How to Setup shadowsocks-rust Server with xray-plugin (or v2ray-plugin) on Any Linux Host

shadowsocks-rust-server.sh

#!/usr/bin/env bash

# https://github.com/shadowsocks/shadowsocks-rust/releases
export SSVERSION=v1.20.4
export SSPORT=443
#export SSPASSWORD="CHANGEME"
export SSARCHIVE="shadowsocks-${SSVERSION}.x86_64-unknown-linux-gnu.tar.xz"
#export SSARCHIVE="shadowsocks-${SSVERSION}.aarch64-unknown-linux-gnu.tar.xz"

export PREFIX=/usr/local/bin
#export PREFIX=${HOME}/.local/bin

export CONFIGDIR=/etc/shadowsocks-rust
#export CONFIGDIR=${HOME}/.config/sslocal

if [ ! -d ${CONFIGDIR} ]; then
    mkdir -p ${CONFIGDIR}
fi

wget https://github.com/shadowsocks/shadowsocks-rust/releases/download/${SSVERSION}/${SSARCHIVE} -O ${SSARCHIVE}
tar -xvf ${SSARCHIVE} -C ${PREFIX}

export SSPASSWORD=$(ssservice genkey -m "chacha20-ietf-poly1305")

# https://github.com/shadowsocks/v2ray-plugin/releases
# export V2RAY_VERSION=v1.3.2
# export V2RAY_ARCHIVE="v2ray-plugin-linux-amd64-${V2RAY_VERSION}.tar.gz"

# wget "https://github.com/shadowsocks/v2ray-plugin/releases/download/${V2RAY_VERSION}/${V2RAY_ARCHIVE}" -O ${V2RAY_ARCHIVE}
# tar -xvf ${V2RAY_ARCHIVE} -C ${PREFIX}
# mv ${PREFIX}/v2ray-plugin_linux_amd64 ${PREFIX}/v2ray-plugin


# https://github.com/teddysun/xray-plugin/releases
export XRAY_VERSION=v1.8.24
export XRAY_ARCHIVE="xray-plugin-linux-amd64-${XRAY_VERSION}.tar.gz"

wget "https://github.com/teddysun/xray-plugin/releases/download/${XRAY_VERSION}/${XRAY_ARCHIVE}" -O ${XRAY_ARCHIVE}
tar -xvf ${XRAY_ARCHIVE} -C ${PREFIX}
mv ${PREFIX}/xray-plugin_linux_amd64 ${PREFIX}/xray-plugin

### server:

cat <<EOF > ${CONFIGDIR}/ssserver.json
{
    "server": "0.0.0.0",
    "server_port": ${SSPORT},
    "password": "${SSPASSWORD}",
    "method": "chacha20-ietf-poly1305",
    "fast_open": true,
    "timeout": 300,
    "reuse_port": true

// If you want to use Xray plugin as WebSocket TLS transport, so that you will get Shadowsocks over websocket with TLS (HTTPS):
//  - find free domain name (https://freemyip.com), or buy one, for example, at https://porkbun.com;
//  - add DNS record for that domain pointing to your server IP;
//  - obtain Let's Encrypt TLS certificate+key with https://certbot.eff.org or https://github.com/acmesh-official/acme.sh;
//    - https://github.com/teddysun/xray-plugin?tab=readme-ov-file#issue-a-cert-for-tls-and-quic
//  - uncomment the following part;
//  - replace "my.host" in three places with your hostname used in certificate (adapt paths if needed).

//    ,"plugin": "xray-plugin"
//    ,"plugin_opts": "server;tls;host=my.host;path=/wss;cert=/etc/letsencrypt/live/my.host/fullchain.pem;key=/etc/letsencrypt/live/my.host/privkey.pem"
}
EOF

cat <<EOF > /etc/systemd/system/ssserver.service
[Unit]
Description=shadowsocks-rust server
After=network-online.target
[Service]
Type=simple
LimitNOFILE=32768
ExecStart=${PREFIX}/ssserver -c ${CONFIGDIR}/ssserver.json
Restart=always
[Install]
WantedBy=multi-user.target
EOF

systemctl daemon-reload
systemctl enable ssserver
systemctl restart ssserver
systemctl status ssserver

echo "Server port: ${SSPORT}"
echo "Password: ${SSPASSWORD}"

# OPTIONAL:
# apt install xz-utils
# systemctl disable --now ufw
# systemctl disable --now firewalld
# systemctl mask --now firewalld