One-script VPN server setup — deploy, manage, and optimize your server with ease.
Lazy VPN is an interactive Bash script that lets you install and configure popular VPN protocols and proxy tools on your server — all from a single menu. No manual steps, no copy-pasting commands. Just run the script and pick what you need.
- 30+ VPN & proxy tools in one menu
- Auto-detection of existing VPN services before install
- Multi-distro support (Ubuntu, Debian, Arch, Fedora, and more)
- Uninstaller — remove any service cleanly
- Docker & non-Docker options for most services
- Censorship resistance tools (AmneziaWG 2.0, PasarGuard)
- System info dashboard with IP, memory, and disk stats
- Color-coded output with clean UI
bash <(curl -sSL https://github.com/samsesh/lazy-vpn/raw/Localhost/lazy.sh)tmux keeps the session alive even if your SSH connection drops.
tmux new -s lazy "bash <(curl -sSL https://github.com/samsesh/lazy-vpn/raw/Localhost/lazy.sh)"If the connection is interrupted, reconnect with:
tmux a -d -t lazyMain Menu
├── 1) Server Info & Tools
│ ├── System info (OS, kernel, memory, disk)
│ ├── IP diagnostics (IPv4, IPv6)
│ ├── Ubuntu Optimizer
│ ├── Docker
│ ├── XanMod Kernel (with Secure Boot check)
│ ├── BBR3 TCP Congestion Control
│ ├── GOST / CFWarp / WARP
│ ├── Proxy & Tools (MTProxy, SOCKS5/HTTP)
│ └── Uninstaller
├── 2) Install VPN Server
│ ├── WireGuard (standard / Docker)
│ ├── OpenVPN (standard / Docker / Pritunl)
│ ├── OpenConnect (standard / Docker)
│ ├── SoftEther
│ ├── Xray & Proxies (X-UI, 3X-UI, Hiddify, Reality, Marzban, etc.)
│ ├── Juicity
│ ├── X-Panel SSH
│ └── Censorship Resistance
│ ├── PasarGuard Panel (one-click Docker install)
│ ├── PasarGuard Node (one-click install)
│ ├── AmneziaWG 2.0 (kernel module + setup guide)
│ └── AmneziaVPN Client info
└── 3) Quit
| Protocol | Options | Docker |
|---|---|---|
| WireGuard | Standard, Docker | Yes |
| AmneziaWG 2.0 | Kernel module, app-based setup | Via AmneziaVPN |
| OpenVPN | Standard, Pritunl, Docker | Yes |
| OpenConnect | Standard, Docker | Yes |
| SoftEther | Standard | No |
| Protocol | Variants | Docker |
|---|---|---|
| X-UI | alireza0, Sanaei, Kafka, Chinese | Yes |
| 3X-UI | Sanaei | Yes |
| Hiddify | Full stack | No |
| Xray Reality | TLS + Reality | No |
| Marzban | Multi-protocol panel | Yes |
| Juicity | QUIC-based | No |
| ShadowSocksR | SSR Native | No |
| NaiveProxy | Chromium-based | No |
| Hi Hysteria | UDP-based | No |
| Tool | Description | Docker |
|---|---|---|
| Ubuntu Optimizer | Kernel & system tuning | No |
| XanMod Kernel | High-performance kernel for servers | No |
| BBR3 | TCP congestion control (BBR v3) | No |
| Docker | Container runtime | — |
| GOST | Go Simple Tunnel | No |
| CFWarp | Cloudflare WARP | No |
| WARP Proxy | Cloudflare WARP on port 4000 | No |
| X-Panel SSH | SSH user management | No |
| Telegram MTProxy | Telegram proxy | Yes |
| SOCKS5/HTTP Proxy | 3proxy-based proxy server | Yes |
For environments with heavy DPI (Deep Packet Inspection) filtering:
Advanced WireGuard fork that mimics legitimate UDP traffic (DNS, QUIC, SIP).
- Custom Protocol Signatures (CPS) — dress up VPN traffic to look like real protocols
- Per-packet padding — defeats statistical analysis of packet sizes
- Dynamic headers — random header values prevent pattern recognition
- One-click install via the AmneziaVPN desktop app (>= v4.8.12.9)
Unified GUI censorship-resistant solution with decentralized architecture.
- Panel — TypeScript-based GUI management panel (one-click Docker install)
- Node — Go-based decentralized access node (one-click install script)
- Subscription Template — Responsive multi-language subscription page
- Hiddify — Multi-protocol proxy with anti-censorship features
- Xray Reality — TLS-based transport that mimics real websites
Remove any installed VPN service cleanly:
- WireGuard, OpenVPN, OpenConnect
- X-UI / 3X-UI
- Marzban, SoftEther, Hiddify
- Docker (full purge)
- Remove ALL option for complete cleanup
- OS: Ubuntu, Debian, Arch, Fedora, CentOS, openSUSE, Alpine (and derivatives)
- Privileges: Root access required (
sudo) - Network: Active internet connection
- Optional: tmux recommended for stable SSH sessions
- Test on clean server
- Add VPN config backup/export
- Add server health check dashboard
Pull requests are welcome. For major changes, please open an issue first.
- Ubuntu Optimizer
- Best VPN list
- PasarGuard — Panel | Node | Docs
- AmneziaWG — Documentation
- AmneziaVPN — Client downloads