# xyz.sh

> VPS one-click scripts. Run `curl -fsSL xyz.sh/<name> | bash` on a Linux VPS.
> Public source, no telemetry, no hidden actions. Languages: Chinese and English.
> Last updated: 2026-11-12. Version 1.3.0.

## Docs

- [Home (zh)](https://xyz.sh/zh): Chinese homepage
- [Home (en)](https://xyz.sh/en): English homepage
- [Guides (zh)](https://xyz.sh/zh/guides)
- [Guides (en)](https://xyz.sh/en/guides)
- [Changelog (zh)](https://xyz.sh/zh/changelog)
- [Changelog (en)](https://xyz.sh/en/changelog)
- [Health / versions JSON](https://xyz.sh/health): every script's version, SHA256 and size
- [Full LLM index](https://xyz.sh/llms-full.txt)
- [Sitemap](https://xyz.sh/sitemap.xml)

## Commands

Plain-text menu: `curl -fsSL xyz.sh`
Raw script: `curl -fsSL xyz.sh/<name>.sh`
Checksum: `curl -fsSL xyz.sh/<name>.sh.sha256`
One-shot test: `curl -fsSL xyz.sh/all | bash -s -- -y` (add `--share` for an opt-in 30-day result link)

- [docker](https://xyz.sh/en/docker): Install Docker Engine via the official get.docker.com script
  `curl -fsSL xyz.sh/docker | bash`
- [bbr](https://xyz.sh/en/bbr): Enable in-tree TCP BBR congestion control via sysctl
  `curl -fsSL xyz.sh/bbr | bash`
- [swap](https://xyz.sh/en/swap): Create and enable a swap file of a chosen size
  `curl -fsSL xyz.sh/swap | bash`
- [bench](https://xyz.sh/en/bench): Wrap the open-source YABS script for CPU, disk, and network tests
  `curl -fsSL xyz.sh/bench | bash`
- [sysinfo](https://xyz.sh/en/sysinfo): Read-only snapshot of CPU, memory, disk, and local network
  `curl -fsSL xyz.sh/sysinfo | bash`
- [nezha](https://xyz.sh/en/nezha): Wrap the official Nezha monitoring agent installer
  `curl -fsSL xyz.sh/nezha | bash`
- [speedtest](https://xyz.sh/en/speedtest): Install and run the official Ookla Speedtest CLI, optionally against Hong Kong, Tokyo, Singapore and US West
  `curl -fsSL xyz.sh/speedtest | bash`
- [route](https://xyz.sh/en/route): Trace back-route with NextTrace (or traceroute) (aliases: backtrace)
  `curl -fsSL xyz.sh/route | bash`
- [firewall](https://xyz.sh/en/firewall): UFW or firewalld basics, allowing SSH first (aliases: ufw)
  `curl -fsSL xyz.sh/firewall | bash`
- [timezone](https://xyz.sh/en/timezone): Set the system timezone and optionally the locale (aliases: tz, locale)
  `curl -fsSL xyz.sh/timezone | bash`
- [speedtest-cn](https://xyz.sh/en/speedtest-cn): Experimental: attempts China Telecom / Unicom / Mobile nodes. Mainland servers often cannot be selected from abroad; results are unreliable, and xyz.sh/all no longer runs this (aliases: cn, speedtest3)
  `curl -fsSL xyz.sh/speedtest-cn | bash`
- [all](https://xyz.sh/en/all): System info, light bench, overseas speed tests, back-route and unlock checks, with a summary
  `curl -fsSL xyz.sh/all | bash`
- [unlock](https://xyz.sh/en/unlock): Check Netflix, Disney+, YouTube, ChatGPT, Claude, Gemini, TikTok and IP type (aliases: ipcheck, media)
  `curl -fsSL xyz.sh/unlock | bash`
- [fail2ban](https://xyz.sh/en/fail2ban): Install Fail2ban and enable an SSH jail
  `curl -fsSL xyz.sh/fail2ban | bash`
- [ssh](https://xyz.sh/en/ssh): Change the SSH port, add keys, disable passwords — validated, with rollback (aliases: sshd, ssh-harden)
  `curl -fsSL xyz.sh/ssh | bash`
- [autoupdate](https://xyz.sh/en/autoupdate): unattended-upgrades on Debian/Ubuntu, dnf-automatic on RHEL-like systems (aliases: unattended-upgrades, auto-update)
  `curl -fsSL xyz.sh/autoupdate | bash`
- [bt](https://xyz.sh/en/bt): Wrap BT Panel's official install_panel.sh installer (aliases: baota)
  `curl -fsSL xyz.sh/bt | bash`
- [aapanel](https://xyz.sh/en/aapanel): Wrap aaPanel's official installer (international BT Panel)
  `curl -fsSL xyz.sh/aapanel | bash`
- [1panel](https://xyz.sh/en/1panel): Wrap 1Panel's official quick_start.sh (open source, Docker-based)
  `curl -fsSL xyz.sh/1panel | bash`
- [wireguard](https://xyz.sh/en/wireguard): Set up a WireGuard server and generate client configs and QR codes (aliases: wg)
  `curl -fsSL xyz.sh/wireguard | bash`
- [caddy](https://xyz.sh/en/caddy): Install official Caddy and set up a reverse proxy with automatic HTTPS
  `curl -fsSL xyz.sh/caddy | bash`

## Tutorials

- [Install Docker Tutorial (Official Script on Debian, Ubuntu, CentOS)](https://xyz.sh/en/guides/docker)
- [Enable BBR Tutorial (TCP BBR on Debian, Ubuntu, CentOS)](https://xyz.sh/en/guides/bbr)
- [Add Swap on a VPS (Chosen Size, Persisted in fstab)](https://xyz.sh/en/guides/swap)
- [VPS Benchmark Tutorial (YABS Wrapper, No Fabricated Scores)](https://xyz.sh/en/guides/bench)
- [VPS System Info Tutorial (Read-Only, No Public IP Lookup)](https://xyz.sh/en/guides/sysinfo)
- [Install the Nezha Agent (Official Script and Environment Variables)](https://xyz.sh/en/guides/nezha)
- [VPS Speedtest Tutorial (Official Ookla CLI)](https://xyz.sh/en/guides/speedtest)
- [VPS Back-Route Tutorial (NextTrace / traceroute)](https://xyz.sh/en/guides/route)
- [VPS Firewall Tutorial (UFW / firewalld, SSH Allowed First)](https://xyz.sh/en/guides/firewall)
- [Linux Timezone Tutorial (timedatectl and Locale)](https://xyz.sh/en/guides/timezone)
- [Experimental China 3-Network Speedtest Tutorial](https://xyz.sh/en/guides/speedtest-cn)
- [One-Shot VPS Test Tutorial (with Shareable Results)](https://xyz.sh/en/guides/all)
- [VPS Streaming Unlock Check Tutorial (with IP Quality)](https://xyz.sh/en/guides/unlock)
- [Fail2ban SSH Protection Tutorial](https://xyz.sh/en/guides/fail2ban)
- [SSH Hardening Tutorial: Port Change and Key Login](https://xyz.sh/en/guides/ssh)
- [Automatic Security Updates Tutorial for a VPS](https://xyz.sh/en/guides/autoupdate)
- [BT Panel (Baota) Installation Tutorial](https://xyz.sh/en/guides/bt)
- [aaPanel Installation Tutorial (Official Script)](https://xyz.sh/en/guides/aapanel)
- [1Panel Installation Tutorial (Official Script)](https://xyz.sh/en/guides/1panel)
- [WireGuard Server Setup Tutorial](https://xyz.sh/en/guides/wireguard)
- [Caddy Reverse Proxy and Automatic HTTPS Tutorial](https://xyz.sh/en/guides/caddy)