History

CyberMind-FR 8769a60275 feat(sbom): Add CRA Annex I compliant SBOM pipeline Implements comprehensive Software Bill of Materials generation for EU Cyber Resilience Act compliance with ANSSI CSPN certification path. SBOM Pipeline: - scripts/check-sbom-prereqs.sh: Prerequisites validation (OpenWrt, tools, Kconfig) - scripts/sbom-generate.sh: Multi-source SBOM generation (native, feed, rootfs, firmware) - scripts/sbom-audit-feed.sh: PKG_HASH/PKG_LICENSE feed audit with MANIFEST.md - Makefile: SBOM targets (sbom, sbom-quick, sbom-validate, sbom-scan, sbom-audit) - .github/workflows/sbom-release.yml: CI with CVE gating and auto-security issues Documentation: - SECURITY.md: CRA Art. 13 §6 compliant vulnerability disclosure policy - docs/sbom-pipeline.md: Architecture, CRA mapping, ANSSI CSPN guidance AI Gateway (bonus feed): - secubox-ai-gateway: 3-tier data classification (LOCAL_ONLY/SANITIZED/CLOUD_DIRECT) - luci-app-ai-gateway: LuCI dashboard with provider management and audit logging Output formats: CycloneDX 1.6 (primary) + SPDX 2.3 (secondary) Tools: syft, grype, cyclonedx-cli (auto-installed if missing) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>		2026-03-04 08:01:00 +01:00
..
htdocs/luci-static/secubox	refactor(bonus): Rename luci-app-secubox-bonus to secubox-app-bonus	2026-01-30 19:46:27 +01:00
root	feat(sbom): Add CRA Annex I compliant SBOM pipeline	2026-03-04 08:01:00 +01:00
Makefile	fix(deps): Add PKG_FLAGS:=nonshared to prevent automatic libc dependency	2026-01-30 19:46:27 +01:00
README.md	refactor(bonus): Rename luci-app-secubox-bonus to secubox-app-bonus	2026-01-30 19:46:27 +01:00

README.md

luci-app-secubox-bonus

SecuBox Bonus Content Package - Marketing and documentation website for SecuBox modules.

Description

This package provides the official SecuBox documentation, demos, and marketing content as static HTML pages accessible through the router's web interface.

Demo Pages (16 modules): Interactive demonstrations of SecuBox modules
- Auth Guardian, Bandwidth Manager, CDN Cache, Client Guardian
- CrowdSec, KSM Manager, Media Flow, Netdata, Netifyd
- Network Modes, SecuBox Hub, Traffic Shaper, VHost Manager, WireGuard
Blog Articles: Setup guides and tutorials
- Auth Guardian Setup Guide
- Bandwidth Manager Guide
- Local SaaS with VHost Manager
Marketing: Campaign and landing pages
Internationalization: Multi-language support (13 languages)
- English, French, German, Spanish, Portuguese, Italian
- Dutch, Russian, Arabic, Chinese, Japanese, Korean, Hindi

Installation

From Package

opkg update
opkg install luci-app-secubox-bonus

From Source

make package/luci-app-secubox-bonus/compile

Access

After installation, the content is available at:

http://<router-ip>/luci-static/secubox/

URLs

Main landing: /luci-static/secubox/index.html
Demo pages: /luci-static/secubox/demo-<module>.html
Blog articles: /luci-static/secubox/blog/<article>.html
Campaign: /luci-static/secubox/campaign.html

File Structure

/www/luci-static/secubox/
├── index.html                    # Main landing page
├── campaign.html                 # Marketing campaign
├── demo-*.html                   # Module demonstrations (16 files)
├── blog/                         # Tutorials and guides
│   ├── auth-guardian-setup.html
│   ├── bandwidth-manager-guide.html
│   └── local-saas-vhost.html
└── i18n/                         # Translations (13 languages)
    └── *.json

Package Info

Version: 0.1.0-1
License: Apache-2.0
Maintainer: CyberMind contact@cybermind.fr
Size: ~500KB (36 files)
Dependencies: luci-base

Development

The source content is maintained in the secubox-website repository and synchronized to this package during builds.

Update Content

To update the website content:

Update files in ~/CyberMindStudio/_files/secubox-website/
Rebuild the package or use the deployment script:

./secubox-tools/deploy-website.sh root@192.168.8.205 ~/CyberMindStudio/_files/secubox-website

Notes

This package contains only static files (HTML, JS, JSON)
No backend/RPCD components required
No menu integration - content accessed via direct URLs
Files are read-only and served by uhttpd
Content updates require package reinstall or manual deployment