From ef913abe9e4e31bb471d8c1a5e166ca7716964d7 Mon Sep 17 00:00:00 2001 From: imxyy_soope_ Date: Sat, 8 Nov 2025 21:49:12 +0800 Subject: [PATCH] feat: secure frp server address --- config/hosts/imxyy-nix-server/net.nix | 4 ++-- secrets/frp.env | 7 ++++--- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/config/hosts/imxyy-nix-server/net.nix b/config/hosts/imxyy-nix-server/net.nix index 08bd0ae..985432d 100644 --- a/config/hosts/imxyy-nix-server/net.nix +++ b/config/hosts/imxyy-nix-server/net.nix @@ -175,7 +175,7 @@ enable = true; role = "client"; settings = { - serverAddr = "hk.vkvm.imxyy.top"; + serverAddr = "{{ .Envs.FRP_SERVER_ADDR }}"; serverPort = 7000; auth.token = "{{ .Envs.FRP_AUTH_TOKEN }}"; proxies = [ @@ -539,4 +539,4 @@ log-queries = "extra"; }; }; -} +} \ No newline at end of file diff --git a/secrets/frp.env b/secrets/frp.env index 2b8743c..f13483d 100644 --- a/secrets/frp.env +++ b/secrets/frp.env @@ -1,3 +1,4 @@ +FRP_SERVER_ADDR=ENC[AES256_GCM,data:8RVPir4laCnHAR9zj6mlcc3ucrE=,iv:gdhwdyZVMyT07r6EuEIES1lInJcc5bY7xWtuwFI4Bds=,tag:4YK/eN5Yf7IZvU/ZSIBuLw==,type:str] FRP_AUTH_TOKEN=ENC[AES256_GCM,data:CXFJwOOHEbtn1PI0TQc=,iv:yItYliwZGxZs8YAWksV7BqJP3TUBadxXpf99J5nXR3A=,tag:9earTQfuoLO132UZnTjlWQ==,type:str] sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IDltTWRrUSA3MGVN\nU2NSR2F1R3g0dldCbGtaZGRtRCt3NGg2YnZQTGVDN3RtaEhUMkVzCnJrdzlRSTB4\nVG14KzNXUHlib1RGTy9DVnJwdDRaaTZ5ZGVoWWUvNm9KSncKLS0tIGVpMlQzQ24v\nRVhVVTVSTWNlUVN3L0x0dFJMN3JxODZBTHdIUFJxZEViWjQKv+64wRf+a0Ci4XXp\nesM8zaQXeFPIstdsOJCj8yD5ARZi4kUnhRjRK1/xmjyLmh9h8rZ3QQyUF4uh+Jhi\nQJ0Qkw==\n-----END AGE ENCRYPTED FILE-----\n sops_age__list_0__map_recipient=ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEFLUkyeaK8ZPPZdVNEmtx8zvoxi7xqS2Z6oxRBuUPO @@ -5,7 +6,7 @@ sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb2 sops_age__list_1__map_recipient=ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB28jpN+h5euh3NtdN+A+EtqgIatC22e4i1TPTioKire sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFhGYmtrZyAwZFFW\ncERDSnRiL0dMbmVQMGhDMWNSbXpUVVhXeXJreEVzN2dmNlJpWG5nCmV2OGVUMmZ3\nQjRqdGlnc3FtWVpxbHhnMk9xeW9BVUdoTlFud3RKRHNKcVUKLS0tIHZpbTltYnNk\nZEVqUWlhdmloRGVQU05YMkF5aUdmNExPVysxZm55czdZVEEKWo3hFbF1007tSgYq\nzVK1ycmeQglKDNPS1yVedBoF/gj1L69EmjhiOLMMwAetMINufQQpcFRR88VQlqQp\nMPaXMQ==\n-----END AGE ENCRYPTED FILE-----\n sops_age__list_2__map_recipient=ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMb5G/ieEYBOng66YeyttBQLThyM6W//z2POsNyq4Rw/ -sops_lastmodified=2025-04-13T06:57:07Z -sops_mac=ENC[AES256_GCM,data:WJ9FCO78LRFbU7o9uEZ70s/OJIHN5/UQVKrgt/Zve6x9yVChaRtHmvk7kF/SoRsheLIbeYoY8RI0rUn3Sx7Y7o/ib/u9dMAec0xGt0K6+yde0DUO/uH1KpjXd6WHRPjoMERld6xA1fWVRu7G+gXrEZA1dN5Jbs8ZWVYGF6IBw2A=,iv:r4eYeCDJOw40hK7cyIEbEW+Pq+VFgUOJr1ydkSyjaEg=,tag:ucFH1pNqAHg7eWm1tYYi/g==,type:str] +sops_lastmodified=2025-11-09T02:56:14Z +sops_mac=ENC[AES256_GCM,data:4R9WVOAX0CORavojMhvOA6pYOdNE7sHBTi3rf96HMQlAF45TmLtO5GUk74BLYliutpyWryx1vP63FK3UgQG80K9FhdNc7a8L1DSypwPHp3Wlu0blWq/bHhQVqsiy0bnYrhaENQjW2Ks+psRveZ0QSYBAUfggJ41rG2e5cgN8Ecc=,iv:O0P1Oj7aH04b64gMC0iKAhhEsssikvEPZhLB651VSmg=,tag:cLO0J8OHstq2DDkG07C6FQ==,type:str] sops_unencrypted_suffix=_unencrypted -sops_version=3.10.1 +sops_version=3.11.0