feat: complete unified plugin admin v1.1.0

2026-08-30 12:10:04 +08:00
parent 3c1a17f4d7
commit ada4ab3c21
69 changed files with 6681 additions and 901 deletions
@@ -7,16 +7,29 @@ Wants=network-online.target
 Type=simple
 User=sub2api-plugin
 Group=sub2api-plugin
-WorkingDirectory=/opt/sub2api/plugin-admin
-EnvironmentFile=/etc/sub2api/plugin-admin.env
-ExecStart=/opt/sub2api/plugin-admin/bin/plugin-admin
+WorkingDirectory=/var/lib/sub2api-add/plugin-admin
+EnvironmentFile=/etc/sub2api-add/plugin-admin.env
+ExecStart=/opt/sub2api-add/plugin-admin/bin/plugin-admin
 Restart=on-failure
 RestartSec=3
 NoNewPrivileges=true
 PrivateTmp=true
+PrivateDevices=true
 ProtectSystem=strict
 ProtectHome=true
-ReadWritePaths=/var/lib/sub2api/plugin-admin
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+CapabilityBoundingSet=
+LockPersonality=true
+MemoryDenyWriteExecute=true
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+TasksMax=128
+MemoryMax=512M
+CPUQuota=200%
+ReadWritePaths=/var/lib/sub2api-add/plugin-admin

 [Install]
 WantedBy=multi-user.target