secubox-openwrt/package/secubox/secubox-app-tor/files/etc/config/tor-shield
CyberMind-FR 364f19d421 feat: Add Gitea auto-push and fix Tor Shield server mode
Streamlit/MetaBlogizer:
- Add 'gitea push <name>' command to both streamlitctl and metablogizerctl
- Auto-creates Gitea repo via API if it doesn't exist
- Initializes git, commits all files, and pushes to Gitea
- Stores repo reference in UCI for future syncs

Tor Shield:
- Add 'wan_input_allow' option for server preset
- Server mode now properly allows WAN inbound (ports 80, 443, 8443)
- Uses nftables rules to integrate with OpenWrt firewall4
- Outbound traffic still routed through Tor (kill_switch)
- Cleanup nftables rules on stop/disable

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-10 06:42:50 +01:00

62 lines
1.3 KiB
Plaintext

# SecuBox Tor Shield configuration
# /etc/config/tor-shield
config tor-shield 'main'
option enabled '0'
option mode 'transparent'
option dns_over_tor '1'
option kill_switch '1'
option auto_bridges '0'
config preset 'anonymous'
option name 'Full Anonymity'
option icon 'shield'
option mode 'transparent'
option dns_over_tor '1'
option kill_switch '1'
config preset 'selective'
option name 'Selective Apps'
option icon 'target'
option mode 'socks'
option dns_over_tor '0'
option kill_switch '0'
config preset 'censored'
option name 'Bypass Censorship'
option icon 'unlock'
option mode 'transparent'
option use_bridges '1'
option dns_over_tor '1'
config preset 'server'
option name 'Server Mode'
option icon 'server'
option mode 'transparent'
option dns_over_tor '1'
option kill_switch '1'
option lan_proxy '1'
option wan_input_allow '1'
config proxy 'socks'
option port '9050'
option address '127.0.0.1'
config transparent 'trans'
option port '9040'
option dns_port '9053'
option lan_proxy '0'
list excluded_ips '192.168.0.0/16'
list excluded_ips '10.0.0.0/8'
list excluded_ips '172.16.0.0/12'
list excluded_ips '127.0.0.0/8'
config bridges 'bridges'
option enabled '0'
option type 'obfs4'
config security 'security'
option exit_nodes ''
option exclude_exit_nodes ''
option strict_nodes '0'