feat(p2p): Release v0.6.0 - MirrorBox NetMesh Catalog
- Distributed service registry with HAProxy vhost discovery - Multi-endpoint URLs (haproxy/mesh/local) per service - DNS federation for mesh peers (*.sb.local via dnsmasq) - Catalog tab with service filtering and QR codes - Linked peers navigation panel - Tools panel with DNS management Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
parent
163c74e25f
commit
760408c36f
@ -206,7 +206,10 @@
|
||||
"Bash(git -C /home/reepost/CyberMindStudio/secubox-openwrt commit -m \"$\\(cat <<''EOF''\nfix\\(metablogizer\\): Skip frontend HTTP checks for DNS mismatch sites\n\nWhen a site''s DNS doesn''t point to our public IP, skip the external\nHTTP check to avoid 5-second timeouts. This significantly speeds up\nthe get_hosting_status API call which was causing XHR timeouts in\nthe LuCI frontend.\n\nSites with DNS mismatch now show frontend_status: \"dns_mismatch\"\ninstead of timing out.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>\nEOF\n\\)\")",
|
||||
"Bash(git -C /home/reepost/CyberMindStudio/secubox-openwrt status --short package/secubox/luci-app-metablogizer/)",
|
||||
"Bash(git -C /home/reepost/CyberMindStudio/secubox-openwrt log --oneline -5)",
|
||||
"Bash(git -C /home/reepost/CyberMindStudio/secubox-openwrt status -sb)"
|
||||
"Bash(git -C /home/reepost/CyberMindStudio/secubox-openwrt status -sb)",
|
||||
"Bash(pip install:*)",
|
||||
"WebFetch(domain:secubox.maegia.tv)",
|
||||
"Bash(# Find the built packages echo \"\"=== Built packages ===\"\" ls -la secubox-tools/build/aarch64_cortex-a72/*.ipk)"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
59
CHANGELOG.md
59
CHANGELOG.md
@ -5,6 +5,55 @@ All notable changes to the SecuBox project will be documented in this file.
|
||||
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
|
||||
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
||||
|
||||
## [0.17.0] - 2026-01-31 🎉 First Public Release
|
||||
|
||||
### Highlights
|
||||
|
||||
This release marks the **First Public Release** of SecuBox. All core features are now stable and production-ready.
|
||||
|
||||
### Added
|
||||
|
||||
- **Three-Loop Security Architecture** documentation (`DOCS/THREE-LOOP-ARCHITECTURE.md`)
|
||||
- Loop 1 (Operational): Real-time threat detection and blocking
|
||||
- Loop 2 (Tactical): Pattern correlation and adaptive response
|
||||
- Loop 3 (Strategic): Threat intelligence aggregation and evolution
|
||||
- Architecture mapping showing how 38 modules integrate into the three-loop model
|
||||
- Roadmap section in README with 5-phase plan toward ANSSI certification
|
||||
- Release badge in README header
|
||||
- P2P Hub vision documentation for v0.18+ development
|
||||
- did:plc identity model analysis for decentralized node trust
|
||||
|
||||
### Changed
|
||||
|
||||
- README.md restructured with First Public Release announcement
|
||||
- Status changed from "Active Development" to "Production Ready"
|
||||
- Website URL updated to secubox.maegia.tv
|
||||
- Added Three-Loop Architecture diagram to README overview
|
||||
|
||||
### Security
|
||||
|
||||
- Documented complete Loop 1 implementation:
|
||||
- nftables/fw4 packet filtering (< 1ms latency)
|
||||
- netifyd DPI classification (< 10ms)
|
||||
- CrowdSec Bouncer enforcement (< 1s propagation)
|
||||
- Documented complete Loop 2 implementation:
|
||||
- CrowdSec Agent log parsing
|
||||
- LAPI local decision engine
|
||||
- Custom OpenWrt scenarios
|
||||
- Netdata metrics correlation
|
||||
|
||||
### Roadmap
|
||||
|
||||
| Phase | Version | Status |
|
||||
|-------|---------|--------|
|
||||
| Core Mesh | v0.17 | ✅ Released |
|
||||
| Service Mesh | v0.18 | 🔵 Next |
|
||||
| Intelligence Mesh | v0.19 | ⚪ Planned |
|
||||
| AI Mesh | v0.20 | ⚪ Planned |
|
||||
| Certification | v1.0 | ⚪ Planned |
|
||||
|
||||
---
|
||||
|
||||
## [0.16.0] - 2026-01-27
|
||||
|
||||
### Added
|
||||
@ -77,7 +126,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
||||
- Dashboard hero stats and SecuNav top tabs
|
||||
- Unified sh-page-header layout component
|
||||
|
||||
## Module Inventory (38 modules as of 0.16.0)
|
||||
---
|
||||
|
||||
## Module Inventory (38 modules as of 0.17.0)
|
||||
|
||||
### SecuBox Core (5)
|
||||
- luci-app-secubox
|
||||
@ -111,7 +162,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
||||
- luci-app-cdn-cache
|
||||
- luci-app-media-flow
|
||||
|
||||
### Bandwidth & Traffic (2)
|
||||
### Bandwidth & Traffic Management (2)
|
||||
- luci-app-bandwidth-manager
|
||||
- luci-app-traffic-shaper
|
||||
|
||||
@ -128,9 +179,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
|
||||
- luci-app-glances
|
||||
- luci-app-netdata-dashboard
|
||||
|
||||
### Streaming & Data (2)
|
||||
### Streaming & Data Processing (2)
|
||||
- luci-app-streamlit
|
||||
- luci-app-picobrew
|
||||
|
||||
### IoT (1)
|
||||
### IoT & Smart Devices (1)
|
||||
- luci-app-zigbee2mqtt
|
||||
|
||||
335
DOCS/THREE-LOOP-ARCHITECTURE.md
Normal file
335
DOCS/THREE-LOOP-ARCHITECTURE.md
Normal file
@ -0,0 +1,335 @@
|
||||
# SecuBox Three-Loop Security Architecture
|
||||
|
||||
**Version:** 0.17.0 — First Public Release
|
||||
**Author:** Gérald Kerma (Gandalf) — CyberMind.FR
|
||||
**Date:** January 2026
|
||||
|
||||
---
|
||||
|
||||
## Executive Summary
|
||||
|
||||
SecuBox implements a **Three-Loop Security Model** that separates security operations into three distinct but interconnected feedback loops. Each loop operates at a different timescale and serves complementary functions, providing defense in depth from millisecond-level packet filtering to strategic threat intelligence evolution.
|
||||
|
||||
---
|
||||
|
||||
## The Three-Loop Model
|
||||
|
||||
```
|
||||
┌─────────────────────────────────────────────────────────────────────────────┐
|
||||
│ THREE-LOOP SECURITY ARCHITECTURE │
|
||||
│ │
|
||||
│ ┌─────────────────────────────────────────────────────────────────────┐ │
|
||||
│ │ LOOP 3: STRATEGIC │ │
|
||||
│ │ (Hours → Days → Weeks) │ │
|
||||
│ │ │ │
|
||||
│ │ ┌──────────────────────────────────────────────────────────┐ │ │
|
||||
│ │ │ LOOP 2: TACTICAL │ │ │
|
||||
│ │ │ (Minutes → Hours) │ │ │
|
||||
│ │ │ │ │ │
|
||||
│ │ │ ┌─────────────────────────────────────────────────┐ │ │ │
|
||||
│ │ │ │ LOOP 1: OPERATIONAL │ │ │ │
|
||||
│ │ │ │ (Milliseconds → Seconds) │ │ │ │
|
||||
│ │ │ │ │ │ │ │
|
||||
│ │ │ │ DETECT → DECIDE → RESPOND → LEARN │ │ │ │
|
||||
│ │ │ │ │ │ │ │
|
||||
│ │ │ └─────────────────────────────────────────────────┘ │ │ │
|
||||
│ │ │ │ │ │
|
||||
│ │ │ CORRELATE → ANALYZE → ADAPT → REFINE │ │ │
|
||||
│ │ │ │ │ │
|
||||
│ │ └──────────────────────────────────────────────────────────┘ │ │
|
||||
│ │ │ │
|
||||
│ │ AGGREGATE → TREND → PREDICT → EVOLVE │ │
|
||||
│ │ │ │
|
||||
│ └─────────────────────────────────────────────────────────────────────┘ │
|
||||
│ │
|
||||
└─────────────────────────────────────────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Loop 1: Operational (Real-Time Response)
|
||||
|
||||
**Timescale:** Milliseconds to seconds
|
||||
**Function:** Immediate threat detection and automated response
|
||||
**Goal:** Stop attacks before damage occurs
|
||||
|
||||
### SecuBox Implementation
|
||||
|
||||
```
|
||||
┌─────────────────────────────────────────────────────────────────────┐
|
||||
│ SECUBOX LOOP 1 — OPERATIONAL │
|
||||
│ │
|
||||
│ INGRESS │
|
||||
│ │ │
|
||||
│ ▼ │
|
||||
│ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │
|
||||
│ │ nftables │───▶│ netifyd │───▶│ CrowdSec │ │
|
||||
│ │ fw4 rules │ │ DPI │ │ Bouncer │ │
|
||||
│ │ BPF/XDP │ │ (L7 proto) │ │ (nft sets) │ │
|
||||
│ └──────────────┘ └──────────────┘ └──────────────┘ │
|
||||
│ │ │ │ │
|
||||
│ ▼ ▼ ▼ │
|
||||
│ ┌────────────────────────────────────────────────────────┐ │
|
||||
│ │ DECISION ENGINE │ │
|
||||
│ │ • Stateful connection tracking │ │
|
||||
│ │ • Protocol anomaly detection │ │
|
||||
│ │ • Reputation-based filtering │ │
|
||||
│ │ • Rate limiting & connection caps │ │
|
||||
│ └────────────────────────────────────────────────────────┘ │
|
||||
│ │ │
|
||||
│ ▼ │
|
||||
│ ALLOW / BLOCK / RATE-LIMIT / REDIRECT │
|
||||
└─────────────────────────────────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
### Components
|
||||
|
||||
| Component | Module | Function |
|
||||
|-----------|--------|----------|
|
||||
| **nftables/fw4** | OpenWrt core | Packet filtering at wire speed |
|
||||
| **netifyd** | `luci-app-secubox-netifyd` | Layer 7 protocol identification |
|
||||
| **nDPId** | `luci-app-ndpid` | Deep packet inspection (300+ protocols) |
|
||||
| **CrowdSec Bouncer** | `luci-app-crowdsec-dashboard` | Real-time blocking enforcement |
|
||||
|
||||
### Performance Metrics
|
||||
|
||||
| Metric | Target | v0.17 Status |
|
||||
|--------|--------|--------------|
|
||||
| Packet decision latency | < 1ms | ✅ Achieved |
|
||||
| DPI classification time | < 10ms | ✅ Achieved |
|
||||
| Bouncer update propagation | < 1s | ✅ Achieved |
|
||||
| Memory footprint | < 64MB | ✅ ~45MB typical |
|
||||
|
||||
---
|
||||
|
||||
## Loop 2: Tactical (Correlation & Adaptation)
|
||||
|
||||
**Timescale:** Minutes to hours
|
||||
**Function:** Pattern correlation, behavioral analysis, rule refinement
|
||||
**Goal:** Improve detection accuracy and reduce false positives
|
||||
|
||||
### SecuBox Implementation
|
||||
|
||||
```
|
||||
┌─────────────────────────────────────────────────────────────────────┐
|
||||
│ SECUBOX LOOP 2 — TACTICAL │
|
||||
│ │
|
||||
│ FROM LOOP 1 │
|
||||
│ │ │
|
||||
│ ▼ │
|
||||
│ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │
|
||||
│ │ CrowdSec │───▶│ LAPI │───▶│ Scenarios │ │
|
||||
│ │ Agent │ │ (local) │ │ & Parsers │ │
|
||||
│ │ (logs) │ │ │ │ │ │
|
||||
│ └──────────────┘ └──────────────┘ └──────────────┘ │
|
||||
│ │ │ │ │
|
||||
│ │ ▼ │ │
|
||||
│ │ ┌──────────────┐ │ │
|
||||
│ │ │ Netdata │ │ │
|
||||
│ │ │ Metrics │ │ │
|
||||
│ │ │ & Alerts │ │ │
|
||||
│ │ └──────────────┘ │ │
|
||||
│ │ │ │ │
|
||||
│ ▼ ▼ ▼ │
|
||||
│ ┌────────────────────────────────────────────────────────┐ │
|
||||
│ │ CORRELATION ENGINE │ │
|
||||
│ │ • Multi-source event correlation │ │
|
||||
│ │ • Behavioral baseline deviation │ │
|
||||
│ │ • Attack chain identification │ │
|
||||
│ │ • False positive reduction │ │
|
||||
│ └────────────────────────────────────────────────────────┘ │
|
||||
│ │ │
|
||||
│ ▼ │
|
||||
│ DECISIONS → Loop 1 | ALERTS → Operator | INTEL → Loop 3 │
|
||||
└─────────────────────────────────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
### Components
|
||||
|
||||
| Component | Module | Function |
|
||||
|-----------|--------|----------|
|
||||
| **CrowdSec Agent** | `luci-app-crowdsec-dashboard` | Log parsing and event generation |
|
||||
| **CrowdSec LAPI** | `luci-app-crowdsec-dashboard` | Local decision engine |
|
||||
| **Scenarios** | Custom + community | Attack pattern definitions |
|
||||
| **Netdata** | `luci-app-netdata-dashboard` | Metrics and anomaly detection |
|
||||
|
||||
### Scenario Examples
|
||||
|
||||
| Scenario | Trigger | Action |
|
||||
|----------|---------|--------|
|
||||
| SSH brute force | 5 failures in 30s | Ban 4h |
|
||||
| Port scan | 20 ports in 10s | Ban 24h |
|
||||
| HTTP scanner | Known patterns | Ban 1h |
|
||||
| DPI anomaly | Protocol mismatch | Alert + investigate |
|
||||
|
||||
### Feedback to Loop 1
|
||||
|
||||
| Tactical Output | Loop 1 Action |
|
||||
|-----------------|---------------|
|
||||
| New IP ban decision | Bouncer updates nft set |
|
||||
| Protocol anomaly pattern | DPI rule enhancement |
|
||||
| False positive identified | Whitelist/exception rule |
|
||||
| Attack signature | Parser/scenario update |
|
||||
|
||||
---
|
||||
|
||||
## Loop 3: Strategic (Intelligence & Evolution)
|
||||
|
||||
**Timescale:** Hours to weeks
|
||||
**Function:** Threat intelligence, trend analysis, architecture evolution
|
||||
**Goal:** Anticipate threats and continuously improve security posture
|
||||
|
||||
### SecuBox Implementation
|
||||
|
||||
```
|
||||
┌─────────────────────────────────────────────────────────────────────┐
|
||||
│ SECUBOX LOOP 3 — STRATEGIC │
|
||||
│ │
|
||||
│ FROM LOOP 2 │
|
||||
│ │ │
|
||||
│ ▼ │
|
||||
│ ┌──────────────┐ ┌──────────────┐ ┌──────────────┐ │
|
||||
│ │ CrowdSec │───▶│ Central │───▶│ Community │ │
|
||||
│ │ CAPI │ │ API │ │ Blocklists │ │
|
||||
│ │ (upload) │ │ │ │ │ │
|
||||
│ └──────────────┘ └──────────────┘ └──────────────┘ │
|
||||
│ │ │ │ │
|
||||
│ │ ▼ │ │
|
||||
│ │ ┌──────────────┐ │ │
|
||||
│ │ │ P2P Hub │◀───────────┘ │
|
||||
│ │ │ (v0.18+) │ │
|
||||
│ │ └──────────────┘ │
|
||||
│ │ │ │
|
||||
│ ▼ ▼ │
|
||||
│ ┌────────────────────────────────────────────────────────┐ │
|
||||
│ │ INTELLIGENCE ENGINE │ │
|
||||
│ │ • Global threat landscape aggregation │ │
|
||||
│ │ • Emerging threat early warning │ │
|
||||
│ │ • Reputation scoring evolution │ │
|
||||
│ │ • Architecture & policy recommendations │ │
|
||||
│ └────────────────────────────────────────────────────────┘ │
|
||||
│ │ │
|
||||
│ ▼ │
|
||||
│ BLOCKLISTS → Loop 2 | POLICIES → Loop 1 | EVOLUTION → Next Release│
|
||||
└─────────────────────────────────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
### Components
|
||||
|
||||
| Component | Module | Function |
|
||||
|-----------|--------|----------|
|
||||
| **CrowdSec CAPI** | `luci-app-crowdsec-dashboard` | Community intelligence exchange |
|
||||
| **Blocklists** | Managed via CAPI | IP/domain reputation |
|
||||
| **P2P Hub** | Planned v0.18+ | Decentralized intelligence sharing |
|
||||
|
||||
---
|
||||
|
||||
## P2P Hub: Evolving Loop 3 (v0.18+)
|
||||
|
||||
### Vision
|
||||
|
||||
The P2P Hub will enable **decentralized threat intelligence sharing** between SecuBox nodes without dependency on central services.
|
||||
|
||||
```
|
||||
┌─────────────────────────────────────────────────────────────────────┐
|
||||
│ P2P HUB ARCHITECTURE (v0.18+) │
|
||||
│ │
|
||||
│ ┌───────────────┐ │
|
||||
│ │ SecuBox A │ │
|
||||
│ │ (did:plc) │ │
|
||||
│ └───────┬───────┘ │
|
||||
│ │ │
|
||||
│ ┌────────────┼────────────┐ │
|
||||
│ │ │ │ │
|
||||
│ ┌───────▼───────┐ │ ┌───────▼───────┐ │
|
||||
│ │ SecuBox B │ │ │ SecuBox C │ │
|
||||
│ │ (did:plc) │ │ │ (did:plc) │ │
|
||||
│ └───────┬───────┘ │ └───────┬───────┘ │
|
||||
│ │ │ │ │
|
||||
│ └────────────┼────────────┘ │
|
||||
│ │ │
|
||||
│ ┌───────▼───────┐ │
|
||||
│ │ SecuBox D │ │
|
||||
│ │ (did:plc) │ │
|
||||
│ └───────────────┘ │
|
||||
│ │
|
||||
│ TRANSPORT: WireGuard mesh (encrypted, authenticated) │
|
||||
│ IDENTITY: did:plc (key-rotatable, self-sovereign) │
|
||||
│ PROTOCOL: Signed intelligence sharing via P2P gossip │
|
||||
└─────────────────────────────────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
### did:plc Identity Model
|
||||
|
||||
Inspired by ATProto/Bluesky, each SecuBox node will have a decentralized identifier:
|
||||
|
||||
| Layer | Function | Control |
|
||||
|-------|----------|---------|
|
||||
| **DID** | Permanent cryptographic identifier | Mathematical (irrevocable) |
|
||||
| **Rotation keys** | Recovery from compromise | Human operator |
|
||||
| **Signing keys** | Day-to-day operations | SecuBox node |
|
||||
|
||||
**Benefits:**
|
||||
- Node identity survives key compromise (rotate without losing reputation)
|
||||
- Trust relationships persist across key updates
|
||||
- No central authority for identity management
|
||||
- Interoperable with ATProto ecosystem
|
||||
|
||||
### Trust Model
|
||||
|
||||
| Trust Level | Source | Loop Integration |
|
||||
|-------------|--------|------------------|
|
||||
| **High** | Direct peers, long history | Loop 1 (immediate blocking) |
|
||||
| **Medium** | Transitive trust, verified signatures | Loop 2 (correlation input) |
|
||||
| **Low** | New nodes, unverified | Loop 3 only (review) |
|
||||
|
||||
---
|
||||
|
||||
## Integration Matrix
|
||||
|
||||
### Current State (v0.17)
|
||||
|
||||
| Loop | Component | Module | Status |
|
||||
|------|-----------|--------|--------|
|
||||
| 1 | nftables/fw4 | OpenWrt core | ✅ Complete |
|
||||
| 1 | netifyd DPI | `luci-app-secubox-netifyd` | ✅ Complete |
|
||||
| 1 | nDPId DPI | `luci-app-ndpid` | ✅ Complete |
|
||||
| 1 | CrowdSec Bouncer | `luci-app-crowdsec-dashboard` | ✅ Complete |
|
||||
| 2 | CrowdSec Agent | `luci-app-crowdsec-dashboard` | ✅ Complete |
|
||||
| 2 | CrowdSec LAPI | `luci-app-crowdsec-dashboard` | ✅ Complete |
|
||||
| 2 | Netdata | `luci-app-netdata-dashboard` | ✅ Complete |
|
||||
| 2 | Custom Scenarios | `luci-app-secubox-security-threats` | ⚡ Partial |
|
||||
| 3 | CrowdSec CAPI | `luci-app-crowdsec-dashboard` | ✅ Complete |
|
||||
| 3 | Blocklists | Managed via CAPI | ✅ Complete |
|
||||
| 3 | P2P Hub | Planned | 🔵 v0.18+ |
|
||||
|
||||
### Roadmap
|
||||
|
||||
| Phase | Version | Loop Focus | Status |
|
||||
|-------|---------|------------|--------|
|
||||
| Core Mesh | v0.17 | Loops 1+2 complete | ✅ Released |
|
||||
| Service Mesh | v0.18 | Loop 3 P2P foundation | 🔵 Next |
|
||||
| Intelligence Mesh | v0.19 | Full P2P intelligence | ⚪ Planned |
|
||||
| AI Mesh | v0.20 | ML-enhanced Loop 2 | ⚪ Planned |
|
||||
| Certification | v1.0 | ANSSI certification | ⚪ Planned |
|
||||
|
||||
---
|
||||
|
||||
## Summary
|
||||
|
||||
| Loop | Function | Timescale | v0.17 Status |
|
||||
|------|----------|-----------|--------------|
|
||||
| **Loop 1** | Operational (block threats) | ms → s | ✅ Complete |
|
||||
| **Loop 2** | Tactical (correlate & adapt) | min → h | ✅ Complete |
|
||||
| **Loop 3** | Strategic (intelligence & evolve) | h → days | ⚡ CAPI only |
|
||||
|
||||
**Loop 1** = Reflex → Block fast, block well
|
||||
**Loop 2** = Local intelligence → Understand patterns, adapt
|
||||
**Loop 3** = Collective intelligence → Share, anticipate, evolve
|
||||
|
||||
---
|
||||
|
||||
**Ex Tenebris, Lux Securitas**
|
||||
|
||||
*SecuBox v0.17.0 — First Public Release*
|
||||
*CyberMind.FR — January 2026*
|
||||
153
README.md
153
README.md
@ -1,22 +1,75 @@
|
||||
# SecuBox - Security Suite for OpenWrt
|
||||
|
||||
**Version:** 0.16.0
|
||||
**Last Updated:** 2026-01-27
|
||||
**Status:** Active Development
|
||||
**Version:** 0.17.0 🎉 **First Public Release**
|
||||
**Last Updated:** 2026-01-31
|
||||
**Status:** Production Ready
|
||||
**Modules:** 38 LuCI Applications
|
||||
|
||||
[](https://github.com/CyberMind-FR/secubox-openwrt/actions/workflows/build-openwrt-packages.yml)
|
||||
[](LICENSE)
|
||||
[](https://github.com/CyberMind-FR/secubox-openwrt/releases)
|
||||
|
||||
## 🎉 First Public Release
|
||||
|
||||
SecuBox v0.17.0 marks the **First Public Release** of the project. All core features are now stable and ready for production deployment.
|
||||
|
||||
### What's Ready
|
||||
|
||||
- ✅ **38 LuCI modules** — Complete security and network management suite
|
||||
- ✅ **Three-Loop Security Architecture** — Operational, Tactical, and Strategic defense layers
|
||||
- ✅ **CrowdSec Integration** — Real-time threat intelligence and automated blocking
|
||||
- ✅ **Deep Packet Inspection** — netifyd/nDPId protocol analysis
|
||||
- ✅ **WireGuard VPN** — Encrypted mesh connectivity
|
||||
- ✅ **Multi-architecture support** — ARM64, ARM32, MIPS, x86
|
||||
|
||||
### Coming Next (v0.18+)
|
||||
|
||||
- 🔵 **P2P Hub** — Decentralized threat intelligence sharing
|
||||
- 🔵 **did:plc Identity** — Self-sovereign node identity for trust networks
|
||||
|
||||
---
|
||||
|
||||
## Overview
|
||||
|
||||
SecuBox is a comprehensive security and network management suite for OpenWrt, providing a unified ecosystem of 38 specialized dashboards and tools. All modules are compiled automatically for multiple OpenWrt architectures via GitHub Actions.
|
||||
|
||||
**Website:** [secubox.cybermood.eu](https://secubox.cybermood.eu)
|
||||
**Website:** [secubox.maegia.tv](https://secubox.maegia.tv)
|
||||
**Publisher:** [CyberMind.fr](https://cybermind.fr)
|
||||
|
||||
---
|
||||
|
||||
## Three-Loop Security Architecture
|
||||
|
||||
SecuBox implements a **Three-Loop Security Model** for defense in depth:
|
||||
|
||||
```
|
||||
┌────────────────────────────────────────────────────────┐
|
||||
│ LOOP 3: STRATEGIC │
|
||||
│ (Hours → Days) │
|
||||
│ ┌────────────────────────────────────────────────┐ │
|
||||
│ │ LOOP 2: TACTICAL │ │
|
||||
│ │ (Minutes → Hours) │ │
|
||||
│ │ ┌────────────────────────────────────────┐ │ │
|
||||
│ │ │ LOOP 1: OPERATIONAL │ │ │
|
||||
│ │ │ (Milliseconds → Seconds) │ │ │
|
||||
│ │ │ DETECT → DECIDE → BLOCK │ │ │
|
||||
│ │ └────────────────────────────────────────┘ │ │
|
||||
│ │ CORRELATE → ANALYZE → ADAPT │ │
|
||||
│ └────────────────────────────────────────────────┘ │
|
||||
│ AGGREGATE → ANTICIPATE → EVOLVE │
|
||||
└────────────────────────────────────────────────────────┘
|
||||
```
|
||||
|
||||
| Loop | Function | SecuBox Modules |
|
||||
|------|----------|-----------------|
|
||||
| **Loop 1** | Real-time blocking | nftables/fw4, netifyd DPI, CrowdSec Bouncer |
|
||||
| **Loop 2** | Pattern correlation | CrowdSec Agent/LAPI, Scenarios, Netdata |
|
||||
| **Loop 3** | Threat intelligence | CrowdSec CAPI, Blocklists, P2P Hub (v0.18+) |
|
||||
|
||||
See [DOCS/THREE-LOOP-ARCHITECTURE.md](DOCS/THREE-LOOP-ARCHITECTURE.md) for detailed analysis.
|
||||
|
||||
---
|
||||
|
||||
## SecuBox Modules
|
||||
|
||||
### SecuBox Core (5 modules)
|
||||
@ -107,6 +160,7 @@ SecuBox is a comprehensive security and network management suite for OpenWrt, pr
|
||||
## Supported Architectures
|
||||
|
||||
### ARM 64-bit (AArch64)
|
||||
|
||||
| Target | Devices |
|
||||
|--------|---------|
|
||||
| `aarch64-cortex-a53` | ESPRESSObin, BananaPi R64 |
|
||||
@ -116,6 +170,7 @@ SecuBox is a comprehensive security and network management suite for OpenWrt, pr
|
||||
| `bcm27xx-bcm2711` | Raspberry Pi 4, Compute Module 4 |
|
||||
|
||||
### ARM 32-bit
|
||||
|
||||
| Target | Devices |
|
||||
|--------|---------|
|
||||
| `arm-cortex-a7-neon` | Orange Pi, BananaPi, Allwinner |
|
||||
@ -123,12 +178,14 @@ SecuBox is a comprehensive security and network management suite for OpenWrt, pr
|
||||
| `qualcomm-ipq40xx` | Google WiFi, Zyxel NBG6617 |
|
||||
|
||||
### MIPS
|
||||
|
||||
| Target | Devices |
|
||||
|--------|---------|
|
||||
| `mips-24kc` | TP-Link Archer, Ubiquiti |
|
||||
| `mipsel-24kc` | Xiaomi, GL.iNet, Netgear |
|
||||
|
||||
### x86
|
||||
|
||||
| Target | Devices |
|
||||
|--------|---------|
|
||||
| `x86-64` | PC, VMs, Docker, Proxmox |
|
||||
@ -163,11 +220,13 @@ make package/secubox/luci-app-secubox-portal/compile V=s
|
||||
### Add as OpenWrt Feed
|
||||
|
||||
Add to `feeds.conf.default`:
|
||||
|
||||
```
|
||||
src-git secubox https://github.com/CyberMind-FR/secubox-openwrt.git
|
||||
```
|
||||
|
||||
Then:
|
||||
|
||||
```bash
|
||||
./scripts/feeds update secubox
|
||||
./scripts/feeds install -a -p secubox
|
||||
@ -182,49 +241,15 @@ make V=s
|
||||
```
|
||||
secubox-openwrt/
|
||||
├── package/secubox/ # All 38 SecuBox LuCI packages
|
||||
│ ├── luci-app-secubox/ # Core hub
|
||||
│ ├── luci-app-secubox-portal/
|
||||
│ ├── luci-app-secubox-admin/
|
||||
│ ├── luci-app-crowdsec-dashboard/
|
||||
│ ├── luci-app-secubox-netifyd/
|
||||
│ ├── luci-app-haproxy/
|
||||
│ ├── luci-app-streamlit/
|
||||
│ ├── luci-app-gitea/
|
||||
│ ├── luci-app-hexojs/
|
||||
│ └── ... (38 modules total)
|
||||
├── secubox-tools/ # Build tools and local SDK
|
||||
│ ├── local-build.sh # Local package builder
|
||||
│ ├── validate-modules.sh # Module validation
|
||||
│ ├── openwrt/ # Full toolchain (for Go/native builds)
|
||||
│ └── sdk/ # OpenWrt SDK (for LuCI apps)
|
||||
├── DOCS/ # Documentation
|
||||
│ ├── THREE-LOOP-ARCHITECTURE.md # Security model analysis
|
||||
│ ├── DEVELOPMENT-GUIDELINES.md
|
||||
│ ├── QUICK-START.md
|
||||
│ └── VALIDATION-GUIDE.md
|
||||
└── .github/workflows/ # CI/CD
|
||||
```
|
||||
|
||||
### Build Requirements
|
||||
|
||||
**SDK builds** (for LuCI apps - shell/Lua packages):
|
||||
```bash
|
||||
./secubox-tools/local-build.sh build luci-app-crowdsec-dashboard
|
||||
```
|
||||
|
||||
**Full toolchain builds** (for Go/native packages):
|
||||
```bash
|
||||
cd secubox-tools/openwrt
|
||||
make package/crowdsec/compile V=s
|
||||
```
|
||||
|
||||
| Package | Build Type | Reason |
|
||||
|---------|------------|--------|
|
||||
| `crowdsec` | Toolchain | Go binary with CGO |
|
||||
| `crowdsec-firewall-bouncer` | Toolchain | Go binary with CGO |
|
||||
| `netifyd` | Toolchain | C++ native binary |
|
||||
| `nodogsplash` | Toolchain | C native binary |
|
||||
| All `luci-app-*` | SDK | Shell/Lua/JS packages |
|
||||
|
||||
---
|
||||
|
||||
## OpenWrt Compatibility
|
||||
@ -237,46 +262,24 @@ make package/crowdsec/compile V=s
|
||||
|
||||
---
|
||||
|
||||
## Development
|
||||
## Roadmap
|
||||
|
||||
### Developer Documentation
|
||||
|
||||
| Guide | Description |
|
||||
|-------|-------------|
|
||||
| [DOCS/DEVELOPMENT-GUIDELINES.md](./DOCS/DEVELOPMENT-GUIDELINES.md) | Design System, RPCD/ubus, ACL, JavaScript |
|
||||
| [DOCS/QUICK-START.md](./DOCS/QUICK-START.md) | Quick reference and code templates |
|
||||
| [DOCS/VALIDATION-GUIDE.md](./DOCS/VALIDATION-GUIDE.md) | Module validation procedures |
|
||||
| [CLAUDE.md](./CLAUDE.md) | OpenWrt shell scripting guidelines |
|
||||
| [secubox-tools/README.md](./secubox-tools/README.md) | Build tools and SDK usage |
|
||||
|
||||
### Critical Rules
|
||||
|
||||
1. **RPCD naming**: filename = ubus object (`luci.system-hub`)
|
||||
2. **Menu paths**: path = view file (`system-hub/overview.js`)
|
||||
3. **Permissions**: RPCD=755, CSS/JS=644
|
||||
4. **Validate**: `./secubox-tools/validate-modules.sh`
|
||||
5. **Go/native packages**: Use full toolchain, not SDK
|
||||
|
||||
---
|
||||
|
||||
## Public Pages
|
||||
|
||||
SecuBox includes public pages accessible without authentication:
|
||||
|
||||
- **Crowdfunding Campaign** - Support the project development
|
||||
- **Bug Bounty Program** - Security vulnerability reporting
|
||||
- **Development Status** - Modules list, roadmap, changelog
|
||||
|
||||
Access at: `https://your-secubox/cgi-bin/luci/secubox-public/`
|
||||
| Phase | Version | Status | Focus |
|
||||
|-------|---------|--------|-------|
|
||||
| **Core Mesh** | v0.17 | ✅ Released | Loops 1+2 complete |
|
||||
| **Service Mesh** | v0.18 | 🔵 In Progress | P2P Hub foundation |
|
||||
| **Intelligence Mesh** | v0.19 | ⚪ Planned | Full P2P intelligence |
|
||||
| **AI Mesh** | v0.20 | ⚪ Planned | ML in Loop 2 |
|
||||
| **Certification** | v1.0 | ⚪ Planned | ANSSI certification |
|
||||
|
||||
---
|
||||
|
||||
## Links
|
||||
|
||||
- **Website**: [secubox.cybermood.eu](https://secubox.cybermood.eu)
|
||||
- **GitHub**: [github.com/CyberMind-FR/secubox-openwrt](https://github.com/CyberMind-FR/secubox-openwrt)
|
||||
- **Publisher**: [CyberMind.fr](https://cybermind.fr)
|
||||
- **Issues**: [GitHub Issues](https://github.com/CyberMind-FR/secubox-openwrt/issues)
|
||||
* **Website**: [secubox.maegia.tv](https://secubox.maegia.tv)
|
||||
* **GitHub**: [github.com/CyberMind-FR/secubox-openwrt](https://github.com/CyberMind-FR/secubox-openwrt)
|
||||
* **Publisher**: [CyberMind.fr](https://cybermind.fr)
|
||||
* **Issues**: [GitHub Issues](https://github.com/CyberMind-FR/secubox-openwrt/issues)
|
||||
|
||||
---
|
||||
|
||||
@ -300,4 +303,6 @@ Apache-2.0 © 2024-2026 CyberMind.fr
|
||||
|
||||
**Gandalf** - [CyberMind.fr](https://cybermind.fr)
|
||||
|
||||
**Made with love in France**
|
||||
**Ex Tenebris, Lux Securitas**
|
||||
|
||||
🇫🇷 Made with love in France
|
||||
|
||||
@ -8,7 +8,7 @@ Architecture: all
|
||||
Installed-Size: 71680
|
||||
Description: Comprehensive authentication and session management with captive portal, OAuth2/OIDC integration, voucher system, and time-based access control
|
||||
Filename: luci-app-auth-guardian_0.4.0-r3_all.ipk
|
||||
Size: 12081
|
||||
Size: 12078
|
||||
|
||||
Package: luci-app-bandwidth-manager
|
||||
Version: 0.5.0-r2
|
||||
@ -20,7 +20,7 @@ Architecture: all
|
||||
Installed-Size: 378880
|
||||
Description: Advanced bandwidth management with QoS rules, client quotas, and SQM integration
|
||||
Filename: luci-app-bandwidth-manager_0.5.0-r2_all.ipk
|
||||
Size: 66972
|
||||
Size: 66974
|
||||
|
||||
Package: luci-app-cdn-cache
|
||||
Version: 0.5.0-r3
|
||||
@ -32,7 +32,7 @@ Architecture: all
|
||||
Installed-Size: 122880
|
||||
Description: Dashboard for managing local CDN caching proxy on OpenWrt
|
||||
Filename: luci-app-cdn-cache_0.5.0-r3_all.ipk
|
||||
Size: 23190
|
||||
Size: 23188
|
||||
|
||||
Package: luci-app-client-guardian
|
||||
Version: 0.4.0-r7
|
||||
@ -44,7 +44,7 @@ Architecture: all
|
||||
Installed-Size: 307200
|
||||
Description: Network Access Control with client monitoring, zone management, captive portal, parental controls, and SMS/email alerts
|
||||
Filename: luci-app-client-guardian_0.4.0-r7_all.ipk
|
||||
Size: 57045
|
||||
Size: 57046
|
||||
|
||||
Package: luci-app-crowdsec-dashboard
|
||||
Version: 0.7.0-r29
|
||||
@ -56,7 +56,7 @@ Architecture: all
|
||||
Installed-Size: 296960
|
||||
Description: Real-time security monitoring dashboard for CrowdSec on OpenWrt
|
||||
Filename: luci-app-crowdsec-dashboard_0.7.0-r29_all.ipk
|
||||
Size: 55583
|
||||
Size: 55584
|
||||
|
||||
Package: luci-app-cyberfeed
|
||||
Version: 0.1.1-r1
|
||||
@ -68,7 +68,7 @@ Architecture: all
|
||||
Installed-Size: 71680
|
||||
Description: Cyberpunk-themed RSS feed aggregator dashboard with social media support
|
||||
Filename: luci-app-cyberfeed_0.1.1-r1_all.ipk
|
||||
Size: 12841
|
||||
Size: 12839
|
||||
|
||||
Package: luci-app-exposure
|
||||
Version: 1.0.0-r3
|
||||
@ -80,7 +80,7 @@ Architecture: all
|
||||
Installed-Size: 153600
|
||||
Description: LuCI SecuBox Service Exposure Manager
|
||||
Filename: luci-app-exposure_1.0.0-r3_all.ipk
|
||||
Size: 20534
|
||||
Size: 20536
|
||||
|
||||
Package: luci-app-gitea
|
||||
Version: 1.0.0-r2
|
||||
@ -92,7 +92,7 @@ Architecture: all
|
||||
Installed-Size: 92160
|
||||
Description: Modern dashboard for Gitea Platform management on OpenWrt
|
||||
Filename: luci-app-gitea_1.0.0-r2_all.ipk
|
||||
Size: 15589
|
||||
Size: 15586
|
||||
|
||||
Package: luci-app-glances
|
||||
Version: 1.0.0-r2
|
||||
@ -104,7 +104,7 @@ Architecture: all
|
||||
Installed-Size: 40960
|
||||
Description: Modern dashboard for Glances system monitoring with SecuBox theme
|
||||
Filename: luci-app-glances_1.0.0-r2_all.ipk
|
||||
Size: 6968
|
||||
Size: 6969
|
||||
|
||||
Package: luci-app-haproxy
|
||||
Version: 1.0.0-r8
|
||||
@ -116,7 +116,7 @@ Architecture: all
|
||||
Installed-Size: 204800
|
||||
Description: Web interface for managing HAProxy load balancer with vhosts, SSL certificates, and backend routing
|
||||
Filename: luci-app-haproxy_1.0.0-r8_all.ipk
|
||||
Size: 34166
|
||||
Size: 34168
|
||||
|
||||
Package: luci-app-hexojs
|
||||
Version: 1.0.0-r3
|
||||
@ -128,7 +128,7 @@ Architecture: all
|
||||
Installed-Size: 215040
|
||||
Description: Modern dashboard for Hexo static site generator on OpenWrt
|
||||
Filename: luci-app-hexojs_1.0.0-r3_all.ipk
|
||||
Size: 32975
|
||||
Size: 32977
|
||||
|
||||
Package: luci-app-ksm-manager
|
||||
Version: 0.4.0-r2
|
||||
@ -140,7 +140,7 @@ Architecture: all
|
||||
Installed-Size: 112640
|
||||
Description: Centralized cryptographic key management with hardware security module (HSM) support for Nitrokey and YubiKey devices. Provides secure key storage, certificate management, SSH key handling, and secret storage with audit logging.
|
||||
Filename: luci-app-ksm-manager_0.4.0-r2_all.ipk
|
||||
Size: 18721
|
||||
Size: 18725
|
||||
|
||||
Package: luci-app-localai
|
||||
Version: 0.1.0-r15
|
||||
@ -152,7 +152,7 @@ Architecture: all
|
||||
Installed-Size: 81920
|
||||
Description: Modern dashboard for LocalAI LLM management on OpenWrt
|
||||
Filename: luci-app-localai_0.1.0-r15_all.ipk
|
||||
Size: 14360
|
||||
Size: 14367
|
||||
|
||||
Package: luci-app-lyrion
|
||||
Version: 1.0.0-r1
|
||||
@ -164,7 +164,7 @@ Architecture: all
|
||||
Installed-Size: 40960
|
||||
Description: LuCI support for Lyrion Music Server
|
||||
Filename: luci-app-lyrion_1.0.0-r1_all.ipk
|
||||
Size: 6730
|
||||
Size: 6733
|
||||
|
||||
Package: luci-app-magicmirror2
|
||||
Version: 0.4.0-r6
|
||||
@ -188,7 +188,7 @@ Architecture: all
|
||||
Installed-Size: 30720
|
||||
Description: LuCI support for Mail-in-a-Box
|
||||
Filename: luci-app-mailinabox_1.0.0-r1_all.ipk
|
||||
Size: 5482
|
||||
Size: 5487
|
||||
|
||||
Package: luci-app-media-flow
|
||||
Version: 0.6.4-r1
|
||||
@ -200,7 +200,7 @@ Architecture: all
|
||||
Installed-Size: 102400
|
||||
Description: Real-time detection and monitoring of streaming services (Netflix, YouTube, Spotify, etc.) with quality estimation, history tracking, and alerts. Supports nDPId local DPI and netifyd.
|
||||
Filename: luci-app-media-flow_0.6.4-r1_all.ipk
|
||||
Size: 19117
|
||||
Size: 19127
|
||||
|
||||
Package: luci-app-metablogizer
|
||||
Version: 1.0.0-r3
|
||||
@ -212,7 +212,7 @@ Architecture: all
|
||||
Installed-Size: 112640
|
||||
Description: LuCI support for MetaBlogizer Static Site Publisher
|
||||
Filename: luci-app-metablogizer_1.0.0-r3_all.ipk
|
||||
Size: 23501
|
||||
Size: 23504
|
||||
|
||||
Package: luci-app-metabolizer
|
||||
Version: 1.0.0-r2
|
||||
@ -236,7 +236,7 @@ Architecture: all
|
||||
Installed-Size: 102400
|
||||
Description: Modern dashboard for mitmproxy HTTPS traffic inspection with SecuBox theme
|
||||
Filename: luci-app-mitmproxy_0.4.0-r6_all.ipk
|
||||
Size: 18932
|
||||
Size: 18935
|
||||
|
||||
Package: luci-app-mmpm
|
||||
Version: 0.2.0-r3
|
||||
@ -248,7 +248,7 @@ Architecture: all
|
||||
Installed-Size: 51200
|
||||
Description: Web interface for MMPM - MagicMirror Package Manager
|
||||
Filename: luci-app-mmpm_0.2.0-r3_all.ipk
|
||||
Size: 7901
|
||||
Size: 7902
|
||||
|
||||
Package: luci-app-mqtt-bridge
|
||||
Version: 0.4.0-r4
|
||||
@ -272,7 +272,7 @@ Architecture: all
|
||||
Installed-Size: 122880
|
||||
Description: Modern dashboard for nDPId deep packet inspection on OpenWrt
|
||||
Filename: luci-app-ndpid_1.1.2-r2_all.ipk
|
||||
Size: 22457
|
||||
Size: 22458
|
||||
|
||||
Package: luci-app-netdata-dashboard
|
||||
Version: 0.5.0-r2
|
||||
@ -284,7 +284,7 @@ Architecture: all
|
||||
Installed-Size: 133120
|
||||
Description: Real-time system monitoring dashboard with Netdata integration for OpenWrt
|
||||
Filename: luci-app-netdata-dashboard_0.5.0-r2_all.ipk
|
||||
Size: 22400
|
||||
Size: 22401
|
||||
|
||||
Package: luci-app-network-modes
|
||||
Version: 0.5.0-r3
|
||||
@ -308,7 +308,7 @@ Architecture: all
|
||||
Installed-Size: 81920
|
||||
Description: Unified network services dashboard with DNS/hosts sync, CDN cache control, and WPAD auto-proxy configuration
|
||||
Filename: luci-app-network-tweaks_1.0.0-r7_all.ipk
|
||||
Size: 15466
|
||||
Size: 15464
|
||||
|
||||
Package: luci-app-nextcloud
|
||||
Version: 1.0.0-r1
|
||||
@ -320,7 +320,7 @@ Architecture: all
|
||||
Installed-Size: 30720
|
||||
Description: LuCI support for Nextcloud
|
||||
Filename: luci-app-nextcloud_1.0.0-r1_all.ipk
|
||||
Size: 6487
|
||||
Size: 6482
|
||||
|
||||
Package: luci-app-ollama
|
||||
Version: 0.1.0-r1
|
||||
@ -332,7 +332,7 @@ Architecture: all
|
||||
Installed-Size: 71680
|
||||
Description: Modern dashboard for Ollama LLM management on OpenWrt
|
||||
Filename: luci-app-ollama_0.1.0-r1_all.ipk
|
||||
Size: 11998
|
||||
Size: 11997
|
||||
|
||||
Package: luci-app-picobrew
|
||||
Version: 1.0.0-r1
|
||||
@ -344,7 +344,7 @@ Architecture: all
|
||||
Installed-Size: 51200
|
||||
Description: Modern dashboard for PicoBrew Server management on OpenWrt
|
||||
Filename: luci-app-picobrew_1.0.0-r1_all.ipk
|
||||
Size: 9979
|
||||
Size: 9978
|
||||
|
||||
Package: luci-app-secubox
|
||||
Version: 0.7.1-r4
|
||||
@ -356,7 +356,7 @@ Architecture: all
|
||||
Installed-Size: 266240
|
||||
Description: Central control hub for all SecuBox modules. Provides unified dashboard, module status, system health monitoring, and quick actions.
|
||||
Filename: luci-app-secubox_0.7.1-r4_all.ipk
|
||||
Size: 49901
|
||||
Size: 49902
|
||||
|
||||
Package: luci-app-secubox-admin
|
||||
Version: 1.0.0-r19
|
||||
@ -379,7 +379,7 @@ Architecture: all
|
||||
Installed-Size: 81920
|
||||
Description: LuCI SecuBox CrowdSec Dashboard
|
||||
Filename: luci-app-secubox-crowdsec_1.0.0-r3_all.ipk
|
||||
Size: 13925
|
||||
Size: 13922
|
||||
|
||||
Package: luci-app-secubox-netdiag
|
||||
Version: 1.0.0-r1
|
||||
@ -391,7 +391,7 @@ Architecture: all
|
||||
Installed-Size: 61440
|
||||
Description: Real-time DSA switch port statistics, error monitoring, and network health diagnostics
|
||||
Filename: luci-app-secubox-netdiag_1.0.0-r1_all.ipk
|
||||
Size: 12002
|
||||
Size: 11996
|
||||
|
||||
Package: luci-app-secubox-netifyd
|
||||
Version: 1.2.1-r1
|
||||
@ -403,7 +403,7 @@ Architecture: all
|
||||
Installed-Size: 215040
|
||||
Description: Complete LuCI interface for netifyd DPI engine with real-time flow monitoring, application detection, network analytics, and flow action plugins
|
||||
Filename: luci-app-secubox-netifyd_1.2.1-r1_all.ipk
|
||||
Size: 39499
|
||||
Size: 39503
|
||||
|
||||
Package: luci-app-secubox-p2p
|
||||
Version: 0.1.0-r1
|
||||
@ -415,7 +415,7 @@ Architecture: all
|
||||
Installed-Size: 215040
|
||||
Description: LuCI SecuBox P2P Hub
|
||||
Filename: luci-app-secubox-p2p_0.1.0-r1_all.ipk
|
||||
Size: 39257
|
||||
Size: 39260
|
||||
|
||||
Package: luci-app-secubox-portal
|
||||
Version: 0.7.0-r2
|
||||
@ -439,7 +439,7 @@ Architecture: all
|
||||
Installed-Size: 71680
|
||||
Description: Unified dashboard integrating netifyd DPI threats with CrowdSec intelligence for real-time threat monitoring and automated blocking
|
||||
Filename: luci-app-secubox-security-threats_1.0.0-r4_all.ipk
|
||||
Size: 13906
|
||||
Size: 13910
|
||||
|
||||
Package: luci-app-service-registry
|
||||
Version: 1.0.0-r1
|
||||
@ -463,7 +463,7 @@ Architecture: all
|
||||
Installed-Size: 122880
|
||||
Description: Modern dashboard for Streamlit Platform management on OpenWrt
|
||||
Filename: luci-app-streamlit_1.0.0-r9_all.ipk
|
||||
Size: 20471
|
||||
Size: 20473
|
||||
|
||||
Package: luci-app-system-hub
|
||||
Version: 0.5.1-r4
|
||||
@ -487,7 +487,7 @@ Architecture: all
|
||||
Installed-Size: 133120
|
||||
Description: Modern dashboard for Tor anonymization on OpenWrt
|
||||
Filename: luci-app-tor-shield_1.0.0-r10_all.ipk
|
||||
Size: 24537
|
||||
Size: 24536
|
||||
|
||||
Package: luci-app-traffic-shaper
|
||||
Version: 0.4.0-r2
|
||||
@ -499,7 +499,7 @@ Architecture: all
|
||||
Installed-Size: 92160
|
||||
Description: Advanced traffic shaping with TC/CAKE for precise bandwidth control
|
||||
Filename: luci-app-traffic-shaper_0.4.0-r2_all.ipk
|
||||
Size: 15637
|
||||
Size: 15634
|
||||
|
||||
Package: luci-app-vhost-manager
|
||||
Version: 0.5.0-r5
|
||||
@ -511,7 +511,7 @@ Architecture: all
|
||||
Installed-Size: 153600
|
||||
Description: Nginx reverse proxy manager with Let's Encrypt SSL certificates, authentication, and WebSocket support
|
||||
Filename: luci-app-vhost-manager_0.5.0-r5_all.ipk
|
||||
Size: 26204
|
||||
Size: 26200
|
||||
|
||||
Package: luci-app-wireguard-dashboard
|
||||
Version: 0.7.0-r5
|
||||
@ -523,7 +523,7 @@ Architecture: all
|
||||
Installed-Size: 235520
|
||||
Description: Modern dashboard for WireGuard VPN monitoring on OpenWrt
|
||||
Filename: luci-app-wireguard-dashboard_0.7.0-r5_all.ipk
|
||||
Size: 45372
|
||||
Size: 45373
|
||||
|
||||
Package: luci-app-zigbee2mqtt
|
||||
Version: 1.0.0-r2
|
||||
@ -535,7 +535,7 @@ Architecture: all
|
||||
Installed-Size: 40960
|
||||
Description: Graphical interface for managing the Zigbee2MQTT docker application.
|
||||
Filename: luci-app-zigbee2mqtt_1.0.0-r2_all.ipk
|
||||
Size: 7095
|
||||
Size: 7090
|
||||
|
||||
Package: luci-theme-secubox
|
||||
Version: 0.4.7-r1
|
||||
@ -547,7 +547,7 @@ Architecture: all
|
||||
Installed-Size: 460800
|
||||
Description: Global CyberMood design system (CSS/JS/i18n) shared by all SecuBox dashboards.
|
||||
Filename: luci-theme-secubox_0.4.7-r1_all.ipk
|
||||
Size: 111798
|
||||
Size: 111797
|
||||
|
||||
Package: secubox-app
|
||||
Version: 1.0.0-r2
|
||||
@ -558,7 +558,7 @@ Installed-Size: 92160
|
||||
Description: Command line helper for SecuBox App Store manifests. Installs /usr/sbin/secubox-app
|
||||
and ships the default manifests under /usr/share/secubox/plugins/.
|
||||
Filename: secubox-app_1.0.0-r2_all.ipk
|
||||
Size: 11181
|
||||
Size: 11188
|
||||
|
||||
Package: secubox-app-adguardhome
|
||||
Version: 1.0.0-r2
|
||||
@ -572,7 +572,7 @@ Description: Installer, configuration, and service manager for running AdGuard
|
||||
inside Docker on SecuBox-powered OpenWrt systems. Network-wide ad blocker
|
||||
with DNS-over-HTTPS/TLS support and detailed analytics.
|
||||
Filename: secubox-app-adguardhome_1.0.0-r2_all.ipk
|
||||
Size: 2883
|
||||
Size: 2877
|
||||
|
||||
Package: secubox-app-auth-logger
|
||||
Version: 1.2.2-r1
|
||||
@ -590,7 +590,7 @@ Description: Logs authentication failures from LuCI/rpcd and Dropbear SSH
|
||||
- JavaScript hook to intercept login failures
|
||||
- CrowdSec parser and bruteforce scenario
|
||||
Filename: secubox-app-auth-logger_1.2.2-r1_all.ipk
|
||||
Size: 9379
|
||||
Size: 9380
|
||||
|
||||
Package: secubox-app-crowdsec-custom
|
||||
Version: 1.1.0-r1
|
||||
@ -613,7 +613,7 @@ Description: Custom CrowdSec configurations for SecuBox web interface protectio
|
||||
- Webapp generic auth bruteforce protection
|
||||
- Whitelist for trusted networks
|
||||
Filename: secubox-app-crowdsec-custom_1.1.0-r1_all.ipk
|
||||
Size: 5767
|
||||
Size: 5764
|
||||
|
||||
Package: secubox-app-cs-firewall-bouncer
|
||||
Version: 0.0.31-r4
|
||||
@ -640,7 +640,7 @@ Description: SecuBox CrowdSec Firewall Bouncer for OpenWrt.
|
||||
- Automatic restart on firewall reload
|
||||
- procd service management
|
||||
Filename: secubox-app-cs-firewall-bouncer_0.0.31-r4_aarch64_cortex-a72.ipk
|
||||
Size: 5049326
|
||||
Size: 5049324
|
||||
|
||||
Package: secubox-app-cyberfeed
|
||||
Version: 0.2.1-r1
|
||||
@ -654,7 +654,7 @@ Description: Cyberpunk-themed RSS feed aggregator for OpenWrt/SecuBox.
|
||||
Features emoji injection, neon styling, and RSS-Bridge support
|
||||
for social media feeds (Facebook, Twitter, Mastodon).
|
||||
Filename: secubox-app-cyberfeed_0.2.1-r1_all.ipk
|
||||
Size: 12453
|
||||
Size: 12451
|
||||
|
||||
Package: secubox-app-domoticz
|
||||
Version: 1.0.0-r2
|
||||
@ -667,7 +667,7 @@ Installed-Size: 10240
|
||||
Description: Installer, configuration, and service manager for running Domoticz
|
||||
inside Docker on SecuBox-powered OpenWrt systems.
|
||||
Filename: secubox-app-domoticz_1.0.0-r2_all.ipk
|
||||
Size: 2553
|
||||
Size: 2552
|
||||
|
||||
Package: secubox-app-exposure
|
||||
Version: 1.0.0-r1
|
||||
@ -682,7 +682,7 @@ Description: Unified service exposure manager for SecuBox.
|
||||
- Dynamic Tor hidden service management
|
||||
- HAProxy SSL reverse proxy configuration
|
||||
Filename: secubox-app-exposure_1.0.0-r1_all.ipk
|
||||
Size: 6838
|
||||
Size: 6828
|
||||
|
||||
Package: secubox-app-gitea
|
||||
Version: 1.0.0-r5
|
||||
@ -728,7 +728,7 @@ Description: Glances - Cross-platform system monitoring tool for SecuBox.
|
||||
Runs in LXC container for isolation and security.
|
||||
Configure in /etc/config/glances.
|
||||
Filename: secubox-app-glances_1.0.0-r1_all.ipk
|
||||
Size: 5534
|
||||
Size: 5535
|
||||
|
||||
Package: secubox-app-haproxy
|
||||
Version: 1.0.0-r23
|
||||
@ -748,7 +748,7 @@ Description: HAProxy load balancer and reverse proxy running in an LXC containe
|
||||
- Stats dashboard
|
||||
- Rate limiting and ACLs
|
||||
Filename: secubox-app-haproxy_1.0.0-r23_all.ipk
|
||||
Size: 15682
|
||||
Size: 15683
|
||||
|
||||
Package: secubox-app-hexojs
|
||||
Version: 1.0.0-r8
|
||||
@ -772,7 +772,7 @@ Description: Hexo CMS - Self-hosted static blog generator for OpenWrt
|
||||
Runs in LXC container with Alpine Linux.
|
||||
Configure in /etc/config/hexojs.
|
||||
Filename: secubox-app-hexojs_1.0.0-r8_all.ipk
|
||||
Size: 94935
|
||||
Size: 94937
|
||||
|
||||
Package: secubox-app-localai
|
||||
Version: 2.25.0-r1
|
||||
@ -794,7 +794,7 @@ Description: LocalAI native binary package for OpenWrt.
|
||||
|
||||
API: http://<router-ip>:8081/v1
|
||||
Filename: secubox-app-localai_2.25.0-r1_all.ipk
|
||||
Size: 5721
|
||||
Size: 5712
|
||||
|
||||
Package: secubox-app-localai-wb
|
||||
Version: 2.25.0-r1
|
||||
@ -818,7 +818,7 @@ Description: LocalAI native binary package for OpenWrt.
|
||||
|
||||
API: http://<router-ip>:8080/v1
|
||||
Filename: secubox-app-localai-wb_2.25.0-r1_all.ipk
|
||||
Size: 7956
|
||||
Size: 7954
|
||||
|
||||
Package: secubox-app-lyrion
|
||||
Version: 2.0.2-r1
|
||||
@ -838,7 +838,7 @@ Description: Lyrion Media Server (formerly Logitech Media Server / Squeezebox S
|
||||
Auto-detects available runtime, preferring LXC for lower resource usage.
|
||||
Configure runtime in /etc/config/lyrion.
|
||||
Filename: secubox-app-lyrion_2.0.2-r1_all.ipk
|
||||
Size: 7289
|
||||
Size: 7284
|
||||
|
||||
Package: secubox-app-magicmirror2
|
||||
Version: 0.4.0-r8
|
||||
@ -860,7 +860,7 @@ Description: MagicMirror² - Open source modular smart mirror platform for Secu
|
||||
Runs in LXC container for isolation and security.
|
||||
Configure in /etc/config/magicmirror2.
|
||||
Filename: secubox-app-magicmirror2_0.4.0-r8_all.ipk
|
||||
Size: 9249
|
||||
Size: 9250
|
||||
|
||||
Package: secubox-app-mailinabox
|
||||
Version: 2.0.0-r1
|
||||
@ -885,7 +885,7 @@ Description: Complete email server solution using docker-mailserver for SecuBox
|
||||
|
||||
Commands: mailinaboxctl --help
|
||||
Filename: secubox-app-mailinabox_2.0.0-r1_all.ipk
|
||||
Size: 7575
|
||||
Size: 7570
|
||||
|
||||
Package: secubox-app-metabolizer
|
||||
Version: 1.0.0-r3
|
||||
@ -906,7 +906,7 @@ Description: Metabolizer Blog Pipeline - Integrated CMS with Git-based workflow
|
||||
|
||||
Pipeline: Edit in Streamlit -> Push to Gitea -> Build with Hexo -> Publish
|
||||
Filename: secubox-app-metabolizer_1.0.0-r3_all.ipk
|
||||
Size: 13984
|
||||
Size: 13979
|
||||
|
||||
Package: secubox-app-mitmproxy
|
||||
Version: 0.4.0-r16
|
||||
@ -948,7 +948,7 @@ Description: MMPM (MagicMirror Package Manager) for SecuBox.
|
||||
|
||||
Runs inside the MagicMirror2 LXC container.
|
||||
Filename: secubox-app-mmpm_0.2.0-r5_all.ipk
|
||||
Size: 3977
|
||||
Size: 3976
|
||||
|
||||
Package: secubox-app-nextcloud
|
||||
Version: 1.0.0-r2
|
||||
@ -962,7 +962,7 @@ Description: Installer, configuration, and service manager for running Nextclou
|
||||
inside Docker on SecuBox-powered OpenWrt systems. Self-hosted file
|
||||
sync and share with calendar, contacts, and collaboration.
|
||||
Filename: secubox-app-nextcloud_1.0.0-r2_all.ipk
|
||||
Size: 2959
|
||||
Size: 2960
|
||||
|
||||
Package: secubox-app-ollama
|
||||
Version: 0.1.0-r1
|
||||
@ -984,7 +984,7 @@ Description: Ollama - Simple local LLM runtime for SecuBox-powered OpenWrt syst
|
||||
Runs in Docker/Podman container.
|
||||
Configure in /etc/config/ollama.
|
||||
Filename: secubox-app-ollama_0.1.0-r1_all.ipk
|
||||
Size: 5739
|
||||
Size: 5742
|
||||
|
||||
Package: secubox-app-picobrew
|
||||
Version: 1.0.0-r7
|
||||
@ -1033,7 +1033,7 @@ Description: Streamlit App Platform - Self-hosted Python data app platform
|
||||
|
||||
Configure in /etc/config/streamlit.
|
||||
Filename: secubox-app-streamlit_1.0.0-r5_all.ipk
|
||||
Size: 11721
|
||||
Size: 11719
|
||||
|
||||
Package: secubox-app-tor
|
||||
Version: 1.0.0-r1
|
||||
@ -1056,7 +1056,7 @@ Description: SecuBox Tor Shield - One-click Tor anonymization for OpenWrt
|
||||
|
||||
Configure in /etc/config/tor-shield.
|
||||
Filename: secubox-app-tor_1.0.0-r1_all.ipk
|
||||
Size: 7377
|
||||
Size: 7382
|
||||
|
||||
Package: secubox-app-webapp
|
||||
Version: 1.5.0-r7
|
||||
@ -1074,7 +1074,7 @@ Description: SecuBox Control Center Dashboard - A web-based dashboard for monit
|
||||
- Service management
|
||||
- Network interface control
|
||||
Filename: secubox-app-webapp_1.5.0-r7_all.ipk
|
||||
Size: 39171
|
||||
Size: 39169
|
||||
|
||||
Package: secubox-app-zigbee2mqtt
|
||||
Version: 1.0.0-r3
|
||||
@ -1087,7 +1087,7 @@ Installed-Size: 20480
|
||||
Description: Installer, configuration, and service manager for running Zigbee2MQTT
|
||||
inside Docker on SecuBox-powered OpenWrt systems.
|
||||
Filename: secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk
|
||||
Size: 3545
|
||||
Size: 3544
|
||||
|
||||
Package: secubox-core
|
||||
Version: 0.10.0-r9
|
||||
@ -1107,22 +1107,24 @@ Description: SecuBox Core Framework provides the foundational infrastructure fo
|
||||
- Unified CLI interface
|
||||
- ubus RPC backend
|
||||
Filename: secubox-core_0.10.0-r9_all.ipk
|
||||
Size: 80071
|
||||
Size: 80068
|
||||
|
||||
Package: secubox-p2p
|
||||
Version: 0.5.0-r1
|
||||
Version: 0.6.0-r1
|
||||
Depends: jsonfilter, curl, avahi-daemon, avahi-utils, uhttpd
|
||||
License: MIT
|
||||
Section: secubox
|
||||
Maintainer: SecuBox Team
|
||||
Architecture: all
|
||||
Installed-Size: 143360
|
||||
Installed-Size: 194560
|
||||
Description: SecuBox P2P Hub backend providing peer discovery, mesh networking
|
||||
DNS federation, and distributed service management. Includes mDNS
|
||||
service announcement, REST API on port 7331 for mesh visibility
|
||||
SecuBox Factory unified dashboard with Ed25519 signed Merkle
|
||||
snapshots for cryptographic configuration validation, and distributed
|
||||
mesh services panel for aggregated service discovery across all nodes.
|
||||
Filename: secubox-p2p_0.5.0-r1_all.ipk
|
||||
Size: 30574
|
||||
snapshots for cryptographic configuration validation, distributed
|
||||
mesh services panel for aggregated service discovery across all nodes
|
||||
and MirrorBox NetMesh Catalog for cross-chain distributed service
|
||||
registry with HAProxy vhost discovery and multi-endpoint access URLs.
|
||||
Filename: secubox-p2p_0.6.0-r1_all.ipk
|
||||
Size: 40190
|
||||
|
||||
|
||||
Binary file not shown.
@ -1,12 +1,12 @@
|
||||
{
|
||||
"feed_url": "/secubox-feed",
|
||||
"generated": "2026-01-31T08:07:44+01:00",
|
||||
"generated": "2026-01-31T09:21:26+01:00",
|
||||
"packages": [
|
||||
{
|
||||
"name": "luci-app-auth-guardian",
|
||||
"version": "0.4.0-r3",
|
||||
"filename": "luci-app-auth-guardian_0.4.0-r3_all.ipk",
|
||||
"size": 12081,
|
||||
"size": 12078,
|
||||
"category": "security",
|
||||
"icon": "key",
|
||||
"description": "Authentication management",
|
||||
@ -18,7 +18,7 @@
|
||||
"name": "luci-app-bandwidth-manager",
|
||||
"version": "0.5.0-r2",
|
||||
"filename": "luci-app-bandwidth-manager_0.5.0-r2_all.ipk",
|
||||
"size": 66966,
|
||||
"size": 66974,
|
||||
"category": "network",
|
||||
"icon": "activity",
|
||||
"description": "Bandwidth monitoring and control",
|
||||
@ -30,7 +30,7 @@
|
||||
"name": "luci-app-cdn-cache",
|
||||
"version": "0.5.0-r3",
|
||||
"filename": "luci-app-cdn-cache_0.5.0-r3_all.ipk",
|
||||
"size": 23189,
|
||||
"size": 23188,
|
||||
"category": "network",
|
||||
"icon": "globe",
|
||||
"description": "CDN caching",
|
||||
@ -42,7 +42,7 @@
|
||||
"name": "luci-app-client-guardian",
|
||||
"version": "0.4.0-r7",
|
||||
"filename": "luci-app-client-guardian_0.4.0-r7_all.ipk",
|
||||
"size": 57042,
|
||||
"size": 57046,
|
||||
"category": "network",
|
||||
"icon": "users",
|
||||
"description": "Client management and monitoring",
|
||||
@ -54,7 +54,7 @@
|
||||
"name": "luci-app-crowdsec-dashboard",
|
||||
"version": "0.7.0-r29",
|
||||
"filename": "luci-app-crowdsec-dashboard_0.7.0-r29_all.ipk",
|
||||
"size": 55585,
|
||||
"size": 55584,
|
||||
"category": "security",
|
||||
"icon": "shield",
|
||||
"description": "CrowdSec security monitoring",
|
||||
@ -66,7 +66,7 @@
|
||||
"name": "luci-app-cyberfeed",
|
||||
"version": "0.1.1-r1",
|
||||
"filename": "luci-app-cyberfeed_0.1.1-r1_all.ipk",
|
||||
"size": 12838,
|
||||
"size": 12839,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -78,7 +78,7 @@
|
||||
"name": "luci-app-exposure",
|
||||
"version": "1.0.0-r3",
|
||||
"filename": "luci-app-exposure_1.0.0-r3_all.ipk",
|
||||
"size": 20534,
|
||||
"size": 20536,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -90,7 +90,7 @@
|
||||
"name": "luci-app-gitea",
|
||||
"version": "1.0.0-r2",
|
||||
"filename": "luci-app-gitea_1.0.0-r2_all.ipk",
|
||||
"size": 15585,
|
||||
"size": 15586,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -102,7 +102,7 @@
|
||||
"name": "luci-app-glances",
|
||||
"version": "1.0.0-r2",
|
||||
"filename": "luci-app-glances_1.0.0-r2_all.ipk",
|
||||
"size": 6963,
|
||||
"size": 6969,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -126,7 +126,7 @@
|
||||
"name": "luci-app-hexojs",
|
||||
"version": "1.0.0-r3",
|
||||
"filename": "luci-app-hexojs_1.0.0-r3_all.ipk",
|
||||
"size": 32974,
|
||||
"size": 32977,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -138,7 +138,7 @@
|
||||
"name": "luci-app-ksm-manager",
|
||||
"version": "0.4.0-r2",
|
||||
"filename": "luci-app-ksm-manager_0.4.0-r2_all.ipk",
|
||||
"size": 18720,
|
||||
"size": 18725,
|
||||
"category": "system",
|
||||
"icon": "cpu",
|
||||
"description": "Kernel memory management",
|
||||
@ -150,7 +150,7 @@
|
||||
"name": "luci-app-localai",
|
||||
"version": "0.1.0-r15",
|
||||
"filename": "luci-app-localai_0.1.0-r15_all.ipk",
|
||||
"size": 14360,
|
||||
"size": 14367,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -162,7 +162,7 @@
|
||||
"name": "luci-app-lyrion",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "luci-app-lyrion_1.0.0-r1_all.ipk",
|
||||
"size": 6725,
|
||||
"size": 6733,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -174,7 +174,7 @@
|
||||
"name": "luci-app-magicmirror2",
|
||||
"version": "0.4.0-r6",
|
||||
"filename": "luci-app-magicmirror2_0.4.0-r6_all.ipk",
|
||||
"size": 12274,
|
||||
"size": 12277,
|
||||
"category": "iot",
|
||||
"icon": "monitor",
|
||||
"description": "Smart mirror display",
|
||||
@ -186,7 +186,7 @@
|
||||
"name": "luci-app-mailinabox",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "luci-app-mailinabox_1.0.0-r1_all.ipk",
|
||||
"size": 5481,
|
||||
"size": 5487,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -198,7 +198,7 @@
|
||||
"name": "luci-app-media-flow",
|
||||
"version": "0.6.4-r1",
|
||||
"filename": "luci-app-media-flow_0.6.4-r1_all.ipk",
|
||||
"size": 19120,
|
||||
"size": 19127,
|
||||
"category": "media",
|
||||
"icon": "film",
|
||||
"description": "Media streaming",
|
||||
@ -210,7 +210,7 @@
|
||||
"name": "luci-app-metablogizer",
|
||||
"version": "1.0.0-r3",
|
||||
"filename": "luci-app-metablogizer_1.0.0-r3_all.ipk",
|
||||
"size": 23503,
|
||||
"size": 23504,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -234,7 +234,7 @@
|
||||
"name": "luci-app-mitmproxy",
|
||||
"version": "0.4.0-r6",
|
||||
"filename": "luci-app-mitmproxy_0.4.0-r6_all.ipk",
|
||||
"size": 18933,
|
||||
"size": 18935,
|
||||
"category": "security",
|
||||
"icon": "lock",
|
||||
"description": "HTTPS proxy and traffic inspection",
|
||||
@ -246,7 +246,7 @@
|
||||
"name": "luci-app-mmpm",
|
||||
"version": "0.2.0-r3",
|
||||
"filename": "luci-app-mmpm_0.2.0-r3_all.ipk",
|
||||
"size": 7899,
|
||||
"size": 7902,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -258,7 +258,7 @@
|
||||
"name": "luci-app-mqtt-bridge",
|
||||
"version": "0.4.0-r4",
|
||||
"filename": "luci-app-mqtt-bridge_0.4.0-r4_all.ipk",
|
||||
"size": 22777,
|
||||
"size": 22779,
|
||||
"category": "iot",
|
||||
"icon": "message-square",
|
||||
"description": "MQTT bridge",
|
||||
@ -270,7 +270,7 @@
|
||||
"name": "luci-app-ndpid",
|
||||
"version": "1.1.2-r2",
|
||||
"filename": "luci-app-ndpid_1.1.2-r2_all.ipk",
|
||||
"size": 22455,
|
||||
"size": 22458,
|
||||
"category": "security",
|
||||
"icon": "eye",
|
||||
"description": "Deep packet inspection",
|
||||
@ -282,7 +282,7 @@
|
||||
"name": "luci-app-netdata-dashboard",
|
||||
"version": "0.5.0-r2",
|
||||
"filename": "luci-app-netdata-dashboard_0.5.0-r2_all.ipk",
|
||||
"size": 22396,
|
||||
"size": 22401,
|
||||
"category": "monitoring",
|
||||
"icon": "bar-chart-2",
|
||||
"description": "System monitoring dashboard",
|
||||
@ -294,7 +294,7 @@
|
||||
"name": "luci-app-network-modes",
|
||||
"version": "0.5.0-r3",
|
||||
"filename": "luci-app-network-modes_0.5.0-r3_all.ipk",
|
||||
"size": 55608,
|
||||
"size": 55613,
|
||||
"category": "network",
|
||||
"icon": "wifi",
|
||||
"description": "Network configuration",
|
||||
@ -306,7 +306,7 @@
|
||||
"name": "luci-app-network-tweaks",
|
||||
"version": "1.0.0-r7",
|
||||
"filename": "luci-app-network-tweaks_1.0.0-r7_all.ipk",
|
||||
"size": 15455,
|
||||
"size": 15464,
|
||||
"category": "network",
|
||||
"icon": "wifi",
|
||||
"description": "Network configuration",
|
||||
@ -318,7 +318,7 @@
|
||||
"name": "luci-app-nextcloud",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "luci-app-nextcloud_1.0.0-r1_all.ipk",
|
||||
"size": 6485,
|
||||
"size": 6482,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -330,7 +330,7 @@
|
||||
"name": "luci-app-ollama",
|
||||
"version": "0.1.0-r1",
|
||||
"filename": "luci-app-ollama_0.1.0-r1_all.ipk",
|
||||
"size": 11991,
|
||||
"size": 11997,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -342,7 +342,7 @@
|
||||
"name": "luci-app-picobrew",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "luci-app-picobrew_1.0.0-r1_all.ipk",
|
||||
"size": 9972,
|
||||
"size": 9978,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -354,7 +354,7 @@
|
||||
"name": "luci-app-secubox",
|
||||
"version": "0.7.1-r4",
|
||||
"filename": "luci-app-secubox_0.7.1-r4_all.ipk",
|
||||
"size": 49900,
|
||||
"size": 49902,
|
||||
"category": "system",
|
||||
"icon": "box",
|
||||
"description": "SecuBox system component",
|
||||
@ -366,7 +366,7 @@
|
||||
"name": "luci-app-secubox-admin",
|
||||
"version": "1.0.0-r19",
|
||||
"filename": "luci-app-secubox-admin_1.0.0-r19_all.ipk",
|
||||
"size": 57094,
|
||||
"size": 57098,
|
||||
"category": "system",
|
||||
"icon": "box",
|
||||
"description": "SecuBox system component",
|
||||
@ -378,7 +378,7 @@
|
||||
"name": "luci-app-secubox-crowdsec",
|
||||
"version": "1.0.0-r3",
|
||||
"filename": "luci-app-secubox-crowdsec_1.0.0-r3_all.ipk",
|
||||
"size": 13914,
|
||||
"size": 13922,
|
||||
"category": "system",
|
||||
"icon": "box",
|
||||
"description": "SecuBox system component",
|
||||
@ -390,7 +390,7 @@
|
||||
"name": "luci-app-secubox-netdiag",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "luci-app-secubox-netdiag_1.0.0-r1_all.ipk",
|
||||
"size": 12000,
|
||||
"size": 11996,
|
||||
"category": "system",
|
||||
"icon": "box",
|
||||
"description": "SecuBox system component",
|
||||
@ -402,7 +402,7 @@
|
||||
"name": "luci-app-secubox-netifyd",
|
||||
"version": "1.2.1-r1",
|
||||
"filename": "luci-app-secubox-netifyd_1.2.1-r1_all.ipk",
|
||||
"size": 39499,
|
||||
"size": 39503,
|
||||
"category": "system",
|
||||
"icon": "box",
|
||||
"description": "SecuBox system component",
|
||||
@ -414,7 +414,7 @@
|
||||
"name": "luci-app-secubox-p2p",
|
||||
"version": "0.1.0-r1",
|
||||
"filename": "luci-app-secubox-p2p_0.1.0-r1_all.ipk",
|
||||
"size": 39254,
|
||||
"size": 39260,
|
||||
"category": "system",
|
||||
"icon": "box",
|
||||
"description": "SecuBox system component",
|
||||
@ -426,7 +426,7 @@
|
||||
"name": "luci-app-secubox-portal",
|
||||
"version": "0.7.0-r2",
|
||||
"filename": "luci-app-secubox-portal_0.7.0-r2_all.ipk",
|
||||
"size": 24553,
|
||||
"size": 24557,
|
||||
"category": "system",
|
||||
"icon": "box",
|
||||
"description": "SecuBox system component",
|
||||
@ -438,7 +438,7 @@
|
||||
"name": "luci-app-secubox-security-threats",
|
||||
"version": "1.0.0-r4",
|
||||
"filename": "luci-app-secubox-security-threats_1.0.0-r4_all.ipk",
|
||||
"size": 13899,
|
||||
"size": 13910,
|
||||
"category": "system",
|
||||
"icon": "box",
|
||||
"description": "SecuBox system component",
|
||||
@ -450,7 +450,7 @@
|
||||
"name": "luci-app-service-registry",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "luci-app-service-registry_1.0.0-r1_all.ipk",
|
||||
"size": 39826,
|
||||
"size": 39827,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -462,7 +462,7 @@
|
||||
"name": "luci-app-streamlit",
|
||||
"version": "1.0.0-r9",
|
||||
"filename": "luci-app-streamlit_1.0.0-r9_all.ipk",
|
||||
"size": 20470,
|
||||
"size": 20473,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -474,7 +474,7 @@
|
||||
"name": "luci-app-system-hub",
|
||||
"version": "0.5.1-r4",
|
||||
"filename": "luci-app-system-hub_0.5.1-r4_all.ipk",
|
||||
"size": 66345,
|
||||
"size": 66351,
|
||||
"category": "system",
|
||||
"icon": "settings",
|
||||
"description": "System management",
|
||||
@ -486,7 +486,7 @@
|
||||
"name": "luci-app-tor-shield",
|
||||
"version": "1.0.0-r10",
|
||||
"filename": "luci-app-tor-shield_1.0.0-r10_all.ipk",
|
||||
"size": 24532,
|
||||
"size": 24536,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -498,7 +498,7 @@
|
||||
"name": "luci-app-traffic-shaper",
|
||||
"version": "0.4.0-r2",
|
||||
"filename": "luci-app-traffic-shaper_0.4.0-r2_all.ipk",
|
||||
"size": 15635,
|
||||
"size": 15634,
|
||||
"category": "network",
|
||||
"icon": "filter",
|
||||
"description": "Traffic shaping and QoS",
|
||||
@ -510,7 +510,7 @@
|
||||
"name": "luci-app-vhost-manager",
|
||||
"version": "0.5.0-r5",
|
||||
"filename": "luci-app-vhost-manager_0.5.0-r5_all.ipk",
|
||||
"size": 26199,
|
||||
"size": 26200,
|
||||
"category": "network",
|
||||
"icon": "server",
|
||||
"description": "Virtual host management",
|
||||
@ -522,7 +522,7 @@
|
||||
"name": "luci-app-wireguard-dashboard",
|
||||
"version": "0.7.0-r5",
|
||||
"filename": "luci-app-wireguard-dashboard_0.7.0-r5_all.ipk",
|
||||
"size": 45368,
|
||||
"size": 45373,
|
||||
"category": "vpn",
|
||||
"icon": "shield",
|
||||
"description": "WireGuard VPN dashboard",
|
||||
@ -534,7 +534,7 @@
|
||||
"name": "luci-app-zigbee2mqtt",
|
||||
"version": "1.0.0-r2",
|
||||
"filename": "luci-app-zigbee2mqtt_1.0.0-r2_all.ipk",
|
||||
"size": 7085,
|
||||
"size": 7090,
|
||||
"category": "iot",
|
||||
"icon": "radio",
|
||||
"description": "Zigbee device management",
|
||||
@ -546,7 +546,7 @@
|
||||
"name": "luci-theme-secubox",
|
||||
"version": "0.4.7-r1",
|
||||
"filename": "luci-theme-secubox_0.4.7-r1_all.ipk",
|
||||
"size": 111793,
|
||||
"size": 111797,
|
||||
"category": "theme",
|
||||
"icon": "palette",
|
||||
"description": "LuCI theme",
|
||||
@ -558,7 +558,7 @@
|
||||
"name": "secubox-app",
|
||||
"version": "1.0.0-r2",
|
||||
"filename": "secubox-app_1.0.0-r2_all.ipk",
|
||||
"size": 11185,
|
||||
"size": 11188,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
@ -570,7 +570,7 @@
|
||||
"name": "secubox-app-adguardhome",
|
||||
"version": "1.0.0-r2",
|
||||
"filename": "secubox-app-adguardhome_1.0.0-r2_all.ipk",
|
||||
"size": 2876,
|
||||
"size": 2877,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -582,7 +582,7 @@
|
||||
"name": "secubox-app-auth-logger",
|
||||
"version": "1.2.2-r1",
|
||||
"filename": "secubox-app-auth-logger_1.2.2-r1_all.ipk",
|
||||
"size": 9378,
|
||||
"size": 9380,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -594,7 +594,7 @@
|
||||
"name": "secubox-app-crowdsec-custom",
|
||||
"version": "1.1.0-r1",
|
||||
"filename": "secubox-app-crowdsec-custom_1.1.0-r1_all.ipk",
|
||||
"size": 5759,
|
||||
"size": 5764,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -606,7 +606,7 @@
|
||||
"name": "secubox-app-cs-firewall-bouncer",
|
||||
"version": "0.0.31-r4_aarch64",
|
||||
"filename": "secubox-app-cs-firewall-bouncer_0.0.31-r4_aarch64_cortex-a72.ipk",
|
||||
"size": 5049321,
|
||||
"size": 5049324,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -630,7 +630,7 @@
|
||||
"name": "secubox-app-domoticz",
|
||||
"version": "1.0.0-r2",
|
||||
"filename": "secubox-app-domoticz_1.0.0-r2_all.ipk",
|
||||
"size": 2544,
|
||||
"size": 2552,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -642,7 +642,7 @@
|
||||
"name": "secubox-app-exposure",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "secubox-app-exposure_1.0.0-r1_all.ipk",
|
||||
"size": 6825,
|
||||
"size": 6828,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -666,7 +666,7 @@
|
||||
"name": "secubox-app-glances",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "secubox-app-glances_1.0.0-r1_all.ipk",
|
||||
"size": 5534,
|
||||
"size": 5535,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -678,7 +678,7 @@
|
||||
"name": "secubox-app-haproxy",
|
||||
"version": "1.0.0-r23",
|
||||
"filename": "secubox-app-haproxy_1.0.0-r23_all.ipk",
|
||||
"size": 15682,
|
||||
"size": 15683,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -690,7 +690,7 @@
|
||||
"name": "secubox-app-hexojs",
|
||||
"version": "1.0.0-r8",
|
||||
"filename": "secubox-app-hexojs_1.0.0-r8_all.ipk",
|
||||
"size": 94934,
|
||||
"size": 94937,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -714,7 +714,7 @@
|
||||
"name": "secubox-app-localai-wb",
|
||||
"version": "2.25.0-r1",
|
||||
"filename": "secubox-app-localai-wb_2.25.0-r1_all.ipk",
|
||||
"size": 7950,
|
||||
"size": 7954,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -726,7 +726,7 @@
|
||||
"name": "secubox-app-lyrion",
|
||||
"version": "2.0.2-r1",
|
||||
"filename": "secubox-app-lyrion_2.0.2-r1_all.ipk",
|
||||
"size": 7285,
|
||||
"size": 7284,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -738,7 +738,7 @@
|
||||
"name": "secubox-app-magicmirror2",
|
||||
"version": "0.4.0-r8",
|
||||
"filename": "secubox-app-magicmirror2_0.4.0-r8_all.ipk",
|
||||
"size": 9251,
|
||||
"size": 9250,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -750,7 +750,7 @@
|
||||
"name": "secubox-app-mailinabox",
|
||||
"version": "2.0.0-r1",
|
||||
"filename": "secubox-app-mailinabox_2.0.0-r1_all.ipk",
|
||||
"size": 7566,
|
||||
"size": 7570,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -774,7 +774,7 @@
|
||||
"name": "secubox-app-mitmproxy",
|
||||
"version": "0.4.0-r16",
|
||||
"filename": "secubox-app-mitmproxy_0.4.0-r16_all.ipk",
|
||||
"size": 10215,
|
||||
"size": 10213,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -786,7 +786,7 @@
|
||||
"name": "secubox-app-mmpm",
|
||||
"version": "0.2.0-r5",
|
||||
"filename": "secubox-app-mmpm_0.2.0-r5_all.ipk",
|
||||
"size": 3974,
|
||||
"size": 3976,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -798,7 +798,7 @@
|
||||
"name": "secubox-app-nextcloud",
|
||||
"version": "1.0.0-r2",
|
||||
"filename": "secubox-app-nextcloud_1.0.0-r2_all.ipk",
|
||||
"size": 2955,
|
||||
"size": 2960,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -810,7 +810,7 @@
|
||||
"name": "secubox-app-ollama",
|
||||
"version": "0.1.0-r1",
|
||||
"filename": "secubox-app-ollama_0.1.0-r1_all.ipk",
|
||||
"size": 5733,
|
||||
"size": 5742,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -834,7 +834,7 @@
|
||||
"name": "secubox-app-streamlit",
|
||||
"version": "1.0.0-r5",
|
||||
"filename": "secubox-app-streamlit_1.0.0-r5_all.ipk",
|
||||
"size": 11717,
|
||||
"size": 11719,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -846,7 +846,7 @@
|
||||
"name": "secubox-app-tor",
|
||||
"version": "1.0.0-r1",
|
||||
"filename": "secubox-app-tor_1.0.0-r1_all.ipk",
|
||||
"size": 7379,
|
||||
"size": 7382,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -870,7 +870,7 @@
|
||||
"name": "secubox-app-zigbee2mqtt",
|
||||
"version": "1.0.0-r3",
|
||||
"filename": "secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk",
|
||||
"size": 3542,
|
||||
"size": 3544,
|
||||
"category": "secubox",
|
||||
"icon": "package",
|
||||
"description": "SecuBox backend service",
|
||||
@ -892,9 +892,9 @@
|
||||
,
|
||||
{
|
||||
"name": "secubox-p2p",
|
||||
"version": "0.4.0-r1",
|
||||
"filename": "secubox-p2p_0.4.0-r1_all.ipk",
|
||||
"size": 27891,
|
||||
"version": "0.6.0-r1",
|
||||
"filename": "secubox-p2p_0.6.0-r1_all.ipk",
|
||||
"size": 40190,
|
||||
"category": "utility",
|
||||
"icon": "package",
|
||||
"description": "SecuBox package",
|
||||
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Loading…
Reference in New Issue
Block a user