From 937e57c3e7752af8f9583678944c4878688a13f5 Mon Sep 17 00:00:00 2001
From: CyberMind-FR <gandalf@Gk2.net>
Date: Wed, 7 Jan 2026 12:31:00 +0100
Subject: [PATCH] feat: Add default SecuBox configuration profiles (v0.6.0-r15)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Add home.profile.json: Residential setup with parental controls, media, smart home
- Add gateway.profile.json: Enterprise security with IDS/IPS, VPN, traffic analysis
- Add dmz.profile.json: Isolated DMZ for self-hosted services with reverse proxy
- Each profile includes recommended apps and network mode configuration

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
---
 .../share/secubox/profiles/dmz.profile.json    | 18 ++++++++++++++++++
 .../secubox/profiles/gateway.profile.json      | 18 ++++++++++++++++++
 .../share/secubox/profiles/home.profile.json   | 17 +++++++++++++++++
 3 files changed, 53 insertions(+)
 create mode 100644 package/secubox/secubox-core/root/usr/share/secubox/profiles/dmz.profile.json
 create mode 100644 package/secubox/secubox-core/root/usr/share/secubox/profiles/gateway.profile.json
 create mode 100644 package/secubox/secubox-core/root/usr/share/secubox/profiles/home.profile.json

diff --git a/package/secubox/secubox-core/root/usr/share/secubox/profiles/dmz.profile.json b/package/secubox/secubox-core/root/usr/share/secubox/profiles/dmz.profile.json
new file mode 100644
index 00000000..8c451c7b
--- /dev/null
+++ b/package/secubox/secubox-core/root/usr/share/secubox/profiles/dmz.profile.json
@@ -0,0 +1,18 @@
+{
+  "id": "gateway_dmz",
+  "name": "Gateway + DMZ",
+  "description": "Isolated DMZ network for self-hosted services with reverse proxy",
+  "network_mode": "dmz",
+  "apps": [
+    "luci-app-vhost-manager",
+    "secubox-app-nextcloud",
+    "secubox-app-vaultwarden",
+    "luci-app-crowdsec-dashboard"
+  ],
+  "features": {
+    "dmz_isolation": true,
+    "reverse_proxy": true,
+    "ssl_certificates": true,
+    "self_hosting": true
+  }
+}
diff --git a/package/secubox/secubox-core/root/usr/share/secubox/profiles/gateway.profile.json b/package/secubox/secubox-core/root/usr/share/secubox/profiles/gateway.profile.json
new file mode 100644
index 00000000..b172dca0
--- /dev/null
+++ b/package/secubox/secubox-core/root/usr/share/secubox/profiles/gateway.profile.json
@@ -0,0 +1,18 @@
+{
+  "id": "gateway",
+  "name": "Secure Gateway",
+  "description": "Enterprise-grade security with IDS/IPS, VPN, and traffic analysis",
+  "network_mode": "router",
+  "apps": [
+    "luci-app-crowdsec-dashboard",
+    "luci-app-wireguard-dashboard",
+    "luci-app-netifyd-dashboard",
+    "luci-app-bandwidth-manager"
+  ],
+  "features": {
+    "intrusion_detection": true,
+    "vpn": true,
+    "traffic_analysis": true,
+    "qos": true
+  }
+}
diff --git a/package/secubox/secubox-core/root/usr/share/secubox/profiles/home.profile.json b/package/secubox/secubox-core/root/usr/share/secubox/profiles/home.profile.json
new file mode 100644
index 00000000..d6d47d97
--- /dev/null
+++ b/package/secubox/secubox-core/root/usr/share/secubox/profiles/home.profile.json
@@ -0,0 +1,17 @@
+{
+  "id": "home",
+  "name": "Home Network",
+  "description": "Residential setup with parental controls, media streaming, and smart home integration",
+  "network_mode": "router",
+  "apps": [
+    "luci-app-client-guardian",
+    "luci-app-adguardhome",
+    "secubox-app-jellyfin",
+    "secubox-app-homeassistant"
+  ],
+  "features": {
+    "parental_controls": true,
+    "media_streaming": true,
+    "smart_home": true
+  }
+}