gandalf/secubox-openwrt
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
L'appliance de cybersécurité 100% open source qui embarque wizard, profils et App Store sur OpenWrt 24.10. https://secubox.maegia.tv/
765 Commits 4 Branches 294 Tags 320 MiB
HTML 44.8%
JavaScript 25.1%
Shell 17.9%
CSS 7.5%
EJS 2.2%
Other 2.5%
18a5f441ba
Go to file
CyberMind-FR 18a5f441ba feat(p2p): Add Gitea repository creation feature 
Add createGiteaRepo() function with modal interface for creating new Gitea
repositories directly from the P2P Hub. Users can configure server URL,
repo name, description, access token, and options (private, init README,
push current state).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-30 12:08:25 +01:00
.claude feat(bonus): Add 'secubox-feed install all' command 2026-01-30 06:43:57 +01:00
.codex docs: Update README v0.16.0 with 38 modules, add CHANGELOG 2026-01-27 10:58:48 +01:00
.gitea/workflows feat(appstore): Implement KISS Evolution - feeds, profiles, skills, feedback 2026-01-29 10:13:54 +01:00
.github
.secubox-reports
.vscode
acl
docs chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00
DOCS synch 2026-01-17 06:59:37 +01:00
EXAMPLES
package/secubox feat(p2p): Add Gitea repository creation feature 2026-01-30 12:08:25 +01:00
scripts chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00
secubox-tools fix(bonus): Fix secubox-app-bonus build and opkg feed installation 2026-01-30 06:39:31 +01:00
site chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00
templates
.config chore: Add build configuration and update settings 2026-01-10 18:32:17 +01:00
.gitignore feat(appstore): Implement KISS Evolution - feeds, profiles, skills, feedback 2026-01-29 10:13:54 +01:00
AGENTS.md
CHANGELOG.md docs: Update README v0.16.0 with 38 modules, add CHANGELOG 2026-01-27 10:58:48 +01:00
CLAUDE.md feat: Add HTTP health checks, portal speedtest, and fix cert detection 2026-01-28 13:13:10 +01:00
DEBUG_GUIDE.md
decisions
DEPLOY_UPDATES.md
deploy-modules-with-theme.sh
deploy-theme.sh
deploy-to-router.sh
ENHANCEMENTS_V2.md
enrich-catalog.py
mkdocs.yml chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00
plugins
profiles
README.md docs: Update README v0.16.0 with 38 modules, add CHANGELOG 2026-01-27 10:58:48 +01:00
rpc_reload.sh
RPC_TIMEOUT_FIXES.md
test-direct.js
test-modules-simple.js
TIMEOUT_FIX.md
TODO-ANALYSE.md docs: Update README v0.16.0 with 38 modules, add CHANGELOG 2026-01-27 10:58:48 +01:00
WIKI-SETUP-GUIDE.md chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00

README.md

SecuBox - Security Suite for OpenWrt

Version: 0.16.0 Last Updated: 2026-01-27 Status: Active Development Modules: 38 LuCI Applications

Build OpenWrt Packages License

Overview

SecuBox is a comprehensive security and network management suite for OpenWrt, providing a unified ecosystem of 38 specialized dashboards and tools. All modules are compiled automatically for multiple OpenWrt architectures via GitHub Actions.

Website: secubox.cybermood.eu Publisher: CyberMind.fr

SecuBox Modules

SecuBox Core (5 modules)

Module Version Description
luci-app-secubox 0.7.1 Central dashboard/Hub for all SecuBox modules
luci-app-secubox-portal 0.7.0 Unified entry point with tabbed navigation
luci-app-secubox-admin 1.0.0 Admin control center with appstore and monitoring
luci-app-secubox-bonus 0.2.0 Documentation, local repo, and app store
luci-app-system-hub 0.5.1 Central system control with logs and backup

Security & Threat Management (9 modules)

Module Version Description
luci-app-crowdsec-dashboard 0.7.0 Real-time CrowdSec security monitoring
luci-app-secubox-security-threats 1.0.0 Unified netifyd DPI + CrowdSec intelligence
luci-app-client-guardian 0.4.0 Network access, captive portal, parental controls
luci-app-auth-guardian 0.4.0 OAuth2/OIDC authentication, voucher system
luci-app-exposure 1.0.0 Service exposure manager
luci-app-tor-shield 1.0.0 Tor anonymization dashboard
luci-app-mitmproxy 0.4.0 HTTPS traffic inspection
luci-app-cyberfeed 0.1.1 Cyberpunk RSS feed aggregator
luci-app-ksm-manager 0.4.0 Cryptographic key/HSM management

Deep Packet Inspection (2 modules)

Module Version Description
luci-app-ndpid 1.1.2 nDPId deep packet inspection dashboard
luci-app-secubox-netifyd 1.2.1 netifyd DPI with real-time flow monitoring

Network & Connectivity (8 modules)

Module Version Description
luci-app-vhost-manager 0.5.0 Nginx reverse proxy with Let's Encrypt SSL
luci-app-haproxy 1.0.0 Load balancer with vhosts and SSL
luci-app-wireguard-dashboard 0.7.0 WireGuard VPN monitoring
luci-app-network-modes 0.5.0 Sniffer, AP, Relay, Router modes
luci-app-network-tweaks 1.0.0 Auto Proxy DNS & Hosts from vhosts
luci-app-mqtt-bridge 0.4.0 USB-to-MQTT IoT hub
luci-app-cdn-cache 0.5.0 Content delivery optimization
luci-app-media-flow 0.6.4 Streaming detection (Netflix, YouTube, Spotify)

Bandwidth & Traffic Management (2 modules)

Module Version Description
luci-app-bandwidth-manager 0.5.0 QoS rules, client quotas, SQM integration
luci-app-traffic-shaper 0.4.0 TC/CAKE traffic shaping

Content & Web Platforms (5 modules)

Module Version Description
luci-app-gitea 1.0.0 Gitea Platform management
luci-app-hexojs 1.0.0 Hexo static site generator
luci-app-metabolizer 1.0.0 Metabolizer CMS support
luci-app-magicmirror2 0.4.0 MagicMirror2 smart display
luci-app-mmpm 0.2.0 MagicMirror Package Manager

AI/LLM & Analytics (4 modules)

Module Version Description
luci-app-localai 0.1.0 LocalAI LLM management
luci-app-ollama 0.1.0 Ollama LLM management
luci-app-glances 1.0.0 Glances system monitoring
luci-app-netdata-dashboard 0.5.0 Real-time Netdata monitoring

Streaming & Data Processing (2 modules)

Module Version Description
luci-app-streamlit 1.0.0 Streamlit Platform management
luci-app-picobrew 1.0.0 PicoBrew Server management

IoT & Smart Devices (1 module)

Module Version Description
luci-app-zigbee2mqtt 1.0.0 Zigbee2MQTT docker management

Supported Architectures

ARM 64-bit (AArch64)

Target Devices
aarch64-cortex-a53 ESPRESSObin, BananaPi R64
aarch64-cortex-a72 MOCHAbin, Raspberry Pi 4, NanoPi R4S
mediatek-filogic GL.iNet MT3000, BananaPi R3
rockchip-armv8 NanoPi R4S/R5S, FriendlyARM
bcm27xx-bcm2711 Raspberry Pi 4, Compute Module 4

ARM 32-bit

Target Devices
arm-cortex-a7-neon Orange Pi, BananaPi, Allwinner
arm-cortex-a9-neon Linksys WRT, Turris Omnia
qualcomm-ipq40xx Google WiFi, Zyxel NBG6617

MIPS

Target Devices
mips-24kc TP-Link Archer, Ubiquiti
mipsel-24kc Xiaomi, GL.iNet, Netgear

x86

Target Devices
x86-64 PC, VMs, Docker, Proxmox

Installation

From Pre-built Packages

Download from GitHub Releases:

opkg update
opkg install luci-app-secubox-portal_*.ipk
opkg install luci-app-system-hub_*.ipk
opkg install luci-app-crowdsec-dashboard_*.ipk

Build from Source

# Clone into OpenWrt SDK
cd ~/openwrt-sdk/package/
git clone https://github.com/CyberMind-FR/secubox-openwrt.git secubox

# Build
cd ~/openwrt-sdk/
make package/secubox/luci-app-secubox-portal/compile V=s

Add as OpenWrt Feed

Add to feeds.conf.default:

src-git secubox https://github.com/CyberMind-FR/secubox-openwrt.git

Then:

./scripts/feeds update secubox
./scripts/feeds install -a -p secubox
make menuconfig  # Select modules under LuCI > Applications
make V=s

Repository Structure

secubox-openwrt/
├── package/secubox/           # All 38 SecuBox LuCI packages
│   ├── luci-app-secubox/      # Core hub
│   ├── luci-app-secubox-portal/
│   ├── luci-app-secubox-admin/
│   ├── luci-app-crowdsec-dashboard/
│   ├── luci-app-secubox-netifyd/
│   ├── luci-app-haproxy/
│   ├── luci-app-streamlit/
│   ├── luci-app-gitea/
│   ├── luci-app-hexojs/
│   └── ... (38 modules total)
├── secubox-tools/             # Build tools and local SDK
│   ├── local-build.sh         # Local package builder
│   ├── validate-modules.sh    # Module validation
│   ├── openwrt/               # Full toolchain (for Go/native builds)
│   └── sdk/                   # OpenWrt SDK (for LuCI apps)
├── DOCS/                      # Documentation
│   ├── DEVELOPMENT-GUIDELINES.md
│   ├── QUICK-START.md
│   └── VALIDATION-GUIDE.md
└── .github/workflows/         # CI/CD

Build Requirements

SDK builds (for LuCI apps - shell/Lua packages):

./secubox-tools/local-build.sh build luci-app-crowdsec-dashboard

Full toolchain builds (for Go/native packages):

cd secubox-tools/openwrt
make package/crowdsec/compile V=s
Package Build Type Reason
crowdsec Toolchain Go binary with CGO
crowdsec-firewall-bouncer Toolchain Go binary with CGO
netifyd Toolchain C++ native binary
nodogsplash Toolchain C native binary
All luci-app-* SDK Shell/Lua/JS packages

OpenWrt Compatibility

Version Status Package Format
25.x Testing .apk
24.10.x Recommended .ipk
23.05.x Supported .ipk

Development

Developer Documentation

Guide Description
DOCS/DEVELOPMENT-GUIDELINES.md Design System, RPCD/ubus, ACL, JavaScript
DOCS/QUICK-START.md Quick reference and code templates
DOCS/VALIDATION-GUIDE.md Module validation procedures
CLAUDE.md OpenWrt shell scripting guidelines
secubox-tools/README.md Build tools and SDK usage

Critical Rules

  1. RPCD naming: filename = ubus object (luci.system-hub)
  2. Menu paths: path = view file (system-hub/overview.js)
  3. Permissions: RPCD=755, CSS/JS=644
  4. Validate: ./secubox-tools/validate-modules.sh
  5. Go/native packages: Use full toolchain, not SDK

Public Pages

SecuBox includes public pages accessible without authentication:

  • Crowdfunding Campaign - Support the project development
  • Bug Bounty Program - Security vulnerability reporting
  • Development Status - Modules list, roadmap, changelog

Access at: https://your-secubox/cgi-bin/luci/secubox-public/

Links

License

Apache-2.0 © 2024-2026 CyberMind.fr

Contributing

  1. Fork the repository
  2. Create a feature branch (git checkout -b feature/amazing-feature)
  3. Commit your changes (git commit -m 'Add amazing feature')
  4. Push to the branch (git push origin feature/amazing-feature)
  5. Open a Pull Request

Author

Gandalf - CyberMind.fr

Made with love in France