{
  services.frp = {
    enable = true;
    role = "server";
    settings = {
      serverAddr = "0.0.0.0";
      serverPort = 7000;
    };
  };
  networking.firewall.allowedTCPPorts = [ 7000 ];
}