Server installation

Qeli on a Debian VPS

The shortest supported path: a clean Debian 12 or 13 host, the official installer, one profile on port 443 and ready client links.

1

What to prepare

You need a VPS with a public IPv4 address, root access and a clean Debian 12/13 install, an open TCP or UDP port for the selected profile, and a device running a Qeli client. If you use a domain, point its A record to the VPS first.

cat /etc/os-release · ip -4 addr · test -c /dev/net/tun
2

Download, review and run the installer

Do not pipe a root script straight into a shell. Save and review it first, then run it. By default the installer offers reality-tls on port 443, installs the release .deb, creates the service and adds five users.

server terminal
$ curl -fsSLO https://raw.githubusercontent.com/litvinovtd/qeli/v0.8.1/install-qeli-server.sh
$ less install-qeli-server.sh
$ sudo bash install-qeli-server.sh vpn.example.com
For a reproducible install, use the script from tag v0.8.1 instead of the changing main branch. Do not overwrite an existing installation with this script; use the supported updater instead.
3

Verify the service and save access details

Check that the configuration validates, the service is active, the selected port is listening and the server public key matches the issued links. The qeli:// links are stored in /etc/qeli/client-links/.

server terminal
$ sudo qeli check-config --config /etc/qeli/server.conf
$ systemctl --no-pager --full status qeli
$ sudo qeli show-identity --config /etc/qeli/server.conf
$ sudo ls -la /etc/qeli/client-links/
Next steps

Clients

Import one link on a test device first. Then choose full tunnel or precise routes, configure return routes for LANs exposed through the VPN, and add the remaining users only after verification.