79775faa6e
fix(luci): Add web UI URL link to Lyrion dashboard
...
- Move Web Interface section to top for visibility
- Always show Open Lyrion Web UI button with dynamic URL
- Display URL text next to button
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-15 18:39:03 +01:00
66b58c74d6
feat(catalog): Add Streamlit Forge and RezApp Forge to KISS Apps
...
- luci-app-streamlit-forge: Streamlit app publishing platform
- Category: productivity, runtime: lxc
- Templates, SSL exposure, mesh publishing
- luci-app-rezapp: Docker to LXC app converter
- Category: system, runtime: native
- Catalog browsing, package generation
- Updated new_releases section
- Total plugins: 37 → 39
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-11 09:44:08 +01:00
8769a60275
feat(sbom): Add CRA Annex I compliant SBOM pipeline
...
Implements comprehensive Software Bill of Materials generation for
EU Cyber Resilience Act compliance with ANSSI CSPN certification path.
SBOM Pipeline:
- scripts/check-sbom-prereqs.sh: Prerequisites validation (OpenWrt, tools, Kconfig)
- scripts/sbom-generate.sh: Multi-source SBOM generation (native, feed, rootfs, firmware)
- scripts/sbom-audit-feed.sh: PKG_HASH/PKG_LICENSE feed audit with MANIFEST.md
- Makefile: SBOM targets (sbom, sbom-quick, sbom-validate, sbom-scan, sbom-audit)
- .github/workflows/sbom-release.yml: CI with CVE gating and auto-security issues
Documentation:
- SECURITY.md: CRA Art. 13 §6 compliant vulnerability disclosure policy
- docs/sbom-pipeline.md: Architecture, CRA mapping, ANSSI CSPN guidance
AI Gateway (bonus feed):
- secubox-ai-gateway: 3-tier data classification (LOCAL_ONLY/SANITIZED/CLOUD_DIRECT)
- luci-app-ai-gateway: LuCI dashboard with provider management and audit logging
Output formats: CycloneDX 1.6 (primary) + SPDX 2.3 (secondary)
Tools: syft, grype, cyclonedx-cli (auto-installed if missing)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-04 08:01:00 +01:00
4a0ab9530f
feat(mesh): Yggdrasil extended peer discovery + bugfixes
...
## New Features
- secubox-app-yggdrasil-discovery: Mesh peer discovery via gossip protocol
- yggctl CLI: status, self, peers, announce, discover, bootstrap
- Auto-peering with trust verification (master-link fingerprint)
- Daemon for periodic announcements
## Bug Fixes
- tor-shield: Fix opkg downloads failing when Tor active
- DNS over Tor disabled by default
- Auto-exclude public DNS servers from iptables rules
- Excluded domains bypass list (openwrt.org, pool.ntp.org, etc.)
- haproxy: Fix portal 503 "End of Internet" error
- Corrected malformed vhost backend configuration
- Regenerated HAProxy config from UCI
- luci-app-nextcloud: Fix users list showing empty
- RPC expect clause was extracting array, render expected object
## Updated
- Bonus feed: All IPKs rebuilt
- Documentation: HISTORY.md, WIP.md, TODO.md updated
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-28 17:32:41 +01:00
5d905c23ac
feat(openclaw): Add Google Gemini API support
...
- Added gemini provider with models: gemini-1.5-flash, gemini-1.5-pro, gemini-pro
- Updated RPCD handler with Gemini API endpoint
- Updated settings.js with Google AI Studio link
- Updated chat.js to parse Gemini response format
- Changed Ollama default URL to LocalAI (port 8091)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-27 11:47:17 +01:00
29e2eac616
fix(haproxy): Sync generated config to /etc/haproxy.cfg
...
- metablogizer: reload_haproxy() now copies config to /etc/haproxy.cfg
- haproxyctl: generate_config() syncs to /etc/haproxy.cfg after generation
- Fixes issue where newly uploaded sites return 404 because HAProxy
reads config from /etc/haproxy.cfg but config was only generated to
/srv/haproxy/config/haproxy.cfg
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-24 08:02:42 +01:00
