sigmond-rac — Remote Access Channel

A sigmond infrastructure component that gives the WsprDaemon admin SSH/web access to a NAT'd station via an frpc reverse tunnel to gw2.wsprdaemon.org. Derived from the legacy wsprdaemon-client's wd-rac, repackaged so every sigmond install can carry it.

What it installs

• /usr/local/sbin/frpc — vendored frp client (per-arch, under bin/)
• /etc/sigmond/frps-ca.crt — frps TLS CA
• /etc/systemd/system/wd-rac.service — the tunnel unit (enabled, but inert via ConditionPathExists=/etc/sigmond/frpc.toml)
• /etc/sigmond/frpc.toml.template — station-specific, with the proxy name filled from STATION_CALL/instance; <...> placeholders for the gw2 assignment

Activating

The per-station user, token, and unique remotePort(s) are assigned on gw2 by the WsprDaemon admin. Fill them into the template, then:

sudo cp /etc/sigmond/frpc.toml.template /etc/sigmond/frpc.toml
sudo systemctl restart wd-rac

Until /etc/sigmond/frpc.toml exists the unit never starts (no fail-loop).

Proxmox HOST tunnel (install-host.sh)

A DASI2 site runs the station as a VM on a Proxmox host. The guest RAC above covers only the VM — install-host.sh installs a SECOND, independent frpc on the hypervisor so the site stays reachable even when the VM is down or being rebuilt. It publishes the host's own sshd only (no web proxy), as unit sigmond-rac-host.service, gated on /etc/sigmond/frpc-host.toml (same inert-until-configured model; its remotePort must be distinct from the guest's). Normally delivered and run by sigmond's proxmox bootstrap (install_host_rac); standalone:

# on the Proxmox host, from a sigmond-rac checkout:
sudo bash install-host.sh
# activate: fill /etc/sigmond/frpc-host.toml.template ->
#   cp ... /etc/sigmond/frpc-host.toml && systemctl restart sigmond-rac-host

Adding an arch

Drop frpc-<arch>-v<ver> into bin/ (from the frp release for that arch) and bump FRP_VER in install.sh.