# Recommended: --frp --bridge-token fills token/user_name; use FRP_INSTANCE=demo-public.
# Plain frpc: use the full <name>-<user_name>-user/public and set WEB_TOKEN_FILE.
# frpc v0.71.1; set FRP_SERVER_ADDR and FRP_INSTANCE in the process environment.
serverAddr = "{{ .Envs.FRP_SERVER_ADDR }}"
serverPort = 443
transport.protocol = "wss"
# frpc needs a trusted CA file to verify the gateway certificate.
transport.tls.trustedCaFile = "{{ .Envs.FRP_CA_FILE }}"
auth.method = "oidc"
auth.additionalScopes = ["HeartBeats", "NewWorkConns"]
auth.oidc.tokenSource.type = "file"
auth.oidc.tokenSource.file.path = "{{ .Envs.WEB_TOKEN_FILE }}"
log.to = "console"
log.level = "warn"

[[proxies]]
name = "{{ .Envs.FRP_INSTANCE }}"
type = "http"
localIP = "127.0.0.1"
localPort = 8080
subdomain = "{{ .Envs.FRP_INSTANCE }}"