feat: complete unified plugin admin v1.1.0

plugins/subscription-admin/deploy/custom-menu-item.json

@@ -1,7 +1,7 @@
 {
   "id": "qiu.subscription-admin",
   "label": "订阅管理",
-  "url": "https://CORE_ORIGIN/extensions/qiu.subscription-admin/",
+  "url": "https://CORE_ORIGIN/extensions/qiu.plugin-admin/admin/#/modules/subscription/overview",
   "visibility": "admin",
   "sort_order": 200
 }

plugins/subscription-admin/deploy/systemd.service.example

@@ -7,16 +7,29 @@ Wants=network-online.target
 Type=simple
 User=sub2api-plugin
 Group=sub2api-plugin
-WorkingDirectory=/opt/sub2api/subscription-admin
-EnvironmentFile=/etc/sub2api/subscription-admin.env
-ExecStart=/opt/sub2api/subscription-admin/bin/subscription-admin
+WorkingDirectory=/var/lib/sub2api-add/subscription-admin
+EnvironmentFile=/etc/sub2api-add/subscription-admin.env
+ExecStart=/opt/sub2api-add/subscription-admin/bin/subscription-admin
 Restart=on-failure
 RestartSec=3
 NoNewPrivileges=true
 PrivateTmp=true
+PrivateDevices=true
 ProtectSystem=strict
 ProtectHome=true
-ReadWritePaths=/var/lib/sub2api/subscription-admin
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+CapabilityBoundingSet=
+LockPersonality=true
+MemoryDenyWriteExecute=true
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+TasksMax=128
+MemoryMax=512M
+CPUQuota=200%
+ReadWritePaths=/var/lib/sub2api-add/subscription-admin
 
 [Install]
 WantedBy=multi-user.target