mirror of
https://gitcode.com/JianFeeeee/webui4frpc.git
synced 2026-10-31 06:17:20 +00:00
ee46b758fa
所有交付形态统一成「只传 -config」，凭据留在配置文件 / secrets 文件里。
- systemd 单元：ExecStart 改为 `-config /etc/webui4frpc/config.json`，
EnvironmentFile 加 `-` 前缀变成可选；新增 ReadOnlyPaths=-/etc/webui4frpc/secret。
- 新增 packaging/common/config.json 示例：口令默认用
file:/etc/webui4frpc/secret/password 引用，内嵌以 "_" 开头的说明键。
- webui4frpc.env 瘦身为可选环境变量（${VAR} 取值来源），不再承载明文口令。
- deb/rpm：安装 config.json 与 0750 的 secret 目录，config.json 进 conffiles，
安装后提示改成「设置 password 文件」。
- release.sh 的分发单元模板同步改 -config；tar.gz 附 config.json.example。
- macOS pkg：写 config.json + secret/password，launch 包装脚本只传 -config。
- Windows NSIS：安装时把口令写进 secret-password.txt（icacls 限制为
SYSTEM/Administrators），生成 data/config.json 用 file: 引用，启动脚本只传
-config；顺带按 JSON 规则转义 addr/user。makensis 实测可编译通过。
29 lines
1.1 KiB
Bash
29 lines
1.1 KiB
Bash
# webui4frpc optional environment file.
|
|
#
|
|
# Listening address, admin credentials, workdir and peers now belong in
|
|
# /etc/webui4frpc/config.json — that file is what systemd passes via
|
|
# `webui4frpc -config ...`, and it keeps the password out of the unit file and
|
|
# out of `ps` output.
|
|
#
|
|
# Everything here is OPTIONAL; the unit uses `EnvironmentFile=-`, so this file
|
|
# may be empty or missing entirely.
|
|
#
|
|
# Referenced by config.json as ${VAR} (the variable must be set and non-empty,
|
|
# otherwise startup fails loudly rather than booting with an empty password):
|
|
# W4F_PASSWORD=change-me
|
|
#
|
|
# Cluster admission key, used by config.json as "join_key": "${W4F_JOIN_KEY}".
|
|
# W4F_JOIN_KEY=
|
|
#
|
|
# Overrides the advertised hostname for peers (container DNS / wildcard listen).
|
|
# W4F_HOST=
|
|
#
|
|
# Load balancing defaults (the per-node switch in the UI wins over these).
|
|
# W4F_BALANCE_MODE=dry-run
|
|
# W4F_BALANCE_COOLDOWN=600
|
|
# W4F_BALANCE_INTERVAL=10
|
|
|
|
# Optional: point at a config file outside /etc/webui4frpc. An explicit
|
|
# -config flag still wins over this.
|
|
# W4F_CONFIG=/etc/webui4frpc/config.json
|