Qeli on a Debian VPS
The shortest supported path: a clean Debian 12 or 13 host, the official installer, one profile on port 443 and ready client links.
What to prepare
You need a VPS with a public IPv4 address, root access and a clean Debian 12/13 install, an open TCP or UDP port for the selected profile, and a device running a Qeli client. If you use a domain, point its A record to the VPS first.
cat /etc/os-release · ip -4 addr · test -c /dev/net/tunDownload, review and run the installer
Do not pipe a root script straight into a shell. Save and review it first, then run it. By default the installer offers reality-tls on port 443, installs the release .deb, creates the service and adds five users.
$ curl -fsSLO https://raw.githubusercontent.com/litvinovtd/qeli/v0.8.1/install-qeli-server.sh
$ less install-qeli-server.sh
$ sudo bash install-qeli-server.sh vpn.example.com
v0.8.1 instead of the changing main branch. Do not overwrite an existing installation with this script; use the supported updater instead.Verify the service and save access details
Check that the configuration validates, the service is active, the selected port is listening and the server public key matches the issued links. The qeli:// links are stored in /etc/qeli/client-links/.
$ sudo qeli check-config --config /etc/qeli/server.conf
$ systemctl --no-pager --full status qeli
$ sudo qeli show-identity --config /etc/qeli/server.conf
$ sudo ls -la /etc/qeli/client-links/
Clients
Import one link on a test device first. Then choose full tunnel or precise routes, configure return routes for LANs exposed through the VPN, and add the remaining users only after verification.