|
|
|
@ -23,7 +23,7 @@ vhost_https_port = 443
|
|
|
|
|
# response header timeout(seconds) for vhost http server, default is 60s
|
|
|
|
|
# vhost_http_timeout = 60
|
|
|
|
|
|
|
|
|
|
# TcpMuxHttpConnectPort specifies the port that the server listens for TCP
|
|
|
|
|
# tcpmux_httpconnect_port specifies the port that the server listens for TCP
|
|
|
|
|
# HTTP CONNECT requests. If the value is 0, the server will not multiplex TCP
|
|
|
|
|
# requests on one single port. If it's not - it will listen on this value for
|
|
|
|
|
# HTTP CONNECT requests. By default, this value is 0.
|
|
|
|
@ -44,6 +44,7 @@ enable_prometheus = true
|
|
|
|
|
|
|
|
|
|
# dashboard assets directory(only for debug mode)
|
|
|
|
|
# assets_dir = ./static
|
|
|
|
|
|
|
|
|
|
# console or real logFile path like ./frps.log
|
|
|
|
|
log_file = ./frps.log
|
|
|
|
|
|
|
|
|
@ -58,12 +59,12 @@ disable_log_color = false
|
|
|
|
|
# DetailedErrorsToClient defines whether to send the specific error (with debug info) to frpc. By default, this value is true.
|
|
|
|
|
detailed_errors_to_client = true
|
|
|
|
|
|
|
|
|
|
# AuthenticationMethod specifies what authentication method to use authenticate frpc with frps.
|
|
|
|
|
# authentication_method specifies what authentication method to use authenticate frpc with frps.
|
|
|
|
|
# If "token" is specified - token will be read into login message.
|
|
|
|
|
# If "oidc" is specified - OIDC (Open ID Connect) token will be issued using OIDC settings. By default, this value is "token".
|
|
|
|
|
authentication_method = token
|
|
|
|
|
|
|
|
|
|
# AuthenticateHeartBeats specifies whether to include authentication token in heartbeats sent to frps. By default, this value is false.
|
|
|
|
|
# authenticate_heartbeats specifies whether to include authentication token in heartbeats sent to frps. By default, this value is false.
|
|
|
|
|
authenticate_heartbeats = false
|
|
|
|
|
|
|
|
|
|
# AuthenticateNewWorkConns specifies whether to include authentication token in new work connections sent to frps. By default, this value is false.
|
|
|
|
@ -72,25 +73,31 @@ authenticate_new_work_conns = false
|
|
|
|
|
# auth token
|
|
|
|
|
token = 12345678
|
|
|
|
|
|
|
|
|
|
# OidcClientId specifies the client ID to use to get a token in OIDC authentication if AuthenticationMethod == "oidc".
|
|
|
|
|
# oidc_issuer specifies the issuer to verify OIDC tokens with.
|
|
|
|
|
# By default, this value is "".
|
|
|
|
|
oidc_client_id =
|
|
|
|
|
oidc_issuer =
|
|
|
|
|
|
|
|
|
|
# OidcClientSecret specifies the client secret to use to get a token in OIDC authentication if AuthenticationMethod == "oidc".
|
|
|
|
|
# oidc_audience specifies the audience OIDC tokens should contain when validated.
|
|
|
|
|
# By default, this value is "".
|
|
|
|
|
oidc_client_secret =
|
|
|
|
|
oidc_audience =
|
|
|
|
|
|
|
|
|
|
# oidc_skip_expiry_check specifies whether to skip checking if the OIDC token is expired.
|
|
|
|
|
# By default, this value is false.
|
|
|
|
|
oidc_skip_expiry_check = false
|
|
|
|
|
|
|
|
|
|
# OidcAudience specifies the audience of the token in OIDC authentication if AuthenticationMethod == "oidc". By default, this value is "".
|
|
|
|
|
oidc_audience =
|
|
|
|
|
|
|
|
|
|
# OidcTokenEndpointUrl specifies the URL which implements OIDC Token Endpoint.
|
|
|
|
|
# It will be used to get an OIDC token if AuthenticationMethod == "oidc". By default, this value is "".
|
|
|
|
|
oidc_token_endpoint_url =
|
|
|
|
|
# oidc_skip_issuer_check specifies whether to skip checking if the OIDC token's issuer claim matches the issuer specified in OidcIssuer.
|
|
|
|
|
# By default, this value is false.
|
|
|
|
|
oidc_skip_issuer_check = false
|
|
|
|
|
|
|
|
|
|
# heartbeat configure, it's not recommended to modify the default value
|
|
|
|
|
# the default value of heartbeat_timeout is 90
|
|
|
|
|
# heartbeat_timeout = 90
|
|
|
|
|
|
|
|
|
|
# user_conn_timeout configure, it's not recommended to modify the default value
|
|
|
|
|
# the default value of user_conn_timeout is 10
|
|
|
|
|
# user_conn_timeout = 10
|
|
|
|
|
|
|
|
|
|
# only allow frpc to bind ports you list, if you set nothing, there won't be any limit
|
|
|
|
|
allow_ports = 2000-3000,3001,3003,4000-50000
|
|
|
|
|
|
|
|
|
@ -100,7 +107,7 @@ max_pool_count = 5
|
|
|
|
|
# max ports can be used for each client, default value is 0 means no limit
|
|
|
|
|
max_ports_per_client = 0
|
|
|
|
|
|
|
|
|
|
# TlsOnly specifies whether to only accept TLS-encrypted connections. By default, the value is false.
|
|
|
|
|
# tls_only specifies whether to only accept TLS-encrypted connections. By default, the value is false.
|
|
|
|
|
tls_only = false
|
|
|
|
|
|
|
|
|
|
# tls_cert_file = server.crt
|
|
|
|
|