将甲骨文 Ubuntu 20.04（1.4G）重装为 Debian 11（400MB），并部署 Xray。

1. 重装为 Debian 11

apt-get update
apt-get install -y xz-utils openssl gawk file

bash <(wget --no-check-certificate -qO- 'https://moeclub.org/attachment/LinuxShell/InstallNET.sh') \
  -d 11 -v 64 -a -firmware -p "root密码"

等待约 20 分钟，失败则删除实例重试。

2. 初始化系统

timedatectl set-timezone Asia/Shanghai
apt-get install -y nginx curl tar net-tools iftop

# 配置 SSH authorized_keys
ssh-keygen

3. 安装 Xray

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install -u root --version 1.5.3
cp config.json /usr/local/etc/xray/config.json

4. 配置 nginx

mkdir -p /home/www/example.com
vim /etc/nginx/sites-enabled/default
# 设置 root /home/www/example.com
systemctl restart nginx

5. 申请 SSL 证书

curl https://get.acme.sh | sh
~/.acme.sh/acme.sh --register-account -m email@gmail.com
~/.acme.sh/acme.sh --issue -d example.com --webroot /home/www/example.com/

mkdir -p /usr/local/etc/xray/cert
~/.acme.sh/acme.sh --installcert -d example.com \
  --key-file /usr/local/etc/xray/cert/private.key \
  --fullchain-file /usr/local/etc/xray/cert/cert.crt
~/.acme.sh/acme.sh --upgrade --auto-upgrade
chmod -R 755 /usr/local/etc/xray/cert

6. 启动服务

systemctl restart xray nginx
journalctl -u xray --output cat -f   # 查看日志