ШАГ 1 — создать конфиг sing-box

Открой:

sudo nano /etc/sing-box/config.json

Вставь полностью:

{
"log": {
"level": "info"
},

"dns": {
"servers": [
{
"tag": "remote",
"address": "tls://1.1.1.1"
},
{
"tag": "local",
"address": "https://dns.google/dns-query",
"detour": "direct"
}
],

"rules": [
{
"rule_set": ["geoip-ru"],
"server": "local"
}
],

"final": "remote"
},

"inbounds": [
{
"type": "tun",
"tag": "tun-in",

"interface_name": "singtun0",
"inet4_address": "172.19.0.1/30",

"auto_route": true,
"strict_route": true,

"sniff": true
}
],

"outbounds": [
{
"type": "vless",
"tag": "proxy",

"server": "youtubevpn.mooo.com",
"server_port": 443,

"uuid": "9f1f32c8-9155-49f4-b0b2-c450352e6c3d",

"flow": "xtls-rprx-vision",

"tls": {
"enabled": true,
"server_name": "youtubevpn.sub.chickenkiller.com",

"reality": {
"enabled": true,
"public_key": "2HsgcjrDDhN2GOQKjdQ42K71iFdLZQrCL7AzKOm53Q8",
"short_id": "f569f0638d5298fb"
},

"utls": {
"enabled": true,
"fingerprint": "chrome"
}
}
},

{
"type": "direct",
"tag": "direct"
},

{
"type": "block",
"tag": "block"
}
],

"route": {
"auto_detect_interface": true,

"rule_set": [
{
"tag": "geoip-ru",
"type": "remote",
"format": "binary",
"url": "https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-ru.srs",
"download_detour": "direct"
}
],

"rules": [
{
"rule_set": ["geoip-ru"],
"outbound": "direct"
}
],

"final": "proxy"
}
}

Сохранить:

CTRL+O

Enter

CTRL+X

ШАГ 2 — права на TUN

Выполни:

sudo setcap cap_net_admin+ep /usr/bin/sing-box

ШАГ 3 — включить sing-box

sudo systemctl enable sing-box
sudo systemctl restart sing-box

ШАГ 4 — проверить конфиг

sudo sing-box check -c /etc/sing-box/config.json

Если увидишь:

configuration ok

то отлично.

ШАГ 5 — проверить статус

systemctl status sing-box