/marzban/xray-core/xray x25519

Adjust Xray configuration:

sudo nano /var/lib/marzban/xray_config.json

Marzban-Guide/xray_config.json

Line 30 in 334024c

"reality.yourdomain.com"

Marzban-Guide/xray_config.json

Line 32 in 334024c

"privateKey": "YOUR_PRIVATE_KEY",

Configure Marzban

Restart Marzban:

sudo marzban restart

Add dashboard admin user:

sudo marzban cli admin create --sudo

Log into the dashboard:

https://yourdomain.com/SECRET_DASHBOARD_PATH