# Recommended: --frp --bridge-token fills token/user_name; use FRP_INSTANCE=demo-public.
# Plain frpc: use the full <name>-<user_name>-user/public and set WEB_TOKEN_FILE.
# Official frpc v0.71.1. FRP_INSTANCE must end in -<owner>-public.
serverAddr = "{{ .Envs.FRP_SERVER_ADDR }}"
serverPort = 443
transport.protocol = "wss"
transport.tls.trustedCaFile = "{{ .Envs.FRP_CA_FILE }}"
auth.method = "oidc"
auth.additionalScopes = ["HeartBeats", "NewWorkConns"]
auth.oidc.tokenSource.type = "file"
auth.oidc.tokenSource.file.path = "{{ .Envs.WEB_TOKEN_FILE }}"
log.to = "console"
log.level = "warn"

[[proxies]]
name = "{{ .Envs.FRP_INSTANCE }}"
type = "tcpmux"
multiplexer = "httpconnect"
subdomain = "{{ .Envs.FRP_INSTANCE }}"
localIP = "{{ .Envs.FRP_LOCAL_IP }}"
localPort = {{ .Envs.FRP_LOCAL_PORT }}