New packages: - secubox-crowdsec-setup: Automated installation script with: - Prerequisites verification (RAM, flash, OpenWrt version) - syslog-ng4 configuration for log forwarding - CAPI registration and hub setup - nftables firewall bouncer configuration - Backup/rollback, repair, and uninstall modes - luci-app-secubox-crowdsec: LuCI dashboard with: - Service status and statistics dashboard - Active decisions (bans) management - Security alerts viewer - Collections and bouncers management - UCI-based settings configuration Enhanced existing packages: - luci-app-crowdsec-dashboard: Added acquisition configuration wizard - secubox-app-crowdsec: Improved defaults and configuration Documentation: - CROWDSEC-OPENWRT-24.md with architecture, installation, and troubleshooting Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
48 lines
829 B
JSON
48 lines
829 B
JSON
{
|
|
"luci-app-secubox-crowdsec": {
|
|
"description": "Grant access to SecuBox CrowdSec Dashboard",
|
|
"read": {
|
|
"ubus": {
|
|
"luci.secubox-crowdsec": [
|
|
"status",
|
|
"decisions",
|
|
"alerts",
|
|
"metrics",
|
|
"stats",
|
|
"collections",
|
|
"bouncers",
|
|
"nftables_stats",
|
|
"blocked_ips",
|
|
"config"
|
|
]
|
|
},
|
|
"uci": [
|
|
"crowdsec"
|
|
],
|
|
"file": {
|
|
"/etc/crowdsec/*": ["read"],
|
|
"/etc/crowdsec/acquis.d/*": ["read"],
|
|
"/var/log/crowdsec*.log": ["read"],
|
|
"/tmp/log/*.log": ["read"]
|
|
}
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"luci.secubox-crowdsec": [
|
|
"add_decision",
|
|
"delete_decision",
|
|
"install_collection",
|
|
"remove_collection",
|
|
"update_hub",
|
|
"upgrade_hub",
|
|
"control_service",
|
|
"save_config"
|
|
]
|
|
},
|
|
"uci": [
|
|
"crowdsec"
|
|
]
|
|
}
|
|
}
|
|
}
|