English | فارسی | العربية | 中文 | Español | Русский | Türkçe

Daltoon-UI is an advanced, open-source web control panel for managing Xray-core servers. It provides a clean, multi-language interface for deploying, configuring, and monitoring a wide range of proxy and VPN protocols — from a single VPS to multi-node deployments.

Built as an enhanced fork of the original Daltoon-UI project, Daltoon-UI adds broader protocol support, improved stability, per-client traffic accounting, and many quality-of-life features.

Important

This project is intended for personal use only. Please do not use it for illegal purposes or in a production environment.

Features

• Multi-protocol inbounds — VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria2, HTTP, SOCKS (Mixed), Dokodemo-door / Tunnel, and TUN.
• Modern transports & security — TCP (Raw), mKCP, WebSocket, gRPC, HTTPUpgrade, and XHTTP, secured with TLS, XTLS, and REALITY.
• Fallbacks — serve multiple protocols on a single port (e.g. VLESS and Trojan on 443) using Xray's fallback support.
• Per-client management — traffic quotas, expiry dates, IP limits, live online status, and one-click share links, QR codes, and subscriptions.
• Traffic statistics — per inbound, per client, and per outbound, with reset controls.
• Multi-node support — manage and scale across multiple servers from a single panel.
• Outbound & routing — WARP, NordVPN, custom routing rules, load balancers, and outbound proxy chaining.
• Built-in subscription server with multiple output formats and custom page templates.
• Telegram bot for remote monitoring and management.
• RESTful API with in-panel Swagger documentation.
• Flexible storage — SQLite (default) or PostgreSQL.
• 13 UI languages with dark and light themes.
• Fail2ban integration for enforcing per-client IP limits.
• Admin access for collaboration panel.

Quick Start

bash <(curl -Ls https://raw.githubusercontent.com/mdaltoon10/D-UI/main/install.sh)

To install a specific version, append its tag (e.g. v1.4.1):

bash <(curl -Ls https://raw.githubusercontent.com/mdaltoon10/D-UI/main/install.sh) v1.4.1

To install the rolling dev build (latest per-commit pre-release from main, not a stable release), pass dev-latest:

bash <(curl -Ls https://raw.githubusercontent.com/mdaltoon10/D-UI/main/install.sh) dev-latest

During installation a random username, password, and access path are generated. After installation, run d-ui to open the management menu, where you can start/stop the service, view or reset your login credentials, manage SSL certificates, and more.

For full documentation, please visit the project Wiki.

Unattended install

The installer also runs non-interactively for cloud-init. Set DUI_NONINTERACTIVE=1 (or pipe with no TTY) and it installs end-to-end with zero prompts, generating random credentials and writing them to /etc/d-ui/install-result.env. See deploy/ for:

• Cloud-init user-data — unattended install on any cloud (Hetzner/AWS/DO/Vultr/GCP/Azure/Oracle)
• Hetzner Cloud notes — cloud-init deployment on Hetzner

Supported Platforms

Operating systems: Ubuntu, Debian, Armbian, Fedora, CentOS, RHEL, AlmaLinux, Rocky Linux, Oracle Linux, Amazon Linux, Virtuozzo, Arch, Manjaro, Parch, openSUSE (Tumbleweed / Leap), Alpine, and Windows.

Architectures: amd64 · 386 · arm64 (aarch64) · armv7 · armv6 · armv5 · s390x.

Database Options

Daltoon-UI supports two backends, chosen during the install:

• SQLite (default) — a single file at /etc/d-ui/d-ui.db. Zero setup, ideal for small and medium deployments.
• PostgreSQL — recommended for high client counts or multi-node setups. The installer can install PostgreSQL locally for you, or accept a DSN to an existing server.

At runtime the backend is selected via environment variables (the installer writes these to /etc/default/d-ui for you):

DUI_DB_TYPE=postgres
DUI_DB_DSN=postgres://dui:duipass@127.0.0.1:5432/dui?sslmode=disable

Migrating an existing SQLite install to PostgreSQL

d-ui migrate-db --dsn "postgres://dui:duipass@127.0.0.1:5432/dui?sslmode=disable"
# then set DUI_DB_TYPE and DUI_DB_DSN in /etc/default/d-ui and restart:
systemctl restart d-ui

The source SQLite file is left untouched; remove it manually once you have verified the new backend.

Docker

The default docker compose up -d keeps using SQLite. To run with the bundled PostgreSQL service, uncomment the two DUI_DB_* env lines in docker-compose.yml and start with the profile:

docker compose --profile postgres up -d

The image bundles Fail2ban (enabled by default) to enforce per-client IP limits. Fail2ban bans offenders with iptables, which requires the NET_ADMIN capability. docker-compose.yml already grants it via cap_add; if you start the container with docker run instead, add the capabilities yourself, otherwise bans are logged but never applied:

docker run -d --cap-add=NET_ADMIN --cap-add=NET_RAW ... ghcr.io/mdaltoon10/D-UI

Environment Variables

Variable	Description	Default
DUI_DB_TYPE	Database backend: sqlite or postgres	sqlite
DUI_DB_DSN	PostgreSQL connection string (when DUI_DB_TYPE=postgres)	—
DUI_DB_FOLDER	Directory for the SQLite database file	/etc/d-ui
DUI_DB_MAX_OPEN_CONNS	Maximum open connections (PostgreSQL pool)	—
DUI_DB_MAX_IDLE_CONNS	Maximum idle connections (PostgreSQL pool)	—
DUI_INIT_WEB_BASE_PATH	The initial URI path for the web panel	/
DUI_ENABLE_FAIL2BAN	Enable Fail2ban-based IP-limit enforcement	true
DUI_LOG_LEVEL	Log verbosity (debug, info, warning, error)	info
DUI_DEBUG	Enable debug mode	false
DUI_TUNNEL_HEALTH_MONITOR	Enable the tunnel health monitor (probes a URL and restarts xray after repeated failures; a restart drops all clients)	false
DUI_TUNNEL_HEALTH_PROXY	Proxy the probe is sent through; point it at a local xray inbound so the probe tests the tunnel (e.g. socks5://127.0.0.1:1080). Empty means the probe only checks host connectivity	—
DUI_TUNNEL_HEALTH_URL	URL probed for tunnel health	https://www.cloudflare.com/cdn-cgi/trace
DUI_TUNNEL_HEALTH_INTERVAL	Interval between probes	30s
DUI_TUNNEL_HEALTH_TIMEOUT	Per-probe timeout	10s
DUI_TUNNEL_HEALTH_FAILURES	Consecutive failures before a restart is triggered	3
DUI_TUNNEL_HEALTH_COOLDOWN	Minimum delay between consecutive restarts	5m

Supported Languages

The panel UI is available in 13 languages:

English · فارسی · العربية · 中文（简体） · 中文（繁體） · Español · Русский · Українська · Türkçe · Tiếng Việt · 日本語 · Bahasa Indonesia · Português (Brasil)

💖 Support Us

If you find this project useful and would like to support its development, you can donate via the following crypto addresses:

Bep20:

0x7316A874F562FBCe67Cd0540E6b0EA6001FA09c8

Trx:

TEZtgumuwyRn8brLSbks5HQSsnJKnZc6cr

---

Maintained by mDaltoon