secubox-openwrt/package/secubox/luci-app-secubox-crowdsec/root/usr/share/rpcd/acl.d/luci-app-secubox-crowdsec.json
CyberMind-FR 252341e045 feat: Add complete CrowdSec integration for OpenWrt 24.10+
New packages:
- secubox-crowdsec-setup: Automated installation script with:
  - Prerequisites verification (RAM, flash, OpenWrt version)
  - syslog-ng4 configuration for log forwarding
  - CAPI registration and hub setup
  - nftables firewall bouncer configuration
  - Backup/rollback, repair, and uninstall modes

- luci-app-secubox-crowdsec: LuCI dashboard with:
  - Service status and statistics dashboard
  - Active decisions (bans) management
  - Security alerts viewer
  - Collections and bouncers management
  - UCI-based settings configuration

Enhanced existing packages:
- luci-app-crowdsec-dashboard: Added acquisition configuration wizard
- secubox-app-crowdsec: Improved defaults and configuration

Documentation:
- CROWDSEC-OPENWRT-24.md with architecture, installation, and troubleshooting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-09 17:58:17 +01:00

48 lines
829 B
JSON

{
"luci-app-secubox-crowdsec": {
"description": "Grant access to SecuBox CrowdSec Dashboard",
"read": {
"ubus": {
"luci.secubox-crowdsec": [
"status",
"decisions",
"alerts",
"metrics",
"stats",
"collections",
"bouncers",
"nftables_stats",
"blocked_ips",
"config"
]
},
"uci": [
"crowdsec"
],
"file": {
"/etc/crowdsec/*": ["read"],
"/etc/crowdsec/acquis.d/*": ["read"],
"/var/log/crowdsec*.log": ["read"],
"/tmp/log/*.log": ["read"]
}
},
"write": {
"ubus": {
"luci.secubox-crowdsec": [
"add_decision",
"delete_decision",
"install_collection",
"remove_collection",
"update_hub",
"upgrade_hub",
"control_service",
"save_config"
]
},
"uci": [
"crowdsec"
]
}
}
}