feat(mailserver): Add password reset UI for mail users

- Add Reset Password button to user table
- Add showResetPasswordModal with password confirmation
- Add callUserPasswd RPC declaration
- Fix RPCD handler to read JSON from stdin or $3

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

package/secubox/luci-app-mailserver/htdocs/luci-static/resources/view/mailserver/overview.js

@@ -68,6 +68,13 @@ var callAliasAdd = rpc.declare({
 	expect: {}
 });
 
+var callUserPasswd = rpc.declare({
+	object: 'luci.mailserver',
+	method: 'user_passwd',
+	params: ['email', 'password'],
+	expect: {}
+});
+
 var callDnsSetup = rpc.declare({
 	object: 'luci.mailserver',
 	method: 'dns_setup',
@@ -243,6 +250,11 @@ return view.extend({
 				E('td', { 'class': 'td' }, u.size || '0'),
 				E('td', { 'class': 'td' }, String(u.messages || 0)),
 				E('td', { 'class': 'td' }, [
+					E('button', {
+						'class': 'btn cbi-button-neutral',
+						'style': 'padding:2px 8px;font-size:12px;margin-right:5px',
+						'click': ui.createHandlerFn(this, this.showResetPasswordModal, u.email)
+					}, 'Reset Password'),
 					E('button', {
 						'class': 'btn cbi-button-remove',
 						'style': 'padding:2px 8px;font-size:12px',
@@ -364,6 +376,50 @@ return view.extend({
 		]);
 	},
 
+	showResetPasswordModal: function(email) {
+		var passwordInput, confirmInput;
+
+		ui.showModal('Reset Password', [
+			E('p', {}, 'Enter new password for: ' + email),
+			E('div', { 'class': 'cbi-value' }, [
+				E('label', { 'class': 'cbi-value-title' }, 'New Password'),
+				E('div', { 'class': 'cbi-value-field' }, [
+					passwordInput = E('input', { 'type': 'password', 'class': 'cbi-input-text' })
+				])
+			]),
+			E('div', { 'class': 'cbi-value' }, [
+				E('label', { 'class': 'cbi-value-title' }, 'Confirm'),
+				E('div', { 'class': 'cbi-value-field' }, [
+					confirmInput = E('input', { 'type': 'password', 'class': 'cbi-input-text' })
+				])
+			]),
+			E('div', { 'class': 'right' }, [
+				E('button', {
+					'class': 'btn',
+					'click': ui.hideModal
+				}, 'Cancel'),
+				' ',
+				E('button', {
+					'class': 'btn cbi-button-action',
+					'click': ui.createHandlerFn(this, function() {
+						var password = passwordInput.value;
+						var confirm = confirmInput.value;
+						if (!password) {
+							ui.addNotification(null, E('p', 'Password required'), 'error');
+							return;
+						}
+						if (password !== confirm) {
+							ui.addNotification(null, E('p', 'Passwords do not match'), 'error');
+							return;
+						}
+						ui.hideModal();
+						return this.doResetPassword(email, password);
+					})
+				}, 'Reset Password')
+			])
+		]);
+	},
+
 	doStart: function() {
 		ui.showModal('Starting Server', [
 			E('p', { 'class': 'spinning' }, 'Starting mail server...')
@@ -421,6 +477,20 @@ return view.extend({
 		});
 	},
 
+	doResetPassword: function(email, password) {
+		ui.showModal('Resetting Password', [
+			E('p', { 'class': 'spinning' }, 'Resetting password for: ' + email)
+		]);
+		return callUserPasswd(email, password).then(function(res) {
+			ui.hideModal();
+			if (res.code === 0) {
+				ui.addNotification(null, E('p', 'Password reset for: ' + email), 'success');
+			} else {
+				ui.addNotification(null, E('p', 'Failed: ' + (res.error || res.output)), 'error');
+			}
+		});
+	},
+
 	doDnsSetup: function() {
 		ui.showModal('DNS Setup', [
 			E('p', { 'class': 'spinning' }, 'Creating MX, SPF, DMARC records...')

package/secubox/luci-app-mailserver/root/usr/libexec/rpcd/luci.mailserver

@@ -251,7 +251,13 @@ case "$1" in
 				;;
 
 			user_passwd)
-				json_load "$3"
+				# Read JSON from stdin or $3
+				if [ -n "$3" ]; then
+					json_load "$3"
+				else
+					read -r _input
+					json_load "$_input"
+				fi
 				json_get_var email email
 				json_get_var password password
 

package/secubox/secubox-app-bonus/root/www/secubox-feed/Packages

@@ -8,7 +8,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Comprehensive authentication and session management with captive portal, OAuth2/OIDC integration, voucher system, and time-based access control
 Filename: luci-app-auth-guardian_0.4.0-r3_all.ipk
-Size: 11735
+Size: 11741
 
 Package: luci-app-bandwidth-manager
 Version: 0.5.0-r2
@@ -20,7 +20,7 @@ Architecture: all
 Installed-Size: 337920
 Description:  Advanced bandwidth management with QoS rules, client quotas, and SQM integration
 Filename: luci-app-bandwidth-manager_0.5.0-r2_all.ipk
-Size: 61539
+Size: 61541
 
 Package: luci-app-cdn-cache
 Version: 0.5.0-r3
@@ -32,7 +32,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Dashboard for managing local CDN caching proxy on OpenWrt
 Filename: luci-app-cdn-cache_0.5.0-r3_all.ipk
-Size: 23185
+Size: 23183
 
 Package: luci-app-client-guardian
 Version: 0.4.0-r7
@@ -46,6 +46,18 @@ Description:  Network Access Control with client monitoring, zone management, ca
 Filename: luci-app-client-guardian_0.4.0-r7_all.ipk
 Size: 54534
 
+Package: luci-app-config-advisor
+Version: 1.0.0-r1
+Depends: luci-base, secubox-config-advisor
+License: MIT
+Section: luci
+Maintainer: OpenWrt LuCI community
+Architecture: all
+Installed-Size: 51200
+Description:  ANSSI CSPN compliance checking and security configuration advisor
+Filename: luci-app-config-advisor_1.0.0-r1_all.ipk
+Size: 8819
+
 Package: luci-app-crowdsec-dashboard
 Version: 0.7.0-r32
 Depends: luci-base, luci-lib-jsonc, rpcd, rpcd-mod-luci, crowdsec
@@ -56,7 +68,7 @@ Architecture: all
 Installed-Size: 184320
 Description:  Real-time security monitoring dashboard for CrowdSec on OpenWrt
 Filename: luci-app-crowdsec-dashboard_0.7.0-r32_all.ipk
-Size: 33737
+Size: 33740
 
 Package: luci-app-cyberfeed
 Version: 0.1.1-r1
@@ -68,7 +80,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Cyberpunk-themed RSS feed aggregator dashboard with social media support
 Filename: luci-app-cyberfeed_0.1.1-r1_all.ipk
-Size: 12839
+Size: 12841
 
 Package: luci-app-device-intel
 Version: 1.0.0-r1
@@ -80,7 +92,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  LuCI SecuBox Device Intelligence
 Filename: luci-app-device-intel_1.0.0-r1_all.ipk
-Size: 10854
+Size: 10860
 
 Package: luci-app-dnsguard
 Version: 1.1.0-r1
@@ -111,7 +123,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI DNS Provider Manager
 Filename: luci-app-dns-provider_1.0.0-r1_all.ipk
-Size: 7131
+Size: 7127
 
 Package: luci-app-exposure
 Version: 1.0.0-r3
@@ -123,7 +135,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  LuCI SecuBox Service Exposure Manager
 Filename: luci-app-exposure_1.0.0-r3_all.ipk
-Size: 9847
+Size: 9841
 
 Package: luci-app-gitea
 Version: 1.0.0-r2
@@ -135,7 +147,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Modern dashboard for Gitea Platform management on OpenWrt
 Filename: luci-app-gitea_1.0.0-r2_all.ipk
-Size: 15301
+Size: 15304
 
 Package: luci-app-glances
 Version: 1.0.0-r2
@@ -147,7 +159,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  Modern dashboard for Glances system monitoring with SecuBox theme
 Filename: luci-app-glances_1.0.0-r2_all.ipk
-Size: 6966
+Size: 6965
 
 Package: luci-app-haproxy
 Version: 1.0.0-r8
@@ -159,7 +171,7 @@ Architecture: all
 Installed-Size: 204800
 Description:  Web interface for managing HAProxy load balancer with vhosts, SSL certificates, and backend routing
 Filename: luci-app-haproxy_1.0.0-r8_all.ipk
-Size: 34560
+Size: 34561
 
 Package: luci-app-hexojs
 Version: 1.0.0-r3
@@ -171,7 +183,7 @@ Architecture: all
 Installed-Size: 184320
 Description:  Modern dashboard for Hexo static site generator on OpenWrt
 Filename: luci-app-hexojs_1.0.0-r3_all.ipk
-Size: 30308
+Size: 30303
 
 Package: luci-app-jellyfin
 Version: 1.0.0-r1
@@ -183,7 +195,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI Jellyfin Media Server Configuration
 Filename: luci-app-jellyfin_1.0.0-r1_all.ipk
-Size: 6062
+Size: 6059
 
 Package: luci-app-jitsi
 Version: 1.0.0-r1
@@ -195,7 +207,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI Jitsi Meet Configuration
 Filename: luci-app-jitsi_1.0.0-r1_all.ipk
-Size: 5135
+Size: 5138
 
 Package: luci-app-ksm-manager
 Version: 0.4.0-r2
@@ -207,7 +219,7 @@ Architecture: all
 Installed-Size: 112640
 Description:  Centralized cryptographic key management with hardware security module (HSM) support for Nitrokey and YubiKey devices. Provides secure key storage, certificate management, SSH key handling, and secret storage with audit logging.
 Filename: luci-app-ksm-manager_0.4.0-r2_all.ipk
-Size: 18724
+Size: 18721
 
 Package: luci-app-localai
 Version: 0.1.0-r15
@@ -219,7 +231,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Modern dashboard for LocalAI LLM management on OpenWrt
 Filename: luci-app-localai_0.1.0-r15_all.ipk
-Size: 13183
+Size: 13180
 
 Package: luci-app-lyrion
 Version: 1.0.0-r1
@@ -231,7 +243,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI support for Lyrion Music Server
 Filename: luci-app-lyrion_1.0.0-r1_all.ipk
-Size: 6727
+Size: 6724
 
 Package: luci-app-mac-guardian
 Version: 0.5.0-r1
@@ -243,7 +255,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI MAC Guardian - WiFi MAC Security Monitor
 Filename: luci-app-mac-guardian_0.5.0-r1_all.ipk
-Size: 6512
+Size: 6513
 
 Package: luci-app-magicmirror2
 Version: 0.4.0-r6
@@ -255,7 +267,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Modern dashboard for MagicMirror2 smart display platform with module manager and SecuBox theme
 Filename: luci-app-magicmirror2_0.4.0-r6_all.ipk
-Size: 12277
+Size: 12275
 
 Package: luci-app-mailinabox
 Version: 1.0.0-r1
@@ -267,7 +279,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Mail-in-a-Box
 Filename: luci-app-mailinabox_1.0.0-r1_all.ipk
-Size: 5485
+Size: 5484
 
 Package: luci-app-master-link
 Version: 1.0.0-r1
@@ -279,7 +291,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI SecuBox Master-Link Mesh Management
 Filename: luci-app-master-link_1.0.0-r1_all.ipk
-Size: 6246
+Size: 6245
 
 Package: luci-app-media-flow
 Version: 0.6.4-r1
@@ -291,7 +303,7 @@ Architecture: all
 Installed-Size: 133120
 Description:  Real-time detection and monitoring of streaming services (Netflix, YouTube, Spotify, etc.) with quality estimation, history tracking, and alerts. Supports nDPId local DPI and netifyd.
 Filename: luci-app-media-flow_0.6.4-r1_all.ipk
-Size: 25419
+Size: 25416
 
 Package: luci-app-metablogizer
 Version: 1.0.0-r5
@@ -303,7 +315,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  LuCI support for MetaBlogizer Static Site Publisher
 Filename: luci-app-metablogizer_1.0.0-r5_all.ipk
-Size: 24774
+Size: 24769
 
 Package: luci-app-metabolizer
 Version: 1.0.0-r2
@@ -315,7 +327,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Metabolizer CMS
 Filename: luci-app-metabolizer_1.0.0-r2_all.ipk
-Size: 4760
+Size: 4758
 
 Package: luci-app-mitmproxy
 Version: 0.5.0-r2
@@ -327,7 +339,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  Modern dashboard for mitmproxy HTTPS traffic inspection with SecuBox theme
 Filename: luci-app-mitmproxy_0.5.0-r2_all.ipk
-Size: 11147
+Size: 11146
 
 Package: luci-app-mmpm
 Version: 0.2.0-r3
@@ -339,7 +351,7 @@ Architecture: all
 Installed-Size: 51200
 Description:  Web interface for MMPM - MagicMirror Package Manager
 Filename: luci-app-mmpm_0.2.0-r3_all.ipk
-Size: 7903
+Size: 7900
 
 Package: luci-app-mqtt-bridge
 Version: 0.4.0-r4
@@ -351,7 +363,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  USB-to-MQTT IoT hub with SecuBox theme
 Filename: luci-app-mqtt-bridge_0.4.0-r4_all.ipk
-Size: 22780
+Size: 22777
 
 Package: luci-app-ndpid
 Version: 1.1.2-r2
@@ -363,7 +375,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Modern dashboard for nDPId deep packet inspection on OpenWrt
 Filename: luci-app-ndpid_1.1.2-r2_all.ipk
-Size: 22654
+Size: 22652
 
 Package: luci-app-netdata-dashboard
 Version: 0.5.0-r2
@@ -375,7 +387,7 @@ Architecture: all
 Installed-Size: 112640
 Description:  Real-time system monitoring dashboard with Netdata integration for OpenWrt
 Filename: luci-app-netdata-dashboard_0.5.0-r2_all.ipk
-Size: 20487
+Size: 20483
 
 Package: luci-app-network-modes
 Version: 0.5.0-r3
@@ -387,7 +399,7 @@ Architecture: all
 Installed-Size: 286720
 Description:  Configure OpenWrt for different network modes: Sniffer, Access Point, Relay, Router
 Filename: luci-app-network-modes_0.5.0-r3_all.ipk
-Size: 54151
+Size: 54149
 
 Package: luci-app-network-tweaks
 Version: 1.0.0-r7
@@ -399,7 +411,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Unified network services dashboard with DNS/hosts sync, CDN cache control, and WPAD auto-proxy configuration
 Filename: luci-app-network-tweaks_1.0.0-r7_all.ipk
-Size: 14959
+Size: 14960
 
 Package: luci-app-nextcloud
 Version: 1.0.0-r1
@@ -411,7 +423,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Nextcloud
 Filename: luci-app-nextcloud_1.0.0-r1_all.ipk
-Size: 6482
+Size: 6486
 
 Package: luci-app-ollama
 Version: 0.1.0-r1
@@ -423,7 +435,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  Modern dashboard for Ollama LLM management on OpenWrt
 Filename: luci-app-ollama_0.1.0-r1_all.ipk
-Size: 12354
+Size: 12352
 
 Package: luci-app-picobrew
 Version: 1.0.0-r1
@@ -435,7 +447,7 @@ Architecture: all
 Installed-Size: 51200
 Description:  Modern dashboard for PicoBrew Server management on OpenWrt
 Filename: luci-app-picobrew_1.0.0-r1_all.ipk
-Size: 9462
+Size: 9456
 
 Package: luci-app-secubox
 Version: 0.7.1-r4
@@ -447,7 +459,7 @@ Architecture: all
 Installed-Size: 419840
 Description:  Central control hub for all SecuBox modules. Provides unified dashboard, module status, system health monitoring, and quick actions.
 Filename: luci-app-secubox_0.7.1-r4_all.ipk
-Size: 77681
+Size: 77680
 
 Package: luci-app-secubox-admin
 Version: 1.0.0-r19
@@ -458,7 +470,7 @@ Architecture: all
 Installed-Size: 337920
 Description:  Unified admin control center for SecuBox appstore plugins with system monitoring
 Filename: luci-app-secubox-admin_1.0.0-r19_all.ipk
-Size: 57250
+Size: 57247
 
 Package: luci-app-secubox-crowdsec
 Version: 1.0.0-r3
@@ -470,7 +482,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  LuCI SecuBox CrowdSec Dashboard
 Filename: luci-app-secubox-crowdsec_1.0.0-r3_all.ipk
-Size: 13923
+Size: 13915
 
 Package: luci-app-secubox-netdiag
 Version: 1.0.0-r1
@@ -482,7 +494,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Real-time DSA switch port statistics, error monitoring, and network health diagnostics
 Filename: luci-app-secubox-netdiag_1.0.0-r1_all.ipk
-Size: 15309
+Size: 15306
 
 Package: luci-app-secubox-netifyd
 Version: 1.2.1-r1
@@ -494,7 +506,7 @@ Architecture: all
 Installed-Size: 194560
 Description:  Complete LuCI interface for netifyd DPI engine with real-time flow monitoring, application detection, network analytics, and flow action plugins
 Filename: luci-app-secubox-netifyd_1.2.1-r1_all.ipk
-Size: 36543
+Size: 36539
 
 Package: luci-app-secubox-p2p
 Version: 0.1.0-r1
@@ -518,7 +530,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Unified entry point for all SecuBox applications with tabbed navigation
 Filename: luci-app-secubox-portal_0.7.0-r2_all.ipk
-Size: 24643
+Size: 24642
 
 Package: luci-app-secubox-security-threats
 Version: 1.0.0-r4
@@ -530,7 +542,7 @@ Architecture: all
 Installed-Size: 102400
 Description:  Unified dashboard integrating netifyd DPI threats with CrowdSec intelligence for real-time threat monitoring and automated blocking
 Filename: luci-app-secubox-security-threats_1.0.0-r4_all.ipk
-Size: 21896
+Size: 21897
 
 Package: luci-app-service-registry
 Version: 1.0.0-r1
@@ -542,7 +554,7 @@ Architecture: all
 Installed-Size: 194560
 Description:  Unified service aggregation with HAProxy vhosts, Tor hidden services, and QR-coded landing page
 Filename: luci-app-service-registry_1.0.0-r1_all.ipk
-Size: 39826
+Size: 39824
 
 Package: luci-app-simplex
 Version: 1.0.0-r1
@@ -554,7 +566,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI SimpleX Chat Server Configuration
 Filename: luci-app-simplex_1.0.0-r1_all.ipk
-Size: 6999
+Size: 7000
 
 Package: luci-app-streamlit
 Version: 1.0.0-r11
@@ -566,7 +578,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Multi-instance Streamlit management with Gitea integration
 Filename: luci-app-streamlit_1.0.0-r11_all.ipk
-Size: 14748
+Size: 14746
 
 Package: luci-app-system-hub
 Version: 0.5.1-r4
@@ -578,7 +590,7 @@ Architecture: all
 Installed-Size: 317440
 Description:  Central system control with monitoring, services, logs, and backup
 Filename: luci-app-system-hub_0.5.1-r4_all.ipk
-Size: 61105
+Size: 61102
 
 Package: luci-app-threat-analyst
 Version: 1.0.0-r1
@@ -590,7 +602,7 @@ Architecture: all
 Installed-Size: 51200
 Description:  LuCI Threat Analyst Dashboard
 Filename: luci-app-threat-analyst_1.0.0-r1_all.ipk
-Size: 9751
+Size: 9752
 
 Package: luci-app-tor-shield
 Version: 1.0.0-r10
@@ -602,7 +614,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Modern dashboard for Tor anonymization on OpenWrt
 Filename: luci-app-tor-shield_1.0.0-r10_all.ipk
-Size: 22364
+Size: 22359
 
 Package: luci-app-traffic-shaper
 Version: 0.4.0-r2
@@ -614,7 +626,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Advanced traffic shaping with TC/CAKE for precise bandwidth control
 Filename: luci-app-traffic-shaper_0.4.0-r2_all.ipk
-Size: 14534
+Size: 14532
 
 Package: luci-app-vhost-manager
 Version: 0.5.0-r5
@@ -626,7 +638,7 @@ Architecture: all
 Installed-Size: 153600
 Description:  Nginx reverse proxy manager with Let's Encrypt SSL certificates, authentication, and WebSocket support
 Filename: luci-app-vhost-manager_0.5.0-r5_all.ipk
-Size: 26186
+Size: 26184
 
 Package: luci-app-vortex-dns
 Version: 1.0.0-r1
@@ -650,7 +662,7 @@ Architecture: all
 Installed-Size: 204800
 Description:  Modern dashboard for WireGuard VPN monitoring on OpenWrt
 Filename: luci-app-wireguard-dashboard_0.7.0-r5_all.ipk
-Size: 39608
+Size: 39605
 
 Package: luci-app-zigbee2mqtt
 Version: 1.0.0-r2
@@ -662,7 +674,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  Graphical interface for managing the Zigbee2MQTT docker application.
 Filename: luci-app-zigbee2mqtt_1.0.0-r2_all.ipk
-Size: 6815
+Size: 6811
 
 Package: luci-theme-secubox
 Version: 0.4.7-r1
@@ -674,7 +686,7 @@ Architecture: all
 Installed-Size: 450560
 Description:  Global CyberMood design system (CSS/JS/i18n) shared by all SecuBox dashboards.
 Filename: luci-theme-secubox_0.4.7-r1_all.ipk
-Size: 110239
+Size: 110237
 
 Package: secubox-app
 Version: 1.0.0-r2
@@ -699,7 +711,7 @@ Description:  Installer, configuration, and service manager for running AdGuard
  inside Docker on SecuBox-powered OpenWrt systems. Network-wide ad blocker
  with DNS-over-HTTPS/TLS support and detailed analytics.
 Filename: secubox-app-adguardhome_1.0.0-r2_all.ipk
-Size: 2879
+Size: 2882
 
 Package: secubox-app-auth-logger
 Version: 1.2.2-r1
@@ -717,7 +729,7 @@ Description:  Logs authentication failures from LuCI/rpcd and Dropbear SSH
  - JavaScript hook to intercept login failures
  - CrowdSec parser and bruteforce scenario
 Filename: secubox-app-auth-logger_1.2.2-r1_all.ipk
-Size: 9375
+Size: 9379
 
 Package: secubox-app-crowdsec-custom
 Version: 1.1.0-r1
@@ -740,7 +752,7 @@ Description:  Custom CrowdSec configurations for SecuBox web interface protectio
  - Webapp generic auth bruteforce protection
  - Whitelist for trusted networks
 Filename: secubox-app-crowdsec-custom_1.1.0-r1_all.ipk
-Size: 5764
+Size: 5759
 
 Package: secubox-app-cs-firewall-bouncer
 Version: 0.0.31-r4
@@ -767,7 +779,7 @@ Description:  SecuBox CrowdSec Firewall Bouncer for OpenWrt.
  - Automatic restart on firewall reload
  - procd service management
 Filename: secubox-app-cs-firewall-bouncer_0.0.31-r4_aarch64_cortex-a72.ipk
-Size: 5049322
+Size: 5049324
 
 Package: secubox-app-cyberfeed
 Version: 0.2.1-r1
@@ -781,7 +793,7 @@ Description:  Cyberpunk-themed RSS feed aggregator for OpenWrt/SecuBox.
  Features emoji injection, neon styling, and RSS-Bridge support
  for social media feeds (Facebook, Twitter, Mastodon).
 Filename: secubox-app-cyberfeed_0.2.1-r1_all.ipk
-Size: 12451
+Size: 12447
 
 Package: secubox-app-device-intel
 Version: 1.0.0-r1
@@ -795,7 +807,7 @@ Description:  Unified device inventory aggregating mac-guardian, client-guardian
  P2P mesh, and exposure scanner data. Includes heuristic classification
  and pluggable emulator modules for MQTT, Zigbee, and USB devices.
 Filename: secubox-app-device-intel_1.0.0-r1_all.ipk
-Size: 13006
+Size: 13002
 
 Package: secubox-app-dns-provider
 Version: 1.0.0-r1
@@ -809,7 +821,7 @@ Description:  Programmatic DNS record management via provider APIs (OVH, Gandi
  Cloudflare). Provides the dnsctl CLI for record CRUD, zone sync
  DNS propagation verification, and ACME DNS-01 challenge support.
 Filename: secubox-app-dns-provider_1.0.0-r1_all.ipk
-Size: 6700
+Size: 6698
 
 Package: secubox-app-domoticz
 Version: 1.0.0-r2
@@ -822,7 +834,7 @@ Installed-Size: 10240
 Description:  Installer, configuration, and service manager for running Domoticz
  inside Docker on SecuBox-powered OpenWrt systems.
 Filename: secubox-app-domoticz_1.0.0-r2_all.ipk
-Size: 2544
+Size: 2548
 
 Package: secubox-app-exposure
 Version: 1.0.0-r1
@@ -837,7 +849,7 @@ Description:  Unified service exposure manager for SecuBox.
  - Dynamic Tor hidden service management
  - HAProxy SSL reverse proxy configuration
 Filename: secubox-app-exposure_1.0.0-r1_all.ipk
-Size: 6931
+Size: 6934
 
 Package: secubox-app-gitea
 Version: 1.0.0-r5
@@ -860,7 +872,7 @@ Description:  Gitea Git Platform - Self-hosted lightweight Git service
  Runs in LXC container with Alpine Linux.
  Configure in /etc/config/gitea.
 Filename: secubox-app-gitea_1.0.0-r5_all.ipk
-Size: 9403
+Size: 9407
 
 Package: secubox-app-glances
 Version: 1.0.0-r1
@@ -883,7 +895,7 @@ Description:  Glances - Cross-platform system monitoring tool for SecuBox.
  Runs in LXC container for isolation and security.
  Configure in /etc/config/glances.
 Filename: secubox-app-glances_1.0.0-r1_all.ipk
-Size: 5534
+Size: 5530
 
 Package: secubox-app-haproxy
 Version: 1.0.0-r23
@@ -903,7 +915,7 @@ Description:  HAProxy load balancer and reverse proxy running in an LXC containe
  - Stats dashboard
  - Rate limiting and ACLs
 Filename: secubox-app-haproxy_1.0.0-r23_all.ipk
-Size: 15683
+Size: 15682
 
 Package: secubox-app-hexojs
 Version: 1.0.0-r8
@@ -927,7 +939,7 @@ Description:  Hexo CMS - Self-hosted static blog generator for OpenWrt
  Runs in LXC container with Alpine Linux.
  Configure in /etc/config/hexojs.
 Filename: secubox-app-hexojs_1.0.0-r8_all.ipk
-Size: 94934
+Size: 94935
 
 Package: secubox-app-jellyfin
 Version: 1.0.0-r1
@@ -941,7 +953,7 @@ Description:  Installer, configuration, and service manager for running Jellyfin
  inside Docker on SecuBox-powered OpenWrt systems. Free media server
  for streaming movies, TV shows, music, and photos.
 Filename: secubox-app-jellyfin_1.0.0-r1_all.ipk
-Size: 6178
+Size: 6176
 
 Package: secubox-app-jitsi
 Version: 1.0.0-r1
@@ -988,7 +1000,7 @@ Description:  LocalAI native binary package for OpenWrt.
  
  API: http://<router-ip>:8081/v1
 Filename: secubox-app-localai_2.25.0-r1_all.ipk
-Size: 5711
+Size: 5725
 
 Package: secubox-app-localai-wb
 Version: 2.25.0-r1
@@ -1032,7 +1044,7 @@ Description:  Lyrion Media Server (formerly Logitech Media Server / Squeezebox S
  Auto-detects available runtime, preferring LXC for lower resource usage.
  Configure runtime in /etc/config/lyrion.
 Filename: secubox-app-lyrion_2.0.2-r1_all.ipk
-Size: 7289
+Size: 7282
 
 Package: secubox-app-mac-guardian
 Version: 0.5.0-r1
@@ -1047,7 +1059,7 @@ Description:  WiFi MAC address security monitor for SecuBox.
  and spoofing. Integrates with CrowdSec and provides
  real-time hostapd hotplug detection.
 Filename: secubox-app-mac-guardian_0.5.0-r1_all.ipk
-Size: 12094
+Size: 12096
 
 Package: secubox-app-magicmirror2
 Version: 0.4.0-r8
@@ -1069,7 +1081,7 @@ Description:  MagicMirror² - Open source modular smart mirror platform for Secu
  Runs in LXC container for isolation and security.
  Configure in /etc/config/magicmirror2.
 Filename: secubox-app-magicmirror2_0.4.0-r8_all.ipk
-Size: 9252
+Size: 9248
 
 Package: secubox-app-mailinabox
 Version: 2.0.0-r1
@@ -1115,7 +1127,7 @@ Description:  Metabolizer Blog Pipeline - Integrated CMS with Git-based workflow
  
  Pipeline: Edit in Streamlit -> Push to Gitea -> Build with Hexo -> Publish
 Filename: secubox-app-metabolizer_1.0.0-r3_all.ipk
-Size: 13976
+Size: 13977
 
 Package: secubox-app-mitmproxy
 Version: 0.5.0-r19
@@ -1142,7 +1154,7 @@ Description:  mitmproxy - Interactive HTTPS proxy for SecuBox-powered OpenWrt sy
  Runs in LXC container for isolation and security.
  Configure in /etc/config/mitmproxy.
 Filename: secubox-app-mitmproxy_0.5.0-r19_all.ipk
-Size: 22956
+Size: 22955
 
 Package: secubox-app-mmpm
 Version: 0.2.0-r5
@@ -1163,7 +1175,7 @@ Description:  MMPM (MagicMirror Package Manager) for SecuBox.
  
  Runs inside the MagicMirror2 LXC container.
 Filename: secubox-app-mmpm_0.2.0-r5_all.ipk
-Size: 3979
+Size: 3977
 
 Package: secubox-app-nextcloud
 Version: 1.0.0-r2
@@ -1177,7 +1189,7 @@ Description:  Installer, configuration, and service manager for running Nextclou
  inside Docker on SecuBox-powered OpenWrt systems. Self-hosted file
  sync and share with calendar, contacts, and collaboration.
 Filename: secubox-app-nextcloud_1.0.0-r2_all.ipk
-Size: 2956
+Size: 2955
 
 Package: secubox-app-ollama
 Version: 0.1.0-r1
@@ -1199,7 +1211,7 @@ Description:  Ollama - Simple local LLM runtime for SecuBox-powered OpenWrt syst
  Runs in Docker/Podman container.
  Configure in /etc/config/ollama.
 Filename: secubox-app-ollama_0.1.0-r1_all.ipk
-Size: 5737
+Size: 5738
 
 Package: secubox-app-picobrew
 Version: 1.0.0-r7
@@ -1221,7 +1233,7 @@ Description:  PicoBrew Server - Self-hosted brewing controller for PicoBrew devi
  Runs in LXC container with Python/Flask backend.
  Configure in /etc/config/picobrew.
 Filename: secubox-app-picobrew_1.0.0-r7_all.ipk
-Size: 5537
+Size: 5541
 
 Package: secubox-app-simplex
 Version: 1.0.0-r1
@@ -1245,7 +1257,7 @@ Description:  SimpleX Chat self-hosted messaging infrastructure for SecuBox.
  Privacy-first messaging relay that you control.
  Configure in /etc/config/simplex.
 Filename: secubox-app-simplex_1.0.0-r1_all.ipk
-Size: 9227
+Size: 9230
 
 Package: secubox-app-streamlit
 Version: 1.0.0-r5
@@ -1272,7 +1284,7 @@ Description:  Streamlit App Platform - Self-hosted Python data app platform
  
  Configure in /etc/config/streamlit.
 Filename: secubox-app-streamlit_1.0.0-r5_all.ipk
-Size: 11720
+Size: 11723
 
 Package: secubox-app-tor
 Version: 1.0.0-r1
@@ -1295,7 +1307,7 @@ Description:  SecuBox Tor Shield - One-click Tor anonymization for OpenWrt
  
  Configure in /etc/config/tor-shield.
 Filename: secubox-app-tor_1.0.0-r1_all.ipk
-Size: 7372
+Size: 7366
 
 Package: secubox-app-webapp
 Version: 1.5.0-r7
@@ -1326,7 +1338,26 @@ Installed-Size: 20480
 Description:  Installer, configuration, and service manager for running Zigbee2MQTT
  inside an Alpine LXC container on SecuBox-powered OpenWrt systems.
 Filename: secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk
-Size: 5508
+Size: 5505
+
+Package: secubox-config-advisor
+Version: 0.1.0-r1
+Depends: jsonfilter, curl, openssl-util
+License: GPL-3.0
+Section: secubox
+Maintainer: SecuBox Team <dev@secubox.io>
+Architecture: all
+Installed-Size: 71680
+Description:  AI-powered configuration security advisor for SecuBox.
+ Features:
+ - ANSSI CSPN compliance checking
+ - Security hardening recommendations
+ - Configuration drift detection
+ - Risk scoring and prioritization
+ - LocalAI integration for intelligent analysis
+ - Automated remediation suggestions
+Filename: secubox-config-advisor_0.1.0-r1_all.ipk
+Size: 13190
 
 Package: secubox-core
 Version: 0.10.0-r11
@@ -1346,7 +1377,7 @@ Description:  SecuBox Core Framework provides the foundational infrastructure fo
  - Unified CLI interface
  - ubus RPC backend
 Filename: secubox-core_0.10.0-r11_all.ipk
-Size: 87973
+Size: 87972
 
 Package: secubox-dns-guard
 Version: 1.0.0-r1
@@ -1415,7 +1446,7 @@ Description:  Model Context Protocol (MCP) server for SecuBox.
  - ai.explain_ban (Explain CrowdSec decisions)
  - ai.security_posture (Security assessment)
 Filename: secubox-mcp-server_1.0.0-r1_all.ipk
-Size: 11429
+Size: 11430
 
 Package: secubox-p2p
 Version: 0.6.0-r3
@@ -1434,7 +1465,7 @@ Description:  SecuBox P2P Hub backend providing peer discovery, mesh networking
  and MirrorBox NetMesh Catalog for cross-chain distributed service
  registry with HAProxy vhost discovery and multi-endpoint access URLs.
 Filename: secubox-p2p_0.6.0-r3_all.ipk
-Size: 47674
+Size: 47673
 
 Package: secubox-threat-analyst
 Version: 1.0.0-r1
@@ -1453,7 +1484,7 @@ Description:  Autonomous threat analysis agent for SecuBox.
  
  Part of SecuBox AI Gateway (Couche 2).
 Filename: secubox-threat-analyst_1.0.0-r1_all.ipk
-Size: 9862
+Size: 9868
 
 Package: secubox-vortex-dns
 Version: 1.0.0-r1
@@ -1472,5 +1503,5 @@ Description:  Meshed multi-dynamic subdomain delegation system for SecuBox.
  - Gossip-based exposure config sync
  - Submastering for nested hierarchies
 Filename: secubox-vortex-dns_1.0.0-r1_all.ipk
-Size: 5445
+Size: 5442
 

package/secubox/secubox-app-bonus/root/www/secubox-feed/apps-local.json

@@ -1,12 +1,12 @@
 {
   "feed_url": "/secubox-feed",
-  "generated": "2026-02-05T13:19:52+01:00",
+  "generated": "2026-02-06T06:02:12+01:00",
   "packages": [
     {
       "name": "luci-app-auth-guardian",
       "version": "0.4.0-r3",
       "filename": "luci-app-auth-guardian_0.4.0-r3_all.ipk",
-      "size": 11735,
+      "size": 11741,
       "category": "security",
       "icon": "key",
       "description": "Authentication management",
@@ -18,7 +18,7 @@
       "name": "luci-app-bandwidth-manager",
       "version": "0.5.0-r2",
       "filename": "luci-app-bandwidth-manager_0.5.0-r2_all.ipk",
-      "size": 61539,
+      "size": 61541,
       "category": "network",
       "icon": "activity",
       "description": "Bandwidth monitoring and control",
@@ -30,7 +30,7 @@
       "name": "luci-app-cdn-cache",
       "version": "0.5.0-r3",
       "filename": "luci-app-cdn-cache_0.5.0-r3_all.ipk",
-      "size": 23185,
+      "size": 23183,
       "category": "network",
       "icon": "globe",
       "description": "CDN caching",
@@ -49,12 +49,24 @@
       "installed": false,
       "luci_app": null
     }
+,
+    {
+      "name": "luci-app-config-advisor",
+      "version": "1.0.0-r1",
+      "filename": "luci-app-config-advisor_1.0.0-r1_all.ipk",
+      "size": 8819,
+      "category": "utility",
+      "icon": "package",
+      "description": "SecuBox package",
+      "installed": false,
+      "luci_app": null
+    }
 ,
     {
       "name": "luci-app-crowdsec-dashboard",
       "version": "0.7.0-r32",
       "filename": "luci-app-crowdsec-dashboard_0.7.0-r32_all.ipk",
-      "size": 33737,
+      "size": 33740,
       "category": "security",
       "icon": "shield",
       "description": "CrowdSec security monitoring",
@@ -66,7 +78,7 @@
       "name": "luci-app-cyberfeed",
       "version": "0.1.1-r1",
       "filename": "luci-app-cyberfeed_0.1.1-r1_all.ipk",
-      "size": 12839,
+      "size": 12841,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -78,7 +90,7 @@
       "name": "luci-app-device-intel",
       "version": "1.0.0-r1",
       "filename": "luci-app-device-intel_1.0.0-r1_all.ipk",
-      "size": 10854,
+      "size": 10860,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -102,7 +114,7 @@
       "name": "luci-app-dns-provider",
       "version": "1.0.0-r1",
       "filename": "luci-app-dns-provider_1.0.0-r1_all.ipk",
-      "size": 7131,
+      "size": 7127,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -114,7 +126,7 @@
       "name": "luci-app-exposure",
       "version": "1.0.0-r3",
       "filename": "luci-app-exposure_1.0.0-r3_all.ipk",
-      "size": 9847,
+      "size": 9841,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -126,7 +138,7 @@
       "name": "luci-app-gitea",
       "version": "1.0.0-r2",
       "filename": "luci-app-gitea_1.0.0-r2_all.ipk",
-      "size": 15301,
+      "size": 15304,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -138,7 +150,7 @@
       "name": "luci-app-glances",
       "version": "1.0.0-r2",
       "filename": "luci-app-glances_1.0.0-r2_all.ipk",
-      "size": 6966,
+      "size": 6965,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -150,7 +162,7 @@
       "name": "luci-app-haproxy",
       "version": "1.0.0-r8",
       "filename": "luci-app-haproxy_1.0.0-r8_all.ipk",
-      "size": 34560,
+      "size": 34561,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -162,7 +174,7 @@
       "name": "luci-app-hexojs",
       "version": "1.0.0-r3",
       "filename": "luci-app-hexojs_1.0.0-r3_all.ipk",
-      "size": 30308,
+      "size": 30303,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -174,7 +186,7 @@
       "name": "luci-app-jellyfin",
       "version": "1.0.0-r1",
       "filename": "luci-app-jellyfin_1.0.0-r1_all.ipk",
-      "size": 6062,
+      "size": 6059,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -186,7 +198,7 @@
       "name": "luci-app-jitsi",
       "version": "1.0.0-r1",
       "filename": "luci-app-jitsi_1.0.0-r1_all.ipk",
-      "size": 5135,
+      "size": 5138,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -198,7 +210,7 @@
       "name": "luci-app-ksm-manager",
       "version": "0.4.0-r2",
       "filename": "luci-app-ksm-manager_0.4.0-r2_all.ipk",
-      "size": 18724,
+      "size": 18721,
       "category": "system",
       "icon": "cpu",
       "description": "Kernel memory management",
@@ -210,7 +222,7 @@
       "name": "luci-app-localai",
       "version": "0.1.0-r15",
       "filename": "luci-app-localai_0.1.0-r15_all.ipk",
-      "size": 13183,
+      "size": 13180,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -222,7 +234,7 @@
       "name": "luci-app-lyrion",
       "version": "1.0.0-r1",
       "filename": "luci-app-lyrion_1.0.0-r1_all.ipk",
-      "size": 6727,
+      "size": 6724,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -234,7 +246,7 @@
       "name": "luci-app-mac-guardian",
       "version": "0.5.0-r1",
       "filename": "luci-app-mac-guardian_0.5.0-r1_all.ipk",
-      "size": 6512,
+      "size": 6513,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -246,7 +258,7 @@
       "name": "luci-app-magicmirror2",
       "version": "0.4.0-r6",
       "filename": "luci-app-magicmirror2_0.4.0-r6_all.ipk",
-      "size": 12277,
+      "size": 12275,
       "category": "iot",
       "icon": "monitor",
       "description": "Smart mirror display",
@@ -258,7 +270,7 @@
       "name": "luci-app-mailinabox",
       "version": "1.0.0-r1",
       "filename": "luci-app-mailinabox_1.0.0-r1_all.ipk",
-      "size": 5485,
+      "size": 5484,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -270,7 +282,7 @@
       "name": "luci-app-master-link",
       "version": "1.0.0-r1",
       "filename": "luci-app-master-link_1.0.0-r1_all.ipk",
-      "size": 6246,
+      "size": 6245,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -282,7 +294,7 @@
       "name": "luci-app-media-flow",
       "version": "0.6.4-r1",
       "filename": "luci-app-media-flow_0.6.4-r1_all.ipk",
-      "size": 25419,
+      "size": 25416,
       "category": "media",
       "icon": "film",
       "description": "Media streaming",
@@ -294,7 +306,7 @@
       "name": "luci-app-metablogizer",
       "version": "1.0.0-r5",
       "filename": "luci-app-metablogizer_1.0.0-r5_all.ipk",
-      "size": 24774,
+      "size": 24769,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -306,7 +318,7 @@
       "name": "luci-app-metabolizer",
       "version": "1.0.0-r2",
       "filename": "luci-app-metabolizer_1.0.0-r2_all.ipk",
-      "size": 4760,
+      "size": 4758,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -318,7 +330,7 @@
       "name": "luci-app-mitmproxy",
       "version": "0.5.0-r2",
       "filename": "luci-app-mitmproxy_0.5.0-r2_all.ipk",
-      "size": 11147,
+      "size": 11146,
       "category": "security",
       "icon": "lock",
       "description": "HTTPS proxy and traffic inspection",
@@ -330,7 +342,7 @@
       "name": "luci-app-mmpm",
       "version": "0.2.0-r3",
       "filename": "luci-app-mmpm_0.2.0-r3_all.ipk",
-      "size": 7903,
+      "size": 7900,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -342,7 +354,7 @@
       "name": "luci-app-mqtt-bridge",
       "version": "0.4.0-r4",
       "filename": "luci-app-mqtt-bridge_0.4.0-r4_all.ipk",
-      "size": 22780,
+      "size": 22777,
       "category": "iot",
       "icon": "message-square",
       "description": "MQTT bridge",
@@ -354,7 +366,7 @@
       "name": "luci-app-ndpid",
       "version": "1.1.2-r2",
       "filename": "luci-app-ndpid_1.1.2-r2_all.ipk",
-      "size": 22654,
+      "size": 22652,
       "category": "security",
       "icon": "eye",
       "description": "Deep packet inspection",
@@ -366,7 +378,7 @@
       "name": "luci-app-netdata-dashboard",
       "version": "0.5.0-r2",
       "filename": "luci-app-netdata-dashboard_0.5.0-r2_all.ipk",
-      "size": 20487,
+      "size": 20483,
       "category": "monitoring",
       "icon": "bar-chart-2",
       "description": "System monitoring dashboard",
@@ -378,7 +390,7 @@
       "name": "luci-app-network-modes",
       "version": "0.5.0-r3",
       "filename": "luci-app-network-modes_0.5.0-r3_all.ipk",
-      "size": 54151,
+      "size": 54149,
       "category": "network",
       "icon": "wifi",
       "description": "Network configuration",
@@ -390,7 +402,7 @@
       "name": "luci-app-network-tweaks",
       "version": "1.0.0-r7",
       "filename": "luci-app-network-tweaks_1.0.0-r7_all.ipk",
-      "size": 14959,
+      "size": 14960,
       "category": "network",
       "icon": "wifi",
       "description": "Network configuration",
@@ -402,7 +414,7 @@
       "name": "luci-app-nextcloud",
       "version": "1.0.0-r1",
       "filename": "luci-app-nextcloud_1.0.0-r1_all.ipk",
-      "size": 6482,
+      "size": 6486,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -414,7 +426,7 @@
       "name": "luci-app-ollama",
       "version": "0.1.0-r1",
       "filename": "luci-app-ollama_0.1.0-r1_all.ipk",
-      "size": 12354,
+      "size": 12352,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -426,7 +438,7 @@
       "name": "luci-app-picobrew",
       "version": "1.0.0-r1",
       "filename": "luci-app-picobrew_1.0.0-r1_all.ipk",
-      "size": 9462,
+      "size": 9456,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -438,7 +450,7 @@
       "name": "luci-app-secubox",
       "version": "0.7.1-r4",
       "filename": "luci-app-secubox_0.7.1-r4_all.ipk",
-      "size": 77681,
+      "size": 77680,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -450,7 +462,7 @@
       "name": "luci-app-secubox-admin",
       "version": "1.0.0-r19",
       "filename": "luci-app-secubox-admin_1.0.0-r19_all.ipk",
-      "size": 57250,
+      "size": 57247,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -462,7 +474,7 @@
       "name": "luci-app-secubox-crowdsec",
       "version": "1.0.0-r3",
       "filename": "luci-app-secubox-crowdsec_1.0.0-r3_all.ipk",
-      "size": 13923,
+      "size": 13915,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -474,7 +486,7 @@
       "name": "luci-app-secubox-netdiag",
       "version": "1.0.0-r1",
       "filename": "luci-app-secubox-netdiag_1.0.0-r1_all.ipk",
-      "size": 15309,
+      "size": 15306,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -486,7 +498,7 @@
       "name": "luci-app-secubox-netifyd",
       "version": "1.2.1-r1",
       "filename": "luci-app-secubox-netifyd_1.2.1-r1_all.ipk",
-      "size": 36543,
+      "size": 36539,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -510,7 +522,7 @@
       "name": "luci-app-secubox-portal",
       "version": "0.7.0-r2",
       "filename": "luci-app-secubox-portal_0.7.0-r2_all.ipk",
-      "size": 24643,
+      "size": 24642,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -522,7 +534,7 @@
       "name": "luci-app-secubox-security-threats",
       "version": "1.0.0-r4",
       "filename": "luci-app-secubox-security-threats_1.0.0-r4_all.ipk",
-      "size": 21896,
+      "size": 21897,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -534,7 +546,7 @@
       "name": "luci-app-service-registry",
       "version": "1.0.0-r1",
       "filename": "luci-app-service-registry_1.0.0-r1_all.ipk",
-      "size": 39826,
+      "size": 39824,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -546,7 +558,7 @@
       "name": "luci-app-simplex",
       "version": "1.0.0-r1",
       "filename": "luci-app-simplex_1.0.0-r1_all.ipk",
-      "size": 6999,
+      "size": 7000,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -558,7 +570,7 @@
       "name": "luci-app-streamlit",
       "version": "1.0.0-r11",
       "filename": "luci-app-streamlit_1.0.0-r11_all.ipk",
-      "size": 14748,
+      "size": 14746,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -570,7 +582,7 @@
       "name": "luci-app-system-hub",
       "version": "0.5.1-r4",
       "filename": "luci-app-system-hub_0.5.1-r4_all.ipk",
-      "size": 61105,
+      "size": 61102,
       "category": "system",
       "icon": "settings",
       "description": "System management",
@@ -582,7 +594,7 @@
       "name": "luci-app-threat-analyst",
       "version": "1.0.0-r1",
       "filename": "luci-app-threat-analyst_1.0.0-r1_all.ipk",
-      "size": 9751,
+      "size": 9752,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -594,7 +606,7 @@
       "name": "luci-app-tor-shield",
       "version": "1.0.0-r10",
       "filename": "luci-app-tor-shield_1.0.0-r10_all.ipk",
-      "size": 22364,
+      "size": 22359,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -606,7 +618,7 @@
       "name": "luci-app-traffic-shaper",
       "version": "0.4.0-r2",
       "filename": "luci-app-traffic-shaper_0.4.0-r2_all.ipk",
-      "size": 14534,
+      "size": 14532,
       "category": "network",
       "icon": "filter",
       "description": "Traffic shaping and QoS",
@@ -618,7 +630,7 @@
       "name": "luci-app-vhost-manager",
       "version": "0.5.0-r5",
       "filename": "luci-app-vhost-manager_0.5.0-r5_all.ipk",
-      "size": 26186,
+      "size": 26184,
       "category": "network",
       "icon": "server",
       "description": "Virtual host management",
@@ -642,7 +654,7 @@
       "name": "luci-app-wireguard-dashboard",
       "version": "0.7.0-r5",
       "filename": "luci-app-wireguard-dashboard_0.7.0-r5_all.ipk",
-      "size": 39608,
+      "size": 39605,
       "category": "vpn",
       "icon": "shield",
       "description": "WireGuard VPN dashboard",
@@ -654,7 +666,7 @@
       "name": "luci-app-zigbee2mqtt",
       "version": "1.0.0-r2",
       "filename": "luci-app-zigbee2mqtt_1.0.0-r2_all.ipk",
-      "size": 6815,
+      "size": 6811,
       "category": "iot",
       "icon": "radio",
       "description": "Zigbee device management",
@@ -666,7 +678,7 @@
       "name": "luci-theme-secubox",
       "version": "0.4.7-r1",
       "filename": "luci-theme-secubox_0.4.7-r1_all.ipk",
-      "size": 110239,
+      "size": 110237,
       "category": "theme",
       "icon": "palette",
       "description": "LuCI theme",
@@ -690,7 +702,7 @@
       "name": "secubox-app-adguardhome",
       "version": "1.0.0-r2",
       "filename": "secubox-app-adguardhome_1.0.0-r2_all.ipk",
-      "size": 2879,
+      "size": 2882,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -702,7 +714,7 @@
       "name": "secubox-app-auth-logger",
       "version": "1.2.2-r1",
       "filename": "secubox-app-auth-logger_1.2.2-r1_all.ipk",
-      "size": 9375,
+      "size": 9379,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -714,7 +726,7 @@
       "name": "secubox-app-crowdsec-custom",
       "version": "1.1.0-r1",
       "filename": "secubox-app-crowdsec-custom_1.1.0-r1_all.ipk",
-      "size": 5764,
+      "size": 5759,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -726,7 +738,7 @@
       "name": "secubox-app-cs-firewall-bouncer",
       "version": "0.0.31-r4_aarch64",
       "filename": "secubox-app-cs-firewall-bouncer_0.0.31-r4_aarch64_cortex-a72.ipk",
-      "size": 5049322,
+      "size": 5049324,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -738,7 +750,7 @@
       "name": "secubox-app-cyberfeed",
       "version": "0.2.1-r1",
       "filename": "secubox-app-cyberfeed_0.2.1-r1_all.ipk",
-      "size": 12451,
+      "size": 12447,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -750,7 +762,7 @@
       "name": "secubox-app-device-intel",
       "version": "1.0.0-r1",
       "filename": "secubox-app-device-intel_1.0.0-r1_all.ipk",
-      "size": 13006,
+      "size": 13002,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -762,7 +774,7 @@
       "name": "secubox-app-dns-provider",
       "version": "1.0.0-r1",
       "filename": "secubox-app-dns-provider_1.0.0-r1_all.ipk",
-      "size": 6700,
+      "size": 6698,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -774,7 +786,7 @@
       "name": "secubox-app-domoticz",
       "version": "1.0.0-r2",
       "filename": "secubox-app-domoticz_1.0.0-r2_all.ipk",
-      "size": 2544,
+      "size": 2548,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -786,7 +798,7 @@
       "name": "secubox-app-exposure",
       "version": "1.0.0-r1",
       "filename": "secubox-app-exposure_1.0.0-r1_all.ipk",
-      "size": 6931,
+      "size": 6934,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -798,7 +810,7 @@
       "name": "secubox-app-gitea",
       "version": "1.0.0-r5",
       "filename": "secubox-app-gitea_1.0.0-r5_all.ipk",
-      "size": 9403,
+      "size": 9407,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -810,7 +822,7 @@
       "name": "secubox-app-glances",
       "version": "1.0.0-r1",
       "filename": "secubox-app-glances_1.0.0-r1_all.ipk",
-      "size": 5534,
+      "size": 5530,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -822,7 +834,7 @@
       "name": "secubox-app-haproxy",
       "version": "1.0.0-r23",
       "filename": "secubox-app-haproxy_1.0.0-r23_all.ipk",
-      "size": 15683,
+      "size": 15682,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -834,7 +846,7 @@
       "name": "secubox-app-hexojs",
       "version": "1.0.0-r8",
       "filename": "secubox-app-hexojs_1.0.0-r8_all.ipk",
-      "size": 94934,
+      "size": 94935,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -846,7 +858,7 @@
       "name": "secubox-app-jellyfin",
       "version": "1.0.0-r1",
       "filename": "secubox-app-jellyfin_1.0.0-r1_all.ipk",
-      "size": 6178,
+      "size": 6176,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -870,7 +882,7 @@
       "name": "secubox-app-localai",
       "version": "2.25.0-r1",
       "filename": "secubox-app-localai_2.25.0-r1_all.ipk",
-      "size": 5711,
+      "size": 5725,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -894,7 +906,7 @@
       "name": "secubox-app-lyrion",
       "version": "2.0.2-r1",
       "filename": "secubox-app-lyrion_2.0.2-r1_all.ipk",
-      "size": 7289,
+      "size": 7282,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -906,7 +918,7 @@
       "name": "secubox-app-mac-guardian",
       "version": "0.5.0-r1",
       "filename": "secubox-app-mac-guardian_0.5.0-r1_all.ipk",
-      "size": 12094,
+      "size": 12096,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -918,7 +930,7 @@
       "name": "secubox-app-magicmirror2",
       "version": "0.4.0-r8",
       "filename": "secubox-app-magicmirror2_0.4.0-r8_all.ipk",
-      "size": 9252,
+      "size": 9248,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -942,7 +954,7 @@
       "name": "secubox-app-metabolizer",
       "version": "1.0.0-r3",
       "filename": "secubox-app-metabolizer_1.0.0-r3_all.ipk",
-      "size": 13976,
+      "size": 13977,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -954,7 +966,7 @@
       "name": "secubox-app-mitmproxy",
       "version": "0.5.0-r19",
       "filename": "secubox-app-mitmproxy_0.5.0-r19_all.ipk",
-      "size": 22956,
+      "size": 22955,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -966,7 +978,7 @@
       "name": "secubox-app-mmpm",
       "version": "0.2.0-r5",
       "filename": "secubox-app-mmpm_0.2.0-r5_all.ipk",
-      "size": 3979,
+      "size": 3977,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -978,7 +990,7 @@
       "name": "secubox-app-nextcloud",
       "version": "1.0.0-r2",
       "filename": "secubox-app-nextcloud_1.0.0-r2_all.ipk",
-      "size": 2956,
+      "size": 2955,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -990,7 +1002,7 @@
       "name": "secubox-app-ollama",
       "version": "0.1.0-r1",
       "filename": "secubox-app-ollama_0.1.0-r1_all.ipk",
-      "size": 5737,
+      "size": 5738,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1002,7 +1014,7 @@
       "name": "secubox-app-picobrew",
       "version": "1.0.0-r7",
       "filename": "secubox-app-picobrew_1.0.0-r7_all.ipk",
-      "size": 5537,
+      "size": 5541,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1014,7 +1026,7 @@
       "name": "secubox-app-simplex",
       "version": "1.0.0-r1",
       "filename": "secubox-app-simplex_1.0.0-r1_all.ipk",
-      "size": 9227,
+      "size": 9230,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1026,7 +1038,7 @@
       "name": "secubox-app-streamlit",
       "version": "1.0.0-r5",
       "filename": "secubox-app-streamlit_1.0.0-r5_all.ipk",
-      "size": 11720,
+      "size": 11723,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1038,7 +1050,7 @@
       "name": "secubox-app-tor",
       "version": "1.0.0-r1",
       "filename": "secubox-app-tor_1.0.0-r1_all.ipk",
-      "size": 7372,
+      "size": 7366,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1062,19 +1074,31 @@
       "name": "secubox-app-zigbee2mqtt",
       "version": "1.0.0-r3",
       "filename": "secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk",
-      "size": 5508,
+      "size": 5505,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
       "installed": false,
       "luci_app": "luci-app-zigbee2mqtt"
     }
+,
+    {
+      "name": "secubox-config-advisor",
+      "version": "0.1.0-r1",
+      "filename": "secubox-config-advisor_0.1.0-r1_all.ipk",
+      "size": 13190,
+      "category": "utility",
+      "icon": "package",
+      "description": "SecuBox package",
+      "installed": false,
+      "luci_app": null
+    }
 ,
     {
       "name": "secubox-core",
       "version": "0.10.0-r11",
       "filename": "secubox-core_0.10.0-r11_all.ipk",
-      "size": 87973,
+      "size": 87972,
       "category": "system",
       "icon": "box",
       "description": "SecuBox core components",
@@ -1110,7 +1134,7 @@
       "name": "secubox-mcp-server",
       "version": "1.0.0-r1",
       "filename": "secubox-mcp-server_1.0.0-r1_all.ipk",
-      "size": 11429,
+      "size": 11430,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -1122,7 +1146,7 @@
       "name": "secubox-p2p",
       "version": "0.6.0-r3",
       "filename": "secubox-p2p_0.6.0-r3_all.ipk",
-      "size": 47674,
+      "size": 47673,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -1134,7 +1158,7 @@
       "name": "secubox-threat-analyst",
       "version": "1.0.0-r1",
       "filename": "secubox-threat-analyst_1.0.0-r1_all.ipk",
-      "size": 9862,
+      "size": 9868,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -1146,7 +1170,7 @@
       "name": "secubox-vortex-dns",
       "version": "1.0.0-r1",
       "filename": "secubox-vortex-dns_1.0.0-r1_all.ipk",
-      "size": 5445,
+      "size": 5442,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",