Skip to main content
3X-UI is a web panel on top of Xray-core: inbounds and users for VLESS, VMess, Trojan, and Shadowsocks, traffic limits and stats in the browser instead of hand-editing configs. It suits a small number of connections, while for many users with subscriptions Marzban is handier.

​
Installation

Connect over SSH as root: Connection. Commands are for Ubuntu/Debian, check the latest version in the MHSanaei/3x-ui repo.
  1. Install – the official script:
    The script installs and starts the service. It either asks for the panel username, password, and port or generates them: save them. The panel database is /etc/x-ui/x-ui.db.
  2. Check – the status should be active (running):
Change the default username, password, and port right away, in the x-ui menu or in the panel settings: an exposed panel with default credentials gets brute-forced within hours.

​
Access

Panel address:
  • IP – the Server IP on the card: @lumivps_bot → My servers → server.
  • PORT – the panel port set during installation.
  • PATH – the panel’s web path, also set by the script. x-ui shows the exact port and path.
Log in with the credentials from the installation. Open the panel port in the firewall, details: Firewall.
Better not to keep the panel on a bare IP: get a domain and enable SSL via the x-ui menu or an nginx reverse proxy. In ufw, open only the ports you use.

​
x-ui menu

Available with the script install, opened with the x-ui command:
  • Reset Username & Password – change the username and password.
  • Change Port – change the panel port.
  • View Current Settings – the current panel port and path.
  • Restart – restart the service, same as systemctl restart x-ui.
  • SSL Certificate Management – issue an SSL certificate for a domain.

​
VLESS + Reality

  1. Inbound – in Inbounds, add a new one: protocol VLESS, security Reality. Such traffic is hard to tell apart from ordinary HTTPS. Open the inbound port in ufw too.
  2. Client – inside the inbound, add a user and, if needed, set a traffic limit and an expiry date.
  3. Link or QR – the panel generates a connection string and a QR code, pass them to the user.
  4. App – import the link or QR into a client:
    • v2rayNG – Android.
    • NekoBox – Android and Windows.
    • Hiddify – all platforms.
You set up the software yourself, Lumi handles the server and network. If the network or a port doesn’t work, message @lumisup_robot. Next: Marzban, SSL certificate.