feat: add controlled plugin marketplace lifecycle

2026-08-28 00:51:34 +08:00
parent dc1c799b98
commit 028b505c36
16 changed files with 1149 additions and 45 deletions
@@ -12,3 +12,7 @@ PLUGIN_ALLOW_UNSIGNED=false
 PLUGIN_CONFIG_KEY=generate-and-replace-with-a-random-32-byte-secret
 # JSON object: {"publisher-key-id":"BASE64_ED25519_PUBLIC_KEY"}
 PLUGIN_TRUSTED_PUBLISHERS={}
+# The default catalog is a local file. For a remote catalog use an HTTPS URL
+# and list its exact host (including port when non-standard) below.
+PLUGIN_MARKETPLACE_INDEX=/var/lib/sub2api-add/plugin-admin/marketplace/index.json
+PLUGIN_MARKETPLACE_ALLOWED_HOSTS=