Setting up 3x-ui server at home internet on IPv6 without dedicated VPS

Guestbook

Home internet with Native IPv6 on. Enable IPv6 on NBN provider at first, then test IPv6 by visiting https://test-ipv6.com/ or https://ipv6test.google.com/, checking IP info at https://ifconfig.co/.

Register your account at ClouDNS https://www.cloudns.net/ and receive a FREE DNS domain e.g. igloo-proxy.cloud-ip.cc. Then add a AAAA type DNS record points to your x3-ui https://github.com/MHSanaei/3x-ui server’s IPv6:

1
2
3
# x3-ui server
$ curl -6 https://ifconfig.co
2401:d002:c51c:1219:d5c2:e48d:73b5:976b

Install the latest version x3-ui:

1
$ bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh) v3.7.0

Generate Let’s Encrypt https://letsencrypt.org/ SSL certifidate:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
╔───────────────────────────────────────────────╗
│  3X-UI Panel Management Script                │
│  0. Exit Script                               │
│───────────────────────────────────────────────│
│  1. Install                                   │
│  2. Update                                    │
│  3. Update to Dev Channel (latest commit)     │
│  4. Update Menu                               │
│  5. Legacy Version                            │
│  6. Uninstall                                 │
│───────────────────────────────────────────────│
│  7. Reset Username & Password                 │
│  8. Reset Web Base Path                       │
│  9. Reset Settings                            │
│  10. Change Port                              │
│  11. View Current Settings                    │
│───────────────────────────────────────────────│
│  12. Start                                    │
│  13. Stop                                     │
│  14. Restart                                  │
|  15. Restart Xray                             │
│  16. Check Status                             │
│  17. Logs Management                          │
│───────────────────────────────────────────────│
│  18. Enable Autostart                         │
│  19. Disable Autostart                        │
│───────────────────────────────────────────────│
│  20. SSL Certificate Management               │
│  21. Cloudflare SSL Certificate               │
│  22. IP Limit Management                      │
│  23. Firewall Management                      │
│  24. SSH Port Forwarding Management           │
│  25. PostgreSQL Management                    │
│───────────────────────────────────────────────│
│  26. Enable BBR                               │
│  27. Update Geo Files                         │
│  28. Speedtest by Ookla                       │
╚───────────────────────────────────────────────╝

Panel state: Running
Start automatically: Yes
xray state: Running

Please enter your selection [0-28]: 20
    1. Get SSL (Domain)
    2. Revoke & Remove
    3. Force Renew
    4. Show Existing Domains
    5. Set Cert paths for the panel
    6. Get SSL for IP Address (6-day cert, auto-renews)
    0. Back to Main Menu
Choose an option: 1
acme.sh could not be found. we will install it
[INF] Installing acme.sh...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  270k  100  270k    0     0  1271k      0 --:--:-- --:--:-- --:--:-- 1277k
[Thu Aug 27 09:10:20 AM AEST 2026] Installing from online archive.
[Thu Aug 27 09:10:20 AM AEST 2026] Downloading https://github.com/acmesh-official/acme.sh/archive/master.tar.gz
[Thu Aug 27 09:10:20 AM AEST 2026] Extracting master.tar.gz
[Thu Aug 27 09:10:21 AM AEST 2026] Installing to /root/.acme.sh
[Thu Aug 27 09:10:21 AM AEST 2026] Installed to /root/.acme.sh/acme.sh
[Thu Aug 27 09:10:21 AM AEST 2026] Installing alias to '/root/.bashrc'
[Thu Aug 27 09:10:21 AM AEST 2026] Close and reopen your terminal to start using acme.sh
[Thu Aug 27 09:10:21 AM AEST 2026] Installing cron job
[Thu Aug 27 09:10:21 AM AEST 2026] bash has been found. Changing the shebang to use bash as preferred.
[Thu Aug 27 09:10:21 AM AEST 2026] OK
[Thu Aug 27 09:10:21 AM AEST 2026] Install success!
[INF] Installation of acme.sh succeeded.
[INF] install socat succeed...
Please enter your domain name: igloo-proxy.cloud-ip.cc
[DEG] Your domain is: igloo-proxy.cloud-ip.cc, checking it...
[INF] Your domain is ready for issuing certificates now...
Please choose which port to use (default is 80):
[INF] Will use port: 80 to issue certificates. Please make sure this port is open.
[Thu Aug 27 09:11:29 AM AEST 2026] Changed default CA to: https://acme-v02.api.letsencrypt.org/directory
[Thu Aug 27 09:11:30 AM AEST 2026] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Thu Aug 27 09:11:30 AM AEST 2026] Standalone mode.
[Thu Aug 27 09:11:30 AM AEST 2026] Account key creation OK.
[Thu Aug 27 09:11:30 AM AEST 2026] Registering account: https://acme-v02.api.letsencrypt.org/directory
[Thu Aug 27 09:11:31 AM AEST 2026] Registered
[Thu Aug 27 09:11:31 AM AEST 2026] ACCOUNT_THUMBPRINT='b5K6u4GCPMvP6jtVrI78pAl9YUrShU2Z8porK76hyr8'
[Thu Aug 27 09:11:31 AM AEST 2026] Creating domain key
[Thu Aug 27 09:11:31 AM AEST 2026] The domain key is here: /root/.acme.sh/igloo-proxy.cloud-ip.cc_ecc/igloo-proxy.cloud-ip.cc.key
[Thu Aug 27 09:11:31 AM AEST 2026] Single domain='igloo-proxy.cloud-ip.cc'
[Thu Aug 27 09:11:33 AM AEST 2026] Getting webroot for domain='igloo-proxy.cloud-ip.cc'
[Thu Aug 27 09:11:33 AM AEST 2026] Verifying: igloo-proxy.cloud-ip.cc
[Thu Aug 27 09:11:33 AM AEST 2026] Standalone mode server
[Thu Aug 27 09:11:34 AM AEST 2026] Pending. The CA is processing your order, please wait. (1/30)
[Thu Aug 27 09:11:38 AM AEST 2026] Pending. The CA is processing your order, please wait. (2/30)
[Thu Aug 27 09:11:41 AM AEST 2026] Success
[Thu Aug 27 09:11:41 AM AEST 2026] Verification finished, beginning signing.
[Thu Aug 27 09:11:41 AM AEST 2026] Let's finalize the order.
[Thu Aug 27 09:11:41 AM AEST 2026] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/3489265815/549901388765'
[Thu Aug 27 09:11:44 AM AEST 2026] Downloading cert.
[Thu Aug 27 09:11:44 AM AEST 2026] Le_LinkCert='https://acme-v02.api.letsencrypt.org/acme/cert/06e0b6dbe51ac7d51573cf84994ca71741ad'
[Thu Aug 27 09:11:44 AM AEST 2026] Cert success.
-----BEGIN CERTIFICATE-----
MIIDnzCCAyWgAwIBAgISBuC22+UZGNUVc8+EmUynF0GtMAoGCCqGSM49BAMDMDMx
...
2Ao/mUvkOPylsT42LE2vRnQCMBpDXfkcxsNWkiiWZxogKC6lahRpe7yz873EZLfE
UUvAgAJ0INTMnqtKw15Eg8xyGw==
-----END CERTIFICATE-----
[Thu Aug 27 09:11:44 AM AEST 2026] Your cert is in: /root/.acme.sh/igloo-proxy.cloud-ip.cc_ecc/igloo-proxy.cloud-ip.cc.cer
[Thu Aug 27 09:11:44 AM AEST 2026] Your cert key is in: /root/.acme.sh/igloo-proxy.cloud-ip.cc_ecc/igloo-proxy.cloud-ip.cc.key
[Thu Aug 27 09:11:44 AM AEST 2026] The intermediate CA cert is in: /root/.acme.sh/igloo-proxy.cloud-ip.cc_ecc/ca.cer
[Thu Aug 27 09:11:44 AM AEST 2026] And the full-chain cert is in: /root/.acme.sh/igloo-proxy.cloud-ip.cc_ecc/fullchain.cer
[Thu Aug 27 09:11:45 AM AEST 2026] ARI suggestedWindow: 2026-10-25T00:57:16Z to 2026-10-26T20:08:06Z
[Thu Aug 27 09:11:45 AM AEST 2026] Next renewal time picked from ARI window: 2026-10-26T07:45:41Z
[INF] Your reloadcmd is: systemctl reload nginx ; x-ui restart
[Thu Aug 27 09:14:30 AM AEST 2026] The domain 'igloo-proxy.cloud-ip.cc' seems to already have an ECC cert, let's use it.
[Thu Aug 27 09:14:30 AM AEST 2026] Installing key to: /root/cert/igloo-proxy.cloud-ip.cc/privkey.pem
[Thu Aug 27 09:14:30 AM AEST 2026] Installing full chain to: /root/cert/igloo-proxy.cloud-ip.cc/fullchain.pem
[INF] Installing certificate succeeded, enabling auto renew...
[Thu Aug 27 09:14:30 AM AEST 2026] Already up to date!
[Thu Aug 27 09:14:30 AM AEST 2026] Upgrade successful!
[INF] Auto renew succeeded, certificate details:
cert/igloo-proxy.cloud-ip.cc:
total 20K
drwxr-xr-x 2 root root 4.0K Aug 27 09:14 .
drwxr-xr-x 5 root root 4.0K Aug 27 09:11 ..
-rw-r--r-- 1 root root 4.8K Aug 27 09:14 fullchain.pem
-rw------- 1 root root  227 Aug 27 09:14 privkey.pem
Would you like to set this certificate for the panel? (y/n): y
set certificate public key success
set certificate private key success
set certificate for subscription public key success
set certificate for subscription private key success
[INF] Panel paths set for domain: igloo-proxy.cloud-ip.cc
[INF]   - Certificate File: /root/cert/igloo-proxy.cloud-ip.cc/fullchain.pem
[INF]   - Private Key File: /root/cert/igloo-proxy.cloud-ip.cc/privkey.pem

Get the Dynamic URL of domain igloo-proxy.cloud-ip.cc, then add cron job to update DNS Server with the Dynamic IP Address:

1
2
3
4
# crontab -l
# ClouDNS - Update Dynamic IPv6 address for domain "igloo-proxy.cloud-ip.cc"
*/5 * * * * curl -6 -s "https://ipv6.cloudns.net/api/dynamicURL/?q=MTQ ... GE" >> /var/log/cloudns-ddns.log 2>&1
21 4,10,16,22 * * * "/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh" > /dev/null

Login x3-ui panel. Setup Inbound:

3x-ui Inbound Basics

Min Client Ver option needs to set to 1.0.0 to be compatible with OpenClash on mini router:

3x-ui Inbound Security

Setup Client:

3x-ui Client Basics

Flow option must be xtls-rprx-vision:

3x-ui Client Credentials

Finally, add 3x-ui Clash subscription URL e.g. https://igloo-proxy.cloud-ip.cc:2096/clash/y33m9a0rgih5z01 into OpenClash:

OpenClash Panel

OpenClash IPv6

References

  • 波仔分享 - 未来还能继续翻墙吗？2026最新VPS自建节点搭建教程！科学上网翻墙从零开始，VPS线路详解！VLESS+Reality，搬瓦工CN2 GIA实测8K/奈飞4K，V2RayN与Clash配置全流程！https://www.youtube.com/watch?v=D7huCXwVuLo
  • 2026最新VPS自建节点搭建教程！科学上网翻墙从零开始，VPS线路详解！VLESS+Reality，搬瓦工CN2 GIA实测8K/奈飞4K，V2RayN与Clash配置全流程，小白保姆级教程！https://v2rayssr.com/me-reality.html

Contents

  1. References