chore: initialize standalone business plugin repository

2026-08-27 23:36:08 +08:00
commit 5feae3ad41
59 changed files with 8950 additions and 0 deletions
@@ -0,0 +1,8 @@
+CORE_ORIGIN {
+    handle_path /extensions/qiu.plugin-admin/* {
+        reverse_proxy 127.0.0.1:8090
+    }
+}
+
+# Set PLUGIN_PUBLIC_BASE_PATH=/extensions/qiu.plugin-admin and
+# PLUGIN_COOKIE_PATH=/extensions/qiu.plugin-admin/.
@@ -0,0 +1,7 @@
+{
+  "id": "qiu.plugin-admin",
+  "label": "插件管理",
+  "url": "https://CORE_ORIGIN/extensions/qiu.plugin-admin/",
+  "visibility": "admin",
+  "sort_order": 190
+}
@@ -0,0 +1,13 @@
+location /extensions/qiu.plugin-admin/ {
+    proxy_pass http://127.0.0.1:8090/;
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-Host $host;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_read_timeout 30s;
+    proxy_send_timeout 30s;
+}
+
+# Set PLUGIN_PUBLIC_BASE_PATH and PLUGIN_COOKIE_PATH to this same path.
+# Keep the service bound to loopback and expose it only through HTTPS.
@@ -0,0 +1,22 @@
+[Unit]
+Description=Sub2API Business Plugin Control Plane
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=sub2api-plugin
+Group=sub2api-plugin
+WorkingDirectory=/opt/sub2api/plugin-admin
+EnvironmentFile=/etc/sub2api/plugin-admin.env
+ExecStart=/opt/sub2api/plugin-admin/bin/plugin-admin
+Restart=on-failure
+RestartSec=3
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/var/lib/sub2api/plugin-admin
+
+[Install]
+WantedBy=multi-user.target