Q: How to rotate sing-box credentials after a subscription leak?

Rotate all credential fields together: uuid, password, reality private_key, short_id, and the vmess transport.path. Update both sb.json and the subscription YAML files, restart sing-box and the subscription server, then grep for old values to confirm zero residue.

Q: Why are Hysteria2 and TUIC nodes unreachable while VLESS works?

Hysteria2 and TUIC use UDP, which cloud firewalls often block even when TCP ports are open. Check conntrack for UDP packets on those ports and add cloud firewall rules allowing the UDP ports, or verify the subscription includes skip-cert-verify for self-signed certificates.

Q: Does sing-box work on Serv00 or free hosting accounts?

A dedicated Serv00/Hostuno edition of the script exists supporting vless-reality, vmess-ws with Argo tunnels, and hysteria2. However, free Serv00 accounts risk termination when running proxy scripts.

Q: Why does git push of subscription config to GitHub return 404 on write?

A 404 on PUT with a successful GET means the fine-grained token is read-only; GitHub intentionally returns 404 instead of 403 for unauthorized writes. Regenerate the token with Contents: Read and Write permission on the target repository.

Q: What are the limitations of running sing-box on low-memory VPS?

On VPS with 1GB RAM or less, strip unnecessary services like Docker, Snapd, and panel software, then apply sysctl kernel tuning. The skill documents a real case improving available memory from 286MB to 440MB after cleanup.

Question 1

How do I install sing-box on a VPS with multiple protocols?

Accepted Answer

Run the one-line installer: bash <(curl -Ls https://raw.githubusercontent.com/yonggekkk/sing-box-yg/main/sb.sh) as root. It sets up Vless-reality-vision, Vmess-ws, Hysteria-2, Tuic-v5, and Anytls, then use the sb command for the management menu.

Question 2

How to rotate sing-box credentials after a subscription leak?

Accepted Answer

Rotate all credential fields together: uuid, password, reality private_key, short_id, and the vmess transport.path. Update both sb.json and the subscription YAML files, restart sing-box and the subscription server, then grep for old values to confirm zero residue.

Question 3

Why are Hysteria2 and TUIC nodes unreachable while VLESS works?

Accepted Answer

Hysteria2 and TUIC use UDP, which cloud firewalls often block even when TCP ports are open. Check conntrack for UDP packets on those ports and add cloud firewall rules allowing the UDP ports, or verify the subscription includes skip-cert-verify for self-signed certificates.

Question 4

Does sing-box work on Serv00 or free hosting accounts?

Accepted Answer

A dedicated Serv00/Hostuno edition of the script exists supporting vless-reality, vmess-ws with Argo tunnels, and hysteria2. However, free Serv00 accounts risk termination when running proxy scripts.

Question 5

Why does git push of subscription config to GitHub return 404 on write?

Accepted Answer

A 404 on PUT with a successful GET means the fine-grained token is read-only; GitHub intentionally returns 404 instead of 403 for unauthorized writes. Regenerate the token with Contents: Read and Write permission on the target repository.

Question 6

What are the limitations of running sing-box on low-memory VPS?

Accepted Answer

On VPS with 1GB RAM or less, strip unnecessary services like Docker, Snapd, and panel software, then apply sysctl kernel tuning. The skill documents a real case improving available memory from 286MB to 440MB after cleanup.

sing-box-vps

SYSTEM DOCUMENTATION & REQUIREMENTS

Frequently Asked Questions about sing-box-vps

Related Skills

server-setup

create-singbox-vpn

domain-management

generating-sing-box-configs