fix(zigbee2mqtt): Fix adapter type, config format, and add MQTT dependency

The z2m 2.x breaking changes required three fixes discovered during
live deployment testing on the router:
- Adapter renamed from `ezsp` to `ember` in zigbee-herdsman 4.0.0
- Config format needs `version: 4` and nested `homeassistant.enabled`
- Start script needs `ZIGBEE2MQTT_DATA` env var for correct config path
- Add `mosquitto-nossl` as package dependency (MQTT broker required)
- Direct `/dev/ttyUSB0` passthrough works; socat TCP bridge does not

Also updates project planning files (HISTORY.md, TODO.md, WIP.md,
CLAUDE.md) and rebuilds bonus feed with latest IPKs.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.claude/HISTORY.md

@@ -1,6 +1,6 @@
 # SecuBox UI & Theme History
 
-_Last updated: 2026-01-27_
+_Last updated: 2026-02-04_
 
 1. **Unified Dashboard Refresh (2025-12-20)**  
    - Dashboard received the "sh-page-header" layout, hero stats, and SecuNav top tabs.  
@@ -48,3 +48,87 @@ _Last updated: 2026-01-27_
     - README.md updated to v0.16.0 with all 38 modules categorized.
     - Added build requirement table distinguishing SDK vs toolchain builds.
     - secubox-tools/README.md updated to v1.1.0 with SDK vs toolchain guidance.
+
+11. **Service Registry & HAProxy ACME v0.15.0 (2026-01-28)**
+    - `service-registry`: Unified service aggregation dashboard with dynamic health checks, URL readiness wizard, public IP detection, and external port checks.
+    - `haproxy`: Webroot ACME mode (no HAProxy restart), async cert workflow, auto-open firewall when publishing.
+    - Menu reorganization: CrowdSec, Threat Monitor, Network Diagnostics, WireGuard all moved to LuCI Services menu.
+    - `tor-shield`: Exit node hostname (reverse DNS), presets with immediate activation, excluded destinations for CDN/direct, master protection switch.
+    - `network-tweaks`: AdGuard Home DNS control, CDN cache and WPAD proxy controls, cumulative impact counters for HAProxy vhosts/LXC/firewall.
+    - `client-guardian`: Safe defaults, emergency clear, and safety limits.
+    - `metablogizer`: Improved site creation and HAProxy integration.
+    - Portal: HTTP health checks and speedtest integration.
+    - CrowdSec: Dynamic LAPI port detection.
+    - 30 commits, 15 feat / 12 fix / 3 refactor.
+
+12. **App Store KISS Evolution & Dependency Cleanup (2026-01-29)**
+    - Renamed `luci-app-secubox-bonus` to `secubox-app-bonus` (feeds-based architecture).
+    - Implemented KISS Evolution for app store: feeds, profiles, skills, feedback system.
+    - Stripped all libc/libubox/libubus/libuci dependencies from SecuBox packages.
+    - Added `PKG_FLAGS:=nonshared` to prevent automatic libc dependency injection.
+
+13. **P2P Hub & SecuBox Console (2026-01-30)**
+    - `secubox-p2p`: Full P2P Hub with globe peer visualization, Hub Registry, Services Registry, parallel component sources, auto-self mesh, master deployment, DNS bridge, WireGuard mirror, Gitea repository creation, mesh backup, test cloning, gigogne distribution mode, and mDNS service publishing.
+    - `secubox-console`: Linux host TUI frontend with CLI tools lexical reference.
+    - `cdn-cache`: Added MITM SSL bump support for HTTPS caching.
+    - `metablogizer`: Tor hidden service integration, DNS resolution fixes, permissions fixes.
+    - `streamlit`: ZIP upload with selective tree extraction.
+    - `crowdsec-dashboard`: Extensible theming system (later removed), UCI ubus permissions.
+    - `secubox-core`: P2P Hub API and wizard-first menu.
+    - `secubox-app-bonus`: Added `secubox-feed install all` command.
+    - 40+ commits — largest single-day effort in project history.
+
+14. **P2P MirrorBox & Factory Dashboard (2026-01-31)**
+    - `secubox-p2p` v0.6.0: MirrorBox NetMesh Catalog with DNS federation, distributed mesh services panel, WAN IP and WireGuard tunnel redundancy, mDNS service publishing, REST API for mesh visibility.
+    - `secubox-factory`: Unified dashboard with signed Merkle snapshots and HMAC-style signing for OpenWrt compatibility.
+    - `portal`: KISS redesign with service categorization.
+    - `crowdsec-dashboard`: KISS rewrite, console enrollment, CrowdSec theme integration, dynamic port/path detection.
+    - `secubox-swiss`: Unified CLI tool for SecuBox operations.
+    - `jitsi`: Jitsi Meet video conferencing integration.
+    - `mitmproxy`: HAProxy backend inspection, token auth, enhanced threat detection analytics v2.0.
+    - `secubox-core`: P2P mesh API endpoints for console discovery.
+
+15. **KISS UI Rewrites & DNS Guard (2026-02-01)**
+    - `streamlit`: KISS UI redesign with instances management, Gitea integration, and multiple upload bug fixes.
+    - `metablogizer`: KISS UI redesign with backend status display.
+    - `ollama`: KISS UI rewrite with model suggestions and thermal monitoring.
+    - `netdiag`: Thermal monitoring integration.
+    - `dnsguard`: New DNS Guard app with provider lookup methods.
+    - `haproxy`: AdGuard Home detection, improved service discovery, reserved ports with listening verification.
+    - `p2p`: Distributed catalog with Gitea sync and health probing.
+    - `mitmproxy`: Enhanced threat patterns; moved to Security menu.
+    - `network-tweaks`: Moved to Network menu.
+    - `crowdsec-dashboard`: Nav path fixes, alerts/countries display fixes.
+    - `wireguard-dashboard`: QR code generation fix.
+    - `exposure`: Reserved ports with listening verification.
+
+16. **WAF Auto-Ban & Security Hardening (2026-02-02)**
+    - `waf`: Sensitivity-based auto-ban system with CrowdSec integration and comprehensive CVE detection patterns (including CVE-2025-15467).
+    - `mitmproxy`: WAN protection mode for incoming traffic inspection; LAN transparent proxy disabled by default.
+    - `simplex`: SimpleX Chat self-hosted messaging servers.
+    - `crowdsec`: KISS setup simplification, CAPI enrollment status, restored working setup page.
+    - `local-build`: Added missing toolchain package shorthands and feeds path fix.
+    - WAF auto-ban statistics added to dashboards.
+
+17. **Mesh Security & MAC Guardian (2026-02-03)**
+    - `mac-guardian`: New WiFi MAC security monitor with DHCP lease protection for odhcpd.
+    - `master-link`: Secure mesh onboarding with dynamic join IPK generation.
+    - `security-threats`: KISS rewrite with mesh threat intelligence, LXC mitmproxy detection.
+    - `p2p`: Decentralized threat intelligence sharing via mesh.
+    - `tor-shield`: Server mode for split-routing with public IP preservation.
+    - `wireguard-dashboard`: jshn bypass for QR code (argument size limit), peer private key persistence in UCI, server endpoint persistence.
+    - `localai`: gte-small preset, RPC expect unwrapping and chat JSON escaping fixes.
+    - `lyrion`: WAN access checkbox for firewall rules, networking fixes for device discovery.
+    - `tools`: SecuBox image builder and sysupgrade scripts.
+    - RPCD/LuCI frontend guidelines added to CLAUDE.md.
+    - KISS READMEs added for all 46 remaining packages.
+
+18. **New Packages & Exposure Redesign (2026-02-04)**
+    - `jellyfin`: New media server package with LXC container, uninstall/update/backup, HAProxy integration, and LuCI actions.
+    - `zigbee2mqtt`: Complete rewrite from Docker to LXC Alpine container.
+    - `device-intel`: New device intelligence package with OUI emoji display (BusyBox compatibility fixes, SDK build pattern alignment).
+    - `dns-provider`: New DNS provider management package.
+    - `exposure`: KISS redesign with enriched service names, vhost integration, DNS domain sorting; toggle switch fix.
+    - `streamlit`: Chunked upload to bypass uhttpd 64KB JSON limit, UTF-8 `.py` file upload fix, auto-install requirements from ZIP, non-standard filename support.
+    - `crowdsec-dashboard`: Decisions list fix (wrong RPC expect key).
+    - RPCD: BusyBox ash `local` keyword compatibility fix (wrap call handlers in function).

.claude/TODO.md

@@ -1,21 +1,43 @@
-# SecuBox UI TODOs (Claude Edition)
+# SecuBox TODOs (Claude Edition)
 
-1. **Theme Manager Enhancements**
-   - Expose cyberpunk option inside SecuBox Settings (currently dark/light/system only).
-   - Persist theme choice back to `/etc/config/secubox` and reflect instantly without refresh.
+_Last updated: 2026-02-04_
+
+## Resolved
+
+- ~~Expose cyberpunk option inside SecuBox Settings~~ — Done: `THEME_CHOICES` now includes `cyberpunk` in `settings.js`.
+
+## Open
+
+1. **Chip Header Layout Migration**
+   - Port `sh-page-header` + `renderHeaderChip()` pattern to client-guardian and auth-guardian.
+   - Both still use legacy header layouts (`cg-header`, `ag-hdr`).
 
 2. **Navigation Component**
    - Convert `SecuNav.renderTabs()` into a reusable LuCI widget (avoid duplicating `Theme.init` in each view).
    - Provide a compact variant for nested modules (e.g., CDN Cache, Network Modes).
 
 3. **Monitoring UX**
-   - Add empty-state copy while charts warm up.  
+   - Add empty-state copy while charts warm up.
    - Display bandwidth units dynamically (Kbps/Mbps/Gbps) based on rate.
 
-4. **Docs & Tooling**
-   - Document deployment scripts in `README.md` (what each script copies).  
+4. **MAC Guardian Feed Integration**
+   - Build and include mac-guardian IPK in bonus feed (new package from 2026-02-03, not yet in feed).
+
+5. **Mesh Onboarding Testing**
+   - master-link dynamic join IPK generation needs end-to-end testing on multi-node mesh.
+   - P2P decentralized threat intelligence sharing needs validation with real CrowdSec alerts.
+
+6. **WAF Auto-Ban Tuning**
+   - Sensitivity thresholds may need adjustment based on real traffic patterns.
+   - CVE detection patterns (including CVE-2025-15467) need false-positive analysis.
+
+7. **Image Builder Validation**
+   - `secubox-tools/` image builder and sysupgrade scripts (added 2026-02-03) need testing on physical hardware.
+
+8. **Docs & Tooling**
+   - Document deployment scripts in `README.md` (what each script copies).
    - Add lint/upload pre-check (LuCI `lua -l luci.dispatcher`) to prevent syntax errors before SCP.
 
-5. **Testing**
-   - Capture screenshot baselines for dark/light themes (use `secubox-tools/`?).  
+9. **Testing**
+   - Capture screenshot baselines for dark/light/cyberpunk themes.
    - Automate browser cache busting (append `?v=<git sha>` to view URLs).

.claude/WIP.md

@@ -2,24 +2,35 @@
 
 ## Active Threads
 
-- **SecuBox Nav Theme Support**  
-  Status: ✅ COMPLETE (2025-12-28)  
-  Notes: All view tabs now respect theme colors; monitoring menu cleaned up.
+- **Zigbee2mqtt LXC Rewrite**
+  Status: COMPLETE (2026-02-04)
+  Notes: Rewritten from Docker to LXC Alpine container. Feed rebuilt.
+  Deploy fix (2026-02-04): adapter `ezsp`→`ember` (z2m 2.x rename), added `ZIGBEE2MQTT_DATA` env var to start script, added `mosquitto-nossl` dependency. Direct `/dev/ttyUSB0` passthrough works; socat TCP bridge does NOT work (ASH RSTACK timeout).
 
-- **SecuBox v0.5.0-A polish**  
-  Status: ✅ COMPLETE (2025-12-29)  
-  Notes: Monitoring/Modules/Alerts/Help views now share the same navbar + chip headers; Help tab added globally.
+- **Jellyfin Media Server**
+  Status: COMPLETE (2026-02-04)
+  Notes: New secubox-app-jellyfin + luci-app-jellyfin with LXC, HAProxy integration, uninstall/update/backup.
 
-- **Backup/Restore UX Alignment**  
-  Status: ✅ COMPLETE  
-  Notes: System Hub header and restore flow updated; API now accepts `file_name`.
+- **Device Intel & DNS Provider**
+  Status: COMPLETE (2026-02-04)
+  Notes: New packages added. BusyBox compatibility, OUI emoji display, SDK build pattern aligned.
+
+- **Exposure KISS Redesign**
+  Status: COMPLETE (2026-02-04)
+  Notes: Enriched service names, vhost integration, DNS domain sorting, toggle switch fix.
+
+- **Streamlit Upload Fixes**
+  Status: COMPLETE (2026-02-04)
+  Notes: Chunked upload (uhttpd 64KB limit), UTF-8 fix, ZIP requirements auto-install, rename support.
 
 ## Next Up
 
-- Port the new chip header layout to remaining SecuBox derivative apps (client-guardian, auth-guardian).
-- Re-run deployment scripts on target routers after each batch to ensure consistency.
+- Port the chip header layout to remaining SecuBox derivative apps (client-guardian, auth-guardian) — still pending, neither has `sh-page-header` pattern.
+- Rebuild bonus feed with all 2026-02-04 changes (partially done — zigbee2mqtt and device-intel included, verify completeness).
+- Commit uncommitted working tree changes (bonus-feed IPKs, zigbee2mqttctl).
 
 ## Blockers / Risks
 
-- Theme manager still only exposes dark/light/system options in Settings UI. Cyberpunk mode exists but is hidden.
+- Cyberpunk theme is now exposed in Settings UI (dark/light/system/cyberpunk) — previous blocker resolved.
 - No automated regression tests for LuCI views; manual verification required after each SCP deploy.
+- `zigbee2mqttctl` has uncommitted changes in working tree.

.claude/settings.local.json

@@ -267,7 +267,10 @@
       "Bash(git mv:*)",
       "Bash(DISPLAY=:1 scrot:*)",
       "Bash(node -c:*)",
-      "Bash(/home/reepost/CyberMindStudio/secubox-openwrt/secubox-tools/local-build.sh:*)"
+      "Bash(/home/reepost/CyberMindStudio/secubox-openwrt/secubox-tools/local-build.sh:*)",
+      "Bash(do rsync -av --delete /home/reepost/CyberMindStudio/secubox-openwrt/package/secubox/$pkg/ /home/reepost/CyberMindStudio/secubox-openwrt/secubox-tools/local-feed/$pkg/)",
+      "Bash(do rsync -av --delete \"package/secubox/$pkg/\" \"secubox-tools/local-feed/$pkg/\")",
+      "Bash(xdg-open:*)"
     ]
   }
 }

CLAUDE.md

@@ -1,5 +1,17 @@
 # Claude Instructions for SecuBox OpenWrt
 
+## Session Startup — Follow the Roadmap
+
+**Before starting any work, always read the project planning files to understand current priorities and context:**
+
+1. `.claude/TODO.md` — Open tasks and backlog, ordered by priority
+2. `.claude/WIP.md` — Active threads, next-up items, and blockers
+3. `.claude/HISTORY.md` — Completed milestones with dates (gap analysis reference)
+4. `.claude/context.md` — Module map, stack overview, and templates
+5. `package/secubox/PUNK-EXPOSURE.md` — Architectural spec for exposure features
+
+**When the user says "continue" or "next"**, consult WIP.md "Next Up" and TODO.md "Open" to pick the next task. When completing work, update these files to keep them current. New features and fixes must be appended to HISTORY.md with the date.
+
 ## OpenWrt Shell Scripting Guidelines
 
 ### Process Detection

package/secubox/secubox-app-bonus/root/www/secubox-feed/Packages

@@ -8,7 +8,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Comprehensive authentication and session management with captive portal, OAuth2/OIDC integration, voucher system, and time-based access control
 Filename: luci-app-auth-guardian_0.4.0-r3_all.ipk
-Size: 11738
+Size: 11736
 
 Package: luci-app-bandwidth-manager
 Version: 0.5.0-r2
@@ -20,7 +20,7 @@ Architecture: all
 Installed-Size: 337920
 Description:  Advanced bandwidth management with QoS rules, client quotas, and SQM integration
 Filename: luci-app-bandwidth-manager_0.5.0-r2_all.ipk
-Size: 61539
+Size: 61538
 
 Package: luci-app-cdn-cache
 Version: 0.5.0-r3
@@ -32,7 +32,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Dashboard for managing local CDN caching proxy on OpenWrt
 Filename: luci-app-cdn-cache_0.5.0-r3_all.ipk
-Size: 23182
+Size: 23185
 
 Package: luci-app-client-guardian
 Version: 0.4.0-r7
@@ -68,7 +68,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Cyberpunk-themed RSS feed aggregator dashboard with social media support
 Filename: luci-app-cyberfeed_0.1.1-r1_all.ipk
-Size: 12840
+Size: 12838
 
 Package: luci-app-device-intel
 Version: 1.0.0-r1
@@ -80,7 +80,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  LuCI SecuBox Device Intelligence
 Filename: luci-app-device-intel_1.0.0-r1_all.ipk
-Size: 10858
+Size: 10859
 
 Package: luci-app-dnsguard
 Version: 1.0.0-r1
@@ -91,7 +91,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  SecuBox DNS Guard - Privacy DNS Manager
 Filename: luci-app-dnsguard_1.0.0-r1_all.ipk
-Size: 7550
+Size: 7549
 
 Package: luci-app-dns-provider
 Version: 1.0.0-r1
@@ -103,7 +103,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI DNS Provider Manager
 Filename: luci-app-dns-provider_1.0.0-r1_all.ipk
-Size: 7125
+Size: 7129
 
 Package: luci-app-exposure
 Version: 1.0.0-r3
@@ -115,7 +115,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  LuCI SecuBox Service Exposure Manager
 Filename: luci-app-exposure_1.0.0-r3_all.ipk
-Size: 9839
+Size: 9840
 
 Package: luci-app-gitea
 Version: 1.0.0-r2
@@ -127,7 +127,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Modern dashboard for Gitea Platform management on OpenWrt
 Filename: luci-app-gitea_1.0.0-r2_all.ipk
-Size: 15299
+Size: 15298
 
 Package: luci-app-glances
 Version: 1.0.0-r2
@@ -139,7 +139,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  Modern dashboard for Glances system monitoring with SecuBox theme
 Filename: luci-app-glances_1.0.0-r2_all.ipk
-Size: 6965
+Size: 6966
 
 Package: luci-app-haproxy
 Version: 1.0.0-r8
@@ -151,7 +151,7 @@ Architecture: all
 Installed-Size: 204800
 Description:  Web interface for managing HAProxy load balancer with vhosts, SSL certificates, and backend routing
 Filename: luci-app-haproxy_1.0.0-r8_all.ipk
-Size: 34561
+Size: 34560
 
 Package: luci-app-hexojs
 Version: 1.0.0-r3
@@ -163,7 +163,7 @@ Architecture: all
 Installed-Size: 184320
 Description:  Modern dashboard for Hexo static site generator on OpenWrt
 Filename: luci-app-hexojs_1.0.0-r3_all.ipk
-Size: 30307
+Size: 30304
 
 Package: luci-app-jellyfin
 Version: 1.0.0-r1
@@ -175,7 +175,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI Jellyfin Media Server Configuration
 Filename: luci-app-jellyfin_1.0.0-r1_all.ipk
-Size: 6062
+Size: 6061
 
 Package: luci-app-jitsi
 Version: 1.0.0-r1
@@ -187,7 +187,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI Jitsi Meet Configuration
 Filename: luci-app-jitsi_1.0.0-r1_all.ipk
-Size: 5135
+Size: 5137
 
 Package: luci-app-ksm-manager
 Version: 0.4.0-r2
@@ -199,7 +199,7 @@ Architecture: all
 Installed-Size: 112640
 Description:  Centralized cryptographic key management with hardware security module (HSM) support for Nitrokey and YubiKey devices. Provides secure key storage, certificate management, SSH key handling, and secret storage with audit logging.
 Filename: luci-app-ksm-manager_0.4.0-r2_all.ipk
-Size: 18721
+Size: 18724
 
 Package: luci-app-localai
 Version: 0.1.0-r15
@@ -211,7 +211,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Modern dashboard for LocalAI LLM management on OpenWrt
 Filename: luci-app-localai_0.1.0-r15_all.ipk
-Size: 13179
+Size: 13182
 
 Package: luci-app-lyrion
 Version: 1.0.0-r1
@@ -223,7 +223,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI support for Lyrion Music Server
 Filename: luci-app-lyrion_1.0.0-r1_all.ipk
-Size: 6724
+Size: 6726
 
 Package: luci-app-magicmirror2
 Version: 0.4.0-r6
@@ -235,7 +235,7 @@ Architecture: all
 Installed-Size: 71680
 Description:  Modern dashboard for MagicMirror2 smart display platform with module manager and SecuBox theme
 Filename: luci-app-magicmirror2_0.4.0-r6_all.ipk
-Size: 12278
+Size: 12277
 
 Package: luci-app-mailinabox
 Version: 1.0.0-r1
@@ -247,7 +247,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Mail-in-a-Box
 Filename: luci-app-mailinabox_1.0.0-r1_all.ipk
-Size: 5479
+Size: 5485
 
 Package: luci-app-master-link
 Version: 1.0.0-r1
@@ -259,7 +259,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI SecuBox Master-Link Mesh Management
 Filename: luci-app-master-link_1.0.0-r1_all.ipk
-Size: 6249
+Size: 6247
 
 Package: luci-app-media-flow
 Version: 0.6.4-r1
@@ -271,7 +271,7 @@ Architecture: all
 Installed-Size: 133120
 Description:  Real-time detection and monitoring of streaming services (Netflix, YouTube, Spotify, etc.) with quality estimation, history tracking, and alerts. Supports nDPId local DPI and netifyd.
 Filename: luci-app-media-flow_0.6.4-r1_all.ipk
-Size: 25415
+Size: 25416
 
 Package: luci-app-metablogizer
 Version: 1.0.0-r5
@@ -283,7 +283,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  LuCI support for MetaBlogizer Static Site Publisher
 Filename: luci-app-metablogizer_1.0.0-r5_all.ipk
-Size: 23345
+Size: 23346
 
 Package: luci-app-metabolizer
 Version: 1.0.0-r2
@@ -295,7 +295,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Metabolizer CMS
 Filename: luci-app-metabolizer_1.0.0-r2_all.ipk
-Size: 4756
+Size: 4757
 
 Package: luci-app-mitmproxy
 Version: 0.5.0-r2
@@ -307,7 +307,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  Modern dashboard for mitmproxy HTTPS traffic inspection with SecuBox theme
 Filename: luci-app-mitmproxy_0.5.0-r2_all.ipk
-Size: 11149
+Size: 11150
 
 Package: luci-app-mmpm
 Version: 0.2.0-r3
@@ -319,7 +319,7 @@ Architecture: all
 Installed-Size: 51200
 Description:  Web interface for MMPM - MagicMirror Package Manager
 Filename: luci-app-mmpm_0.2.0-r3_all.ipk
-Size: 7898
+Size: 7904
 
 Package: luci-app-mqtt-bridge
 Version: 0.4.0-r4
@@ -331,7 +331,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  USB-to-MQTT IoT hub with SecuBox theme
 Filename: luci-app-mqtt-bridge_0.4.0-r4_all.ipk
-Size: 22776
+Size: 22780
 
 Package: luci-app-ndpid
 Version: 1.1.2-r2
@@ -355,7 +355,7 @@ Architecture: all
 Installed-Size: 112640
 Description:  Real-time system monitoring dashboard with Netdata integration for OpenWrt
 Filename: luci-app-netdata-dashboard_0.5.0-r2_all.ipk
-Size: 20485
+Size: 20488
 
 Package: luci-app-network-modes
 Version: 0.5.0-r3
@@ -379,7 +379,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Unified network services dashboard with DNS/hosts sync, CDN cache control, and WPAD auto-proxy configuration
 Filename: luci-app-network-tweaks_1.0.0-r7_all.ipk
-Size: 14963
+Size: 14960
 
 Package: luci-app-nextcloud
 Version: 1.0.0-r1
@@ -391,7 +391,7 @@ Architecture: all
 Installed-Size: 30720
 Description:  LuCI support for Nextcloud
 Filename: luci-app-nextcloud_1.0.0-r1_all.ipk
-Size: 6490
+Size: 6488
 
 Package: luci-app-ollama
 Version: 0.1.0-r1
@@ -403,7 +403,7 @@ Architecture: all
 Installed-Size: 61440
 Description:  Modern dashboard for Ollama LLM management on OpenWrt
 Filename: luci-app-ollama_0.1.0-r1_all.ipk
-Size: 12352
+Size: 12354
 
 Package: luci-app-picobrew
 Version: 1.0.0-r1
@@ -415,7 +415,7 @@ Architecture: all
 Installed-Size: 51200
 Description:  Modern dashboard for PicoBrew Server management on OpenWrt
 Filename: luci-app-picobrew_1.0.0-r1_all.ipk
-Size: 9460
+Size: 9458
 
 Package: luci-app-secubox
 Version: 0.7.1-r4
@@ -427,7 +427,7 @@ Architecture: all
 Installed-Size: 419840
 Description:  Central control hub for all SecuBox modules. Provides unified dashboard, module status, system health monitoring, and quick actions.
 Filename: luci-app-secubox_0.7.1-r4_all.ipk
-Size: 77681
+Size: 77676
 
 Package: luci-app-secubox-admin
 Version: 1.0.0-r19
@@ -438,7 +438,7 @@ Architecture: all
 Installed-Size: 337920
 Description:  Unified admin control center for SecuBox appstore plugins with system monitoring
 Filename: luci-app-secubox-admin_1.0.0-r19_all.ipk
-Size: 57247
+Size: 57246
 
 Package: luci-app-secubox-crowdsec
 Version: 1.0.0-r3
@@ -450,7 +450,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  LuCI SecuBox CrowdSec Dashboard
 Filename: luci-app-secubox-crowdsec_1.0.0-r3_all.ipk
-Size: 13921
+Size: 13920
 
 Package: luci-app-secubox-netdiag
 Version: 1.0.0-r1
@@ -462,7 +462,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Real-time DSA switch port statistics, error monitoring, and network health diagnostics
 Filename: luci-app-secubox-netdiag_1.0.0-r1_all.ipk
-Size: 15305
+Size: 15306
 
 Package: luci-app-secubox-netifyd
 Version: 1.2.1-r1
@@ -474,7 +474,7 @@ Architecture: all
 Installed-Size: 194560
 Description:  Complete LuCI interface for netifyd DPI engine with real-time flow monitoring, application detection, network analytics, and flow action plugins
 Filename: luci-app-secubox-netifyd_1.2.1-r1_all.ipk
-Size: 36541
+Size: 36540
 
 Package: luci-app-secubox-p2p
 Version: 0.1.0-r1
@@ -498,7 +498,7 @@ Architecture: all
 Installed-Size: 122880
 Description:  Unified entry point for all SecuBox applications with tabbed navigation
 Filename: luci-app-secubox-portal_0.7.0-r2_all.ipk
-Size: 24643
+Size: 24644
 
 Package: luci-app-secubox-security-threats
 Version: 1.0.0-r4
@@ -510,7 +510,7 @@ Architecture: all
 Installed-Size: 102400
 Description:  Unified dashboard integrating netifyd DPI threats with CrowdSec intelligence for real-time threat monitoring and automated blocking
 Filename: luci-app-secubox-security-threats_1.0.0-r4_all.ipk
-Size: 21899
+Size: 21896
 
 Package: luci-app-service-registry
 Version: 1.0.0-r1
@@ -534,7 +534,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  LuCI SimpleX Chat Server Configuration
 Filename: luci-app-simplex_1.0.0-r1_all.ipk
-Size: 7001
+Size: 6997
 
 Package: luci-app-streamlit
 Version: 1.0.0-r11
@@ -558,7 +558,7 @@ Architecture: all
 Installed-Size: 317440
 Description:  Central system control with monitoring, services, logs, and backup
 Filename: luci-app-system-hub_0.5.1-r4_all.ipk
-Size: 61106
+Size: 61105
 
 Package: luci-app-tor-shield
 Version: 1.0.0-r10
@@ -582,7 +582,7 @@ Architecture: all
 Installed-Size: 81920
 Description:  Advanced traffic shaping with TC/CAKE for precise bandwidth control
 Filename: luci-app-traffic-shaper_0.4.0-r2_all.ipk
-Size: 14531
+Size: 14533
 
 Package: luci-app-vhost-manager
 Version: 0.5.0-r5
@@ -594,7 +594,7 @@ Architecture: all
 Installed-Size: 153600
 Description:  Nginx reverse proxy manager with Let's Encrypt SSL certificates, authentication, and WebSocket support
 Filename: luci-app-vhost-manager_0.5.0-r5_all.ipk
-Size: 26184
+Size: 26187
 
 Package: luci-app-wireguard-dashboard
 Version: 0.7.0-r5
@@ -606,7 +606,7 @@ Architecture: all
 Installed-Size: 204800
 Description:  Modern dashboard for WireGuard VPN monitoring on OpenWrt
 Filename: luci-app-wireguard-dashboard_0.7.0-r5_all.ipk
-Size: 39607
+Size: 39608
 
 Package: luci-app-zigbee2mqtt
 Version: 1.0.0-r2
@@ -618,7 +618,7 @@ Architecture: all
 Installed-Size: 40960
 Description:  Graphical interface for managing the Zigbee2MQTT docker application.
 Filename: luci-app-zigbee2mqtt_1.0.0-r2_all.ipk
-Size: 6812
+Size: 6814
 
 Package: luci-theme-secubox
 Version: 0.4.7-r1
@@ -641,7 +641,7 @@ Installed-Size: 92160
 Description:  Command line helper for SecuBox App Store manifests. Installs /usr/sbin/secubox-app
  and ships the default manifests under /usr/share/secubox/plugins/.
 Filename: secubox-app_1.0.0-r2_all.ipk
-Size: 11184
+Size: 11186
 
 Package: secubox-app-adguardhome
 Version: 1.0.0-r2
@@ -655,7 +655,7 @@ Description:  Installer, configuration, and service manager for running AdGuard
  inside Docker on SecuBox-powered OpenWrt systems. Network-wide ad blocker
  with DNS-over-HTTPS/TLS support and detailed analytics.
 Filename: secubox-app-adguardhome_1.0.0-r2_all.ipk
-Size: 2880
+Size: 2884
 
 Package: secubox-app-auth-logger
 Version: 1.2.2-r1
@@ -673,7 +673,7 @@ Description:  Logs authentication failures from LuCI/rpcd and Dropbear SSH
  - JavaScript hook to intercept login failures
  - CrowdSec parser and bruteforce scenario
 Filename: secubox-app-auth-logger_1.2.2-r1_all.ipk
-Size: 9380
+Size: 9376
 
 Package: secubox-app-crowdsec-custom
 Version: 1.1.0-r1
@@ -696,7 +696,7 @@ Description:  Custom CrowdSec configurations for SecuBox web interface protectio
  - Webapp generic auth bruteforce protection
  - Whitelist for trusted networks
 Filename: secubox-app-crowdsec-custom_1.1.0-r1_all.ipk
-Size: 5762
+Size: 5764
 
 Package: secubox-app-cs-firewall-bouncer
 Version: 0.0.31-r4
@@ -737,7 +737,7 @@ Description:  Cyberpunk-themed RSS feed aggregator for OpenWrt/SecuBox.
  Features emoji injection, neon styling, and RSS-Bridge support
  for social media feeds (Facebook, Twitter, Mastodon).
 Filename: secubox-app-cyberfeed_0.2.1-r1_all.ipk
-Size: 12453
+Size: 12452
 
 Package: secubox-app-device-intel
 Version: 1.0.0-r1
@@ -765,7 +765,7 @@ Description:  Programmatic DNS record management via provider APIs (OVH, Gandi
  Cloudflare). Provides the dnsctl CLI for record CRUD, zone sync
  DNS propagation verification, and ACME DNS-01 challenge support.
 Filename: secubox-app-dns-provider_1.0.0-r1_all.ipk
-Size: 5591
+Size: 5588
 
 Package: secubox-app-domoticz
 Version: 1.0.0-r2
@@ -778,7 +778,7 @@ Installed-Size: 10240
 Description:  Installer, configuration, and service manager for running Domoticz
  inside Docker on SecuBox-powered OpenWrt systems.
 Filename: secubox-app-domoticz_1.0.0-r2_all.ipk
-Size: 2546
+Size: 2548
 
 Package: secubox-app-exposure
 Version: 1.0.0-r1
@@ -793,7 +793,7 @@ Description:  Unified service exposure manager for SecuBox.
  - Dynamic Tor hidden service management
  - HAProxy SSL reverse proxy configuration
 Filename: secubox-app-exposure_1.0.0-r1_all.ipk
-Size: 6931
+Size: 6933
 
 Package: secubox-app-gitea
 Version: 1.0.0-r5
@@ -816,7 +816,7 @@ Description:  Gitea Git Platform - Self-hosted lightweight Git service
  Runs in LXC container with Alpine Linux.
  Configure in /etc/config/gitea.
 Filename: secubox-app-gitea_1.0.0-r5_all.ipk
-Size: 9403
+Size: 9408
 
 Package: secubox-app-glances
 Version: 1.0.0-r1
@@ -839,7 +839,7 @@ Description:  Glances - Cross-platform system monitoring tool for SecuBox.
  Runs in LXC container for isolation and security.
  Configure in /etc/config/glances.
 Filename: secubox-app-glances_1.0.0-r1_all.ipk
-Size: 5535
+Size: 5542
 
 Package: secubox-app-haproxy
 Version: 1.0.0-r23
@@ -859,7 +859,7 @@ Description:  HAProxy load balancer and reverse proxy running in an LXC containe
  - Stats dashboard
  - Rate limiting and ACLs
 Filename: secubox-app-haproxy_1.0.0-r23_all.ipk
-Size: 15686
+Size: 15683
 
 Package: secubox-app-hexojs
 Version: 1.0.0-r8
@@ -883,7 +883,7 @@ Description:  Hexo CMS - Self-hosted static blog generator for OpenWrt
  Runs in LXC container with Alpine Linux.
  Configure in /etc/config/hexojs.
 Filename: secubox-app-hexojs_1.0.0-r8_all.ipk
-Size: 94932
+Size: 94939
 
 Package: secubox-app-jellyfin
 Version: 1.0.0-r1
@@ -897,7 +897,7 @@ Description:  Installer, configuration, and service manager for running Jellyfin
  inside Docker on SecuBox-powered OpenWrt systems. Free media server
  for streaming movies, TV shows, music, and photos.
 Filename: secubox-app-jellyfin_1.0.0-r1_all.ipk
-Size: 6177
+Size: 6180
 
 Package: secubox-app-jitsi
 Version: 1.0.0-r1
@@ -922,7 +922,7 @@ Description:  Jitsi Meet - Secure, fully featured video conferencing for SecuBox
  Integrates with HAProxy for SSL termination.
  Configure in /etc/config/jitsi.
 Filename: secubox-app-jitsi_1.0.0-r1_all.ipk
-Size: 8912
+Size: 8914
 
 Package: secubox-app-localai
 Version: 2.25.0-r1
@@ -944,7 +944,7 @@ Description:  LocalAI native binary package for OpenWrt.
  
  API: http://<router-ip>:8081/v1
 Filename: secubox-app-localai_2.25.0-r1_all.ipk
-Size: 5712
+Size: 5723
 
 Package: secubox-app-localai-wb
 Version: 2.25.0-r1
@@ -968,7 +968,7 @@ Description:  LocalAI native binary package for OpenWrt.
  
  API: http://<router-ip>:8080/v1
 Filename: secubox-app-localai-wb_2.25.0-r1_all.ipk
-Size: 7945
+Size: 7950
 
 Package: secubox-app-lyrion
 Version: 2.0.2-r1
@@ -988,7 +988,7 @@ Description:  Lyrion Media Server (formerly Logitech Media Server / Squeezebox S
  Auto-detects available runtime, preferring LXC for lower resource usage.
  Configure runtime in /etc/config/lyrion.
 Filename: secubox-app-lyrion_2.0.2-r1_all.ipk
-Size: 7287
+Size: 7281
 
 Package: secubox-app-magicmirror2
 Version: 0.4.0-r8
@@ -1010,7 +1010,7 @@ Description:  MagicMirror² - Open source modular smart mirror platform for Secu
  Runs in LXC container for isolation and security.
  Configure in /etc/config/magicmirror2.
 Filename: secubox-app-magicmirror2_0.4.0-r8_all.ipk
-Size: 9251
+Size: 9249
 
 Package: secubox-app-mailinabox
 Version: 2.0.0-r1
@@ -1035,7 +1035,7 @@ Description:  Complete email server solution using docker-mailserver for SecuBox
  
  Commands: mailinaboxctl --help
 Filename: secubox-app-mailinabox_2.0.0-r1_all.ipk
-Size: 7572
+Size: 7570
 
 Package: secubox-app-metabolizer
 Version: 1.0.0-r3
@@ -1083,7 +1083,7 @@ Description:  mitmproxy - Interactive HTTPS proxy for SecuBox-powered OpenWrt sy
  Runs in LXC container for isolation and security.
  Configure in /etc/config/mitmproxy.
 Filename: secubox-app-mitmproxy_0.5.0-r19_all.ipk
-Size: 22955
+Size: 22957
 
 Package: secubox-app-mmpm
 Version: 0.2.0-r5
@@ -1104,7 +1104,7 @@ Description:  MMPM (MagicMirror Package Manager) for SecuBox.
  
  Runs inside the MagicMirror2 LXC container.
 Filename: secubox-app-mmpm_0.2.0-r5_all.ipk
-Size: 3980
+Size: 3981
 
 Package: secubox-app-nextcloud
 Version: 1.0.0-r2
@@ -1118,7 +1118,7 @@ Description:  Installer, configuration, and service manager for running Nextclou
  inside Docker on SecuBox-powered OpenWrt systems. Self-hosted file
  sync and share with calendar, contacts, and collaboration.
 Filename: secubox-app-nextcloud_1.0.0-r2_all.ipk
-Size: 2955
+Size: 2959
 
 Package: secubox-app-ollama
 Version: 0.1.0-r1
@@ -1140,7 +1140,7 @@ Description:  Ollama - Simple local LLM runtime for SecuBox-powered OpenWrt syst
  Runs in Docker/Podman container.
  Configure in /etc/config/ollama.
 Filename: secubox-app-ollama_0.1.0-r1_all.ipk
-Size: 5732
+Size: 5740
 
 Package: secubox-app-picobrew
 Version: 1.0.0-r7
@@ -1162,7 +1162,7 @@ Description:  PicoBrew Server - Self-hosted brewing controller for PicoBrew devi
  Runs in LXC container with Python/Flask backend.
  Configure in /etc/config/picobrew.
 Filename: secubox-app-picobrew_1.0.0-r7_all.ipk
-Size: 5541
+Size: 5539
 
 Package: secubox-app-simplex
 Version: 1.0.0-r1
@@ -1186,7 +1186,7 @@ Description:  SimpleX Chat self-hosted messaging infrastructure for SecuBox.
  Privacy-first messaging relay that you control.
  Configure in /etc/config/simplex.
 Filename: secubox-app-simplex_1.0.0-r1_all.ipk
-Size: 9229
+Size: 9227
 
 Package: secubox-app-streamlit
 Version: 1.0.0-r5
@@ -1213,7 +1213,7 @@ Description:  Streamlit App Platform - Self-hosted Python data app platform
  
  Configure in /etc/config/streamlit.
 Filename: secubox-app-streamlit_1.0.0-r5_all.ipk
-Size: 11719
+Size: 11722
 
 Package: secubox-app-tor
 Version: 1.0.0-r1
@@ -1236,7 +1236,7 @@ Description:  SecuBox Tor Shield - One-click Tor anonymization for OpenWrt
  
  Configure in /etc/config/tor-shield.
 Filename: secubox-app-tor_1.0.0-r1_all.ipk
-Size: 7366
+Size: 7372
 
 Package: secubox-app-webapp
 Version: 1.5.0-r7
@@ -1254,7 +1254,7 @@ Description:  SecuBox Control Center Dashboard - A web-based dashboard for monit
  - Service management
  - Network interface control
 Filename: secubox-app-webapp_1.5.0-r7_all.ipk
-Size: 39170
+Size: 39177
 
 Package: secubox-app-zigbee2mqtt
 Version: 1.0.0-r3
@@ -1267,7 +1267,7 @@ Installed-Size: 20480
 Description:  Installer, configuration, and service manager for running Zigbee2MQTT
  inside an Alpine LXC container on SecuBox-powered OpenWrt systems.
 Filename: secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk
-Size: 5505
+Size: 5509
 
 Package: secubox-core
 Version: 0.10.0-r11
@@ -1287,7 +1287,7 @@ Description:  SecuBox Core Framework provides the foundational infrastructure fo
  - Unified CLI interface
  - ubus RPC backend
 Filename: secubox-core_0.10.0-r11_all.ipk
-Size: 87973
+Size: 87977
 
 Package: secubox-master-link
 Version: 1.0.0-r1
@@ -1309,7 +1309,7 @@ Description:  Secure mesh onboarding for SecuBox nodes via master/peer link.
  
  Configure in /etc/config/master-link.
 Filename: secubox-master-link_1.0.0-r1_all.ipk
-Size: 12450
+Size: 12446
 
 Package: secubox-p2p
 Version: 0.6.0-r3
@@ -1328,5 +1328,5 @@ Description:  SecuBox P2P Hub backend providing peer discovery, mesh networking
  and MirrorBox NetMesh Catalog for cross-chain distributed service
  registry with HAProxy vhost discovery and multi-endpoint access URLs.
 Filename: secubox-p2p_0.6.0-r3_all.ipk
-Size: 42011
+Size: 42021
 

package/secubox/secubox-app-bonus/root/www/secubox-feed/apps-local.json

@@ -1,12 +1,12 @@
 {
   "feed_url": "/secubox-feed",
-  "generated": "2026-02-04T18:29:27+01:00",
+  "generated": "2026-02-04T18:37:01+01:00",
   "packages": [
     {
       "name": "luci-app-auth-guardian",
       "version": "0.4.0-r3",
       "filename": "luci-app-auth-guardian_0.4.0-r3_all.ipk",
-      "size": 11738,
+      "size": 11736,
       "category": "security",
       "icon": "key",
       "description": "Authentication management",
@@ -18,7 +18,7 @@
       "name": "luci-app-bandwidth-manager",
       "version": "0.5.0-r2",
       "filename": "luci-app-bandwidth-manager_0.5.0-r2_all.ipk",
-      "size": 61539,
+      "size": 61538,
       "category": "network",
       "icon": "activity",
       "description": "Bandwidth monitoring and control",
@@ -30,7 +30,7 @@
       "name": "luci-app-cdn-cache",
       "version": "0.5.0-r3",
       "filename": "luci-app-cdn-cache_0.5.0-r3_all.ipk",
-      "size": 23182,
+      "size": 23185,
       "category": "network",
       "icon": "globe",
       "description": "CDN caching",
@@ -66,7 +66,7 @@
       "name": "luci-app-cyberfeed",
       "version": "0.1.1-r1",
       "filename": "luci-app-cyberfeed_0.1.1-r1_all.ipk",
-      "size": 12840,
+      "size": 12838,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -78,7 +78,7 @@
       "name": "luci-app-device-intel",
       "version": "1.0.0-r1",
       "filename": "luci-app-device-intel_1.0.0-r1_all.ipk",
-      "size": 10858,
+      "size": 10859,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -90,7 +90,7 @@
       "name": "luci-app-dnsguard",
       "version": "1.0.0-r1",
       "filename": "luci-app-dnsguard_1.0.0-r1_all.ipk",
-      "size": 7550,
+      "size": 7549,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -102,7 +102,7 @@
       "name": "luci-app-dns-provider",
       "version": "1.0.0-r1",
       "filename": "luci-app-dns-provider_1.0.0-r1_all.ipk",
-      "size": 7125,
+      "size": 7129,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -114,7 +114,7 @@
       "name": "luci-app-exposure",
       "version": "1.0.0-r3",
       "filename": "luci-app-exposure_1.0.0-r3_all.ipk",
-      "size": 9839,
+      "size": 9840,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -126,7 +126,7 @@
       "name": "luci-app-gitea",
       "version": "1.0.0-r2",
       "filename": "luci-app-gitea_1.0.0-r2_all.ipk",
-      "size": 15299,
+      "size": 15298,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -138,7 +138,7 @@
       "name": "luci-app-glances",
       "version": "1.0.0-r2",
       "filename": "luci-app-glances_1.0.0-r2_all.ipk",
-      "size": 6965,
+      "size": 6966,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -150,7 +150,7 @@
       "name": "luci-app-haproxy",
       "version": "1.0.0-r8",
       "filename": "luci-app-haproxy_1.0.0-r8_all.ipk",
-      "size": 34561,
+      "size": 34560,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -162,7 +162,7 @@
       "name": "luci-app-hexojs",
       "version": "1.0.0-r3",
       "filename": "luci-app-hexojs_1.0.0-r3_all.ipk",
-      "size": 30307,
+      "size": 30304,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -174,7 +174,7 @@
       "name": "luci-app-jellyfin",
       "version": "1.0.0-r1",
       "filename": "luci-app-jellyfin_1.0.0-r1_all.ipk",
-      "size": 6062,
+      "size": 6061,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -186,7 +186,7 @@
       "name": "luci-app-jitsi",
       "version": "1.0.0-r1",
       "filename": "luci-app-jitsi_1.0.0-r1_all.ipk",
-      "size": 5135,
+      "size": 5137,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -198,7 +198,7 @@
       "name": "luci-app-ksm-manager",
       "version": "0.4.0-r2",
       "filename": "luci-app-ksm-manager_0.4.0-r2_all.ipk",
-      "size": 18721,
+      "size": 18724,
       "category": "system",
       "icon": "cpu",
       "description": "Kernel memory management",
@@ -210,7 +210,7 @@
       "name": "luci-app-localai",
       "version": "0.1.0-r15",
       "filename": "luci-app-localai_0.1.0-r15_all.ipk",
-      "size": 13179,
+      "size": 13182,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -222,7 +222,7 @@
       "name": "luci-app-lyrion",
       "version": "1.0.0-r1",
       "filename": "luci-app-lyrion_1.0.0-r1_all.ipk",
-      "size": 6724,
+      "size": 6726,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -234,7 +234,7 @@
       "name": "luci-app-magicmirror2",
       "version": "0.4.0-r6",
       "filename": "luci-app-magicmirror2_0.4.0-r6_all.ipk",
-      "size": 12278,
+      "size": 12277,
       "category": "iot",
       "icon": "monitor",
       "description": "Smart mirror display",
@@ -246,7 +246,7 @@
       "name": "luci-app-mailinabox",
       "version": "1.0.0-r1",
       "filename": "luci-app-mailinabox_1.0.0-r1_all.ipk",
-      "size": 5479,
+      "size": 5485,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -258,7 +258,7 @@
       "name": "luci-app-master-link",
       "version": "1.0.0-r1",
       "filename": "luci-app-master-link_1.0.0-r1_all.ipk",
-      "size": 6249,
+      "size": 6247,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -270,7 +270,7 @@
       "name": "luci-app-media-flow",
       "version": "0.6.4-r1",
       "filename": "luci-app-media-flow_0.6.4-r1_all.ipk",
-      "size": 25415,
+      "size": 25416,
       "category": "media",
       "icon": "film",
       "description": "Media streaming",
@@ -282,7 +282,7 @@
       "name": "luci-app-metablogizer",
       "version": "1.0.0-r5",
       "filename": "luci-app-metablogizer_1.0.0-r5_all.ipk",
-      "size": 23345,
+      "size": 23346,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -294,7 +294,7 @@
       "name": "luci-app-metabolizer",
       "version": "1.0.0-r2",
       "filename": "luci-app-metabolizer_1.0.0-r2_all.ipk",
-      "size": 4756,
+      "size": 4757,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -306,7 +306,7 @@
       "name": "luci-app-mitmproxy",
       "version": "0.5.0-r2",
       "filename": "luci-app-mitmproxy_0.5.0-r2_all.ipk",
-      "size": 11149,
+      "size": 11150,
       "category": "security",
       "icon": "lock",
       "description": "HTTPS proxy and traffic inspection",
@@ -318,7 +318,7 @@
       "name": "luci-app-mmpm",
       "version": "0.2.0-r3",
       "filename": "luci-app-mmpm_0.2.0-r3_all.ipk",
-      "size": 7898,
+      "size": 7904,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -330,7 +330,7 @@
       "name": "luci-app-mqtt-bridge",
       "version": "0.4.0-r4",
       "filename": "luci-app-mqtt-bridge_0.4.0-r4_all.ipk",
-      "size": 22776,
+      "size": 22780,
       "category": "iot",
       "icon": "message-square",
       "description": "MQTT bridge",
@@ -354,7 +354,7 @@
       "name": "luci-app-netdata-dashboard",
       "version": "0.5.0-r2",
       "filename": "luci-app-netdata-dashboard_0.5.0-r2_all.ipk",
-      "size": 20485,
+      "size": 20488,
       "category": "monitoring",
       "icon": "bar-chart-2",
       "description": "System monitoring dashboard",
@@ -378,7 +378,7 @@
       "name": "luci-app-network-tweaks",
       "version": "1.0.0-r7",
       "filename": "luci-app-network-tweaks_1.0.0-r7_all.ipk",
-      "size": 14963,
+      "size": 14960,
       "category": "network",
       "icon": "wifi",
       "description": "Network configuration",
@@ -390,7 +390,7 @@
       "name": "luci-app-nextcloud",
       "version": "1.0.0-r1",
       "filename": "luci-app-nextcloud_1.0.0-r1_all.ipk",
-      "size": 6490,
+      "size": 6488,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -402,7 +402,7 @@
       "name": "luci-app-ollama",
       "version": "0.1.0-r1",
       "filename": "luci-app-ollama_0.1.0-r1_all.ipk",
-      "size": 12352,
+      "size": 12354,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -414,7 +414,7 @@
       "name": "luci-app-picobrew",
       "version": "1.0.0-r1",
       "filename": "luci-app-picobrew_1.0.0-r1_all.ipk",
-      "size": 9460,
+      "size": 9458,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -426,7 +426,7 @@
       "name": "luci-app-secubox",
       "version": "0.7.1-r4",
       "filename": "luci-app-secubox_0.7.1-r4_all.ipk",
-      "size": 77681,
+      "size": 77676,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -438,7 +438,7 @@
       "name": "luci-app-secubox-admin",
       "version": "1.0.0-r19",
       "filename": "luci-app-secubox-admin_1.0.0-r19_all.ipk",
-      "size": 57247,
+      "size": 57246,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -450,7 +450,7 @@
       "name": "luci-app-secubox-crowdsec",
       "version": "1.0.0-r3",
       "filename": "luci-app-secubox-crowdsec_1.0.0-r3_all.ipk",
-      "size": 13921,
+      "size": 13920,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -462,7 +462,7 @@
       "name": "luci-app-secubox-netdiag",
       "version": "1.0.0-r1",
       "filename": "luci-app-secubox-netdiag_1.0.0-r1_all.ipk",
-      "size": 15305,
+      "size": 15306,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -474,7 +474,7 @@
       "name": "luci-app-secubox-netifyd",
       "version": "1.2.1-r1",
       "filename": "luci-app-secubox-netifyd_1.2.1-r1_all.ipk",
-      "size": 36541,
+      "size": 36540,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -498,7 +498,7 @@
       "name": "luci-app-secubox-portal",
       "version": "0.7.0-r2",
       "filename": "luci-app-secubox-portal_0.7.0-r2_all.ipk",
-      "size": 24643,
+      "size": 24644,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -510,7 +510,7 @@
       "name": "luci-app-secubox-security-threats",
       "version": "1.0.0-r4",
       "filename": "luci-app-secubox-security-threats_1.0.0-r4_all.ipk",
-      "size": 21899,
+      "size": 21896,
       "category": "system",
       "icon": "box",
       "description": "SecuBox system component",
@@ -534,7 +534,7 @@
       "name": "luci-app-simplex",
       "version": "1.0.0-r1",
       "filename": "luci-app-simplex_1.0.0-r1_all.ipk",
-      "size": 7001,
+      "size": 6997,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -558,7 +558,7 @@
       "name": "luci-app-system-hub",
       "version": "0.5.1-r4",
       "filename": "luci-app-system-hub_0.5.1-r4_all.ipk",
-      "size": 61106,
+      "size": 61105,
       "category": "system",
       "icon": "settings",
       "description": "System management",
@@ -582,7 +582,7 @@
       "name": "luci-app-traffic-shaper",
       "version": "0.4.0-r2",
       "filename": "luci-app-traffic-shaper_0.4.0-r2_all.ipk",
-      "size": 14531,
+      "size": 14533,
       "category": "network",
       "icon": "filter",
       "description": "Traffic shaping and QoS",
@@ -594,7 +594,7 @@
       "name": "luci-app-vhost-manager",
       "version": "0.5.0-r5",
       "filename": "luci-app-vhost-manager_0.5.0-r5_all.ipk",
-      "size": 26184,
+      "size": 26187,
       "category": "network",
       "icon": "server",
       "description": "Virtual host management",
@@ -606,7 +606,7 @@
       "name": "luci-app-wireguard-dashboard",
       "version": "0.7.0-r5",
       "filename": "luci-app-wireguard-dashboard_0.7.0-r5_all.ipk",
-      "size": 39607,
+      "size": 39608,
       "category": "vpn",
       "icon": "shield",
       "description": "WireGuard VPN dashboard",
@@ -618,7 +618,7 @@
       "name": "luci-app-zigbee2mqtt",
       "version": "1.0.0-r2",
       "filename": "luci-app-zigbee2mqtt_1.0.0-r2_all.ipk",
-      "size": 6812,
+      "size": 6814,
       "category": "iot",
       "icon": "radio",
       "description": "Zigbee device management",
@@ -642,7 +642,7 @@
       "name": "secubox-app",
       "version": "1.0.0-r2",
       "filename": "secubox-app_1.0.0-r2_all.ipk",
-      "size": 11184,
+      "size": 11186,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -654,7 +654,7 @@
       "name": "secubox-app-adguardhome",
       "version": "1.0.0-r2",
       "filename": "secubox-app-adguardhome_1.0.0-r2_all.ipk",
-      "size": 2880,
+      "size": 2884,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -666,7 +666,7 @@
       "name": "secubox-app-auth-logger",
       "version": "1.2.2-r1",
       "filename": "secubox-app-auth-logger_1.2.2-r1_all.ipk",
-      "size": 9380,
+      "size": 9376,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -678,7 +678,7 @@
       "name": "secubox-app-crowdsec-custom",
       "version": "1.1.0-r1",
       "filename": "secubox-app-crowdsec-custom_1.1.0-r1_all.ipk",
-      "size": 5762,
+      "size": 5764,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -702,7 +702,7 @@
       "name": "secubox-app-cyberfeed",
       "version": "0.2.1-r1",
       "filename": "secubox-app-cyberfeed_0.2.1-r1_all.ipk",
-      "size": 12453,
+      "size": 12452,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -726,7 +726,7 @@
       "name": "secubox-app-dns-provider",
       "version": "1.0.0-r1",
       "filename": "secubox-app-dns-provider_1.0.0-r1_all.ipk",
-      "size": 5591,
+      "size": 5588,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -738,7 +738,7 @@
       "name": "secubox-app-domoticz",
       "version": "1.0.0-r2",
       "filename": "secubox-app-domoticz_1.0.0-r2_all.ipk",
-      "size": 2546,
+      "size": 2548,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -750,7 +750,7 @@
       "name": "secubox-app-exposure",
       "version": "1.0.0-r1",
       "filename": "secubox-app-exposure_1.0.0-r1_all.ipk",
-      "size": 6931,
+      "size": 6933,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -762,7 +762,7 @@
       "name": "secubox-app-gitea",
       "version": "1.0.0-r5",
       "filename": "secubox-app-gitea_1.0.0-r5_all.ipk",
-      "size": 9403,
+      "size": 9408,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -774,7 +774,7 @@
       "name": "secubox-app-glances",
       "version": "1.0.0-r1",
       "filename": "secubox-app-glances_1.0.0-r1_all.ipk",
-      "size": 5535,
+      "size": 5542,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -786,7 +786,7 @@
       "name": "secubox-app-haproxy",
       "version": "1.0.0-r23",
       "filename": "secubox-app-haproxy_1.0.0-r23_all.ipk",
-      "size": 15686,
+      "size": 15683,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -798,7 +798,7 @@
       "name": "secubox-app-hexojs",
       "version": "1.0.0-r8",
       "filename": "secubox-app-hexojs_1.0.0-r8_all.ipk",
-      "size": 94932,
+      "size": 94939,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -810,7 +810,7 @@
       "name": "secubox-app-jellyfin",
       "version": "1.0.0-r1",
       "filename": "secubox-app-jellyfin_1.0.0-r1_all.ipk",
-      "size": 6177,
+      "size": 6180,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -822,7 +822,7 @@
       "name": "secubox-app-jitsi",
       "version": "1.0.0-r1",
       "filename": "secubox-app-jitsi_1.0.0-r1_all.ipk",
-      "size": 8912,
+      "size": 8914,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -834,7 +834,7 @@
       "name": "secubox-app-localai",
       "version": "2.25.0-r1",
       "filename": "secubox-app-localai_2.25.0-r1_all.ipk",
-      "size": 5712,
+      "size": 5723,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -846,7 +846,7 @@
       "name": "secubox-app-localai-wb",
       "version": "2.25.0-r1",
       "filename": "secubox-app-localai-wb_2.25.0-r1_all.ipk",
-      "size": 7945,
+      "size": 7950,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -858,7 +858,7 @@
       "name": "secubox-app-lyrion",
       "version": "2.0.2-r1",
       "filename": "secubox-app-lyrion_2.0.2-r1_all.ipk",
-      "size": 7287,
+      "size": 7281,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -870,7 +870,7 @@
       "name": "secubox-app-magicmirror2",
       "version": "0.4.0-r8",
       "filename": "secubox-app-magicmirror2_0.4.0-r8_all.ipk",
-      "size": 9251,
+      "size": 9249,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -882,7 +882,7 @@
       "name": "secubox-app-mailinabox",
       "version": "2.0.0-r1",
       "filename": "secubox-app-mailinabox_2.0.0-r1_all.ipk",
-      "size": 7572,
+      "size": 7570,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -906,7 +906,7 @@
       "name": "secubox-app-mitmproxy",
       "version": "0.5.0-r19",
       "filename": "secubox-app-mitmproxy_0.5.0-r19_all.ipk",
-      "size": 22955,
+      "size": 22957,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -918,7 +918,7 @@
       "name": "secubox-app-mmpm",
       "version": "0.2.0-r5",
       "filename": "secubox-app-mmpm_0.2.0-r5_all.ipk",
-      "size": 3980,
+      "size": 3981,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -930,7 +930,7 @@
       "name": "secubox-app-nextcloud",
       "version": "1.0.0-r2",
       "filename": "secubox-app-nextcloud_1.0.0-r2_all.ipk",
-      "size": 2955,
+      "size": 2959,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -942,7 +942,7 @@
       "name": "secubox-app-ollama",
       "version": "0.1.0-r1",
       "filename": "secubox-app-ollama_0.1.0-r1_all.ipk",
-      "size": 5732,
+      "size": 5740,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -954,7 +954,7 @@
       "name": "secubox-app-picobrew",
       "version": "1.0.0-r7",
       "filename": "secubox-app-picobrew_1.0.0-r7_all.ipk",
-      "size": 5541,
+      "size": 5539,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -966,7 +966,7 @@
       "name": "secubox-app-simplex",
       "version": "1.0.0-r1",
       "filename": "secubox-app-simplex_1.0.0-r1_all.ipk",
-      "size": 9229,
+      "size": 9227,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -978,7 +978,7 @@
       "name": "secubox-app-streamlit",
       "version": "1.0.0-r5",
       "filename": "secubox-app-streamlit_1.0.0-r5_all.ipk",
-      "size": 11719,
+      "size": 11722,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -990,7 +990,7 @@
       "name": "secubox-app-tor",
       "version": "1.0.0-r1",
       "filename": "secubox-app-tor_1.0.0-r1_all.ipk",
-      "size": 7366,
+      "size": 7372,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1002,7 +1002,7 @@
       "name": "secubox-app-webapp",
       "version": "1.5.0-r7",
       "filename": "secubox-app-webapp_1.5.0-r7_all.ipk",
-      "size": 39170,
+      "size": 39177,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1014,7 +1014,7 @@
       "name": "secubox-app-zigbee2mqtt",
       "version": "1.0.0-r3",
       "filename": "secubox-app-zigbee2mqtt_1.0.0-r3_all.ipk",
-      "size": 5505,
+      "size": 5509,
       "category": "secubox",
       "icon": "package",
       "description": "SecuBox backend service",
@@ -1026,7 +1026,7 @@
       "name": "secubox-core",
       "version": "0.10.0-r11",
       "filename": "secubox-core_0.10.0-r11_all.ipk",
-      "size": 87973,
+      "size": 87977,
       "category": "system",
       "icon": "box",
       "description": "SecuBox core components",
@@ -1038,7 +1038,7 @@
       "name": "secubox-master-link",
       "version": "1.0.0-r1",
       "filename": "secubox-master-link_1.0.0-r1_all.ipk",
-      "size": 12450,
+      "size": 12446,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",
@@ -1050,7 +1050,7 @@
       "name": "secubox-p2p",
       "version": "0.6.0-r3",
       "filename": "secubox-p2p_0.6.0-r3_all.ipk",
-      "size": 42011,
+      "size": 42021,
       "category": "utility",
       "icon": "package",
       "description": "SecuBox package",

package/secubox/secubox-app-zigbee2mqtt/Makefile

@@ -15,7 +15,7 @@ define Package/secubox-app-zigbee2mqtt
   PKGARCH:=all
   SUBMENU:=SecuBox Apps
   TITLE:=SecuBox Zigbee2MQTT LXC app
-  DEPENDS:=+lxc +kmod-usb-serial-cp210x
+  DEPENDS:=+lxc +kmod-usb-serial-cp210x +mosquitto-nossl
 endef
 
 define Package/secubox-app-zigbee2mqtt/description

package/secubox/secubox-app-zigbee2mqtt/files/usr/sbin/zigbee2mqttctl

@@ -197,7 +197,9 @@ generate_config() {
 
 	# Generate zigbee2mqtt configuration.yaml
 	cat > "$data_path/data/configuration.yaml" << EOF
-homeassistant: false
+version: 4
+homeassistant:
+  enabled: false
 permit_join: $([ "$permit_join" = "1" ] && echo "true" || echo "false")
 mqtt:
   base_topic: $base_topic
@@ -206,13 +208,14 @@ $([ -n "$mqtt_user" ] && echo "  user: $mqtt_user")
 $([ -n "$mqtt_pass" ] && echo "  password: $mqtt_pass")
 serial:
   port: /dev/$(basename $serial_port)
-  adapter: ezsp
+  adapter: ember
 advanced:
   channel: $channel
   log_level: info
   log_output:
     - console
 frontend:
+  enabled: true
   port: $frontend_port
   host: 0.0.0.0
 EOF
@@ -228,6 +231,7 @@ generate_start_script() {
 #!/bin/sh
 export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 export NODE_PATH=/opt/zigbee2mqtt/node_modules
+export ZIGBEE2MQTT_DATA=/opt/zigbee2mqtt/data
 
 cd /opt/zigbee2mqtt
 
@@ -244,7 +248,7 @@ if [ -n "$SERIAL" ] && [ ! -c "/dev/$SERIAL" ]; then
 fi
 
 # Run zigbee2mqtt
-exec node node_modules/zigbee2mqtt/dist/index.js 2>&1 | tee -a "$LOG_FILE"
+exec node node_modules/zigbee2mqtt/index.js 2>&1 | tee -a "$LOG_FILE"
 STARTEOF
 
 	chmod +x "$LXC_ROOTFS/opt/start-zigbee2mqtt.sh"