Release v0.6.0 · wangwanjie/gately

中文

frp 多实例：可同时运行多个 frpc（各连一台 frps）与多个 frps 实例，各自独立进程、配置文件与日志；代理归属 frpc 实例，修改代理只重启受影响的实例；导入可指定已有或新建实例，Lucky 导入带上全部实例。旧版单个 frpc / frps 设置自动迁移为名为 frpc / frps 的实例。
Web 服务按登录用户分流（#29）：开启基本 / 网页 / 转发认证的反代站点可把指定用户转发到各自后端（类似 nginx map $remote_user），可选 X-Remote-User 等请求头传递用户名，访客伪造的同名头总会被删除。
站点分组、排序与搜索（#28）：站点可设分组、折叠显示，排序模式可拖动站点、整组移动、调整监听顺序，搜索框按域名 / 名称 / 分组 / 后端 / 备注过滤。
转发 Gately 登录 Cookie（#30）：公网 Gately 只做 WAF 与访问控制，由内网 Gately 负责网页认证与单点登录。
显示已保存的密码：眼睛按钮从新的 .../secrets 接口取回明文，需要写权限，查看记入审计日志；Web 终端密钥需先通过终端二次验证；gately mcp 默认只读模式不提供这类接口。

子域名单独托管在另一家 DNS 服务商时证书签发失败（#27）：主域名留空时按 SOA 查询权威区域，查到的区域比可注册域名还短时回退按域名推断；证书设置的 DNS 服务器只用于该证书。
frp 启动时清理残留的含令牌配置文件；迁移结果保存失败不再阻止其他模块启动；删除 frpc 实例时代理在同一次保存中删除；导入到已有实例时校验结果。

配置向后兼容，可直接升级；旧版生成的 frp/frpc.toml、frp/frps.toml 会被删除。
接口 /api/frp/client、/api/frp/server 已移除，改用 /api/frp/clients、/api/frp/servers、/api/frp/settings。

Several frp instances: run several frpc instances (each connected to one frps) and several frps instances, each with its own process, config file and log; proxies belong to an frpc instance and changes restart only the affected instances; imports can target an existing or a new instance and the Lucky import brings in every instance. Old single frpc / frps settings migrate to instances named frpc / frps.
Route Web Service requests by signed-in user (#29): reverse proxy sites with basic, web or forward authentication can send listed users to their own backends (like nginx map $remote_user), optionally passing the user name in a header such as X-Remote-User; the same header sent by visitors is always removed.
Site groups, sorting and search (#28): collapsible site groups, a Sort mode to drag sites, move groups and reorder listeners, and a search box over domain, name, group, backend and remark.
Forward Gately sign-in cookies (#30): a public Gately runs only the WAF and access control in front of a LAN Gately that handles web authentication and single sign-on.
Show saved passwords: an eye button fetches the plain text from new .../secrets endpoints; write permission is required and every lookup is audited; web terminal secrets need the terminal's two-factor check; the default read-only mode of gately mcp does not offer them.

Certificates for subdomains hosted at another DNS provider failed (#27): with the zone left empty, the authoritative zone is found with an SOA query, a zone shorter than the registrable domain falls back to inference, and DNS servers set on a certificate apply to that certificate only.
frp removes leftover config files containing tokens on start; a failure to save the migrated config no longer stops other modules; deleting an frpc instance removes its proxies in the same save; importing into an existing instance validates the result.

The config is backward compatible; frp/frpc.toml and frp/frps.toml written by older versions are removed.
/api/frp/client and /api/frp/server are removed in favor of /api/frp/clients, /api/frp/servers and /api/frp/settings.