{
  pkgs,
  secrets,
  ...
}: let
  inherit (secrets) frp_config;
in {
  services.frp = {
    enable = true;
    role = "client";
    settings = {
      "common" = {
        server_addr = "${frp_config.ip}";
        server_port = 7000;
        authentication_method = "token";
        token = "${frp_config.token}";
      };

      "ssh.rico2" = {
        type = "tcp";
        local_port = 22;
        remote_port = 6002;
      };

      "http.adtya.xyz" = {
        type = "http";
        custom_domains = "adtya.xyz";
        local_port = 80;
      };

      "https.adtya.xyz" = {
        type = "https";
        custom_domains = "adtya.xyz";
        local_port = 443;
      };

      "http.www.adtya.xyz" = {
        type = "http";
        custom_domains = "www.adtya.xyz";
        local_port = 80;
      };

      "https.www.adtya.xyz" = {
        type = "https";
        custom_domains = "www.adtya.xyz";
        local_port = 443;
      };

      "http.proofs.adtya.xyz" = {
        type = "http";
        custom_domains = "proofs.adtya.xyz";
        local_port = 80;
      };

      "https.proofs.adtya.xyz" = {
        type = "https";
        custom_domains = "proofs.adtya.xyz";
        local_port = 443;
      };
    };
  };
}