CyberMind-FR
79bb3c43f4
New secubox-app-smbfs package for SMB/CIFS remote directory management with smbfsctl CLI (add/remove/mount/umount/test/status), UCI config, auto-mount init script, and Jellyfin/Lyrion media path integration. Glances LXC: host bind mounts (/rom, /overlay, /boot, /srv), Docker socket fix (symlink loop), fs plugin @exit_after patch, hostname/OS identity, pre-generated /etc/mtab. KISS READMEs for secubox-app-jellyfin and luci-app-jellyfin. Planning files updated with Domoticz IoT, AI Gateway strategy, App Store P2P emancipation, and v2 roadmap items. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
139 lines
9.9 KiB
Markdown
139 lines
9.9 KiB
Markdown
# SecuBox UI & Theme History
|
|
|
|
_Last updated: 2026-02-04_
|
|
|
|
1. **Unified Dashboard Refresh (2025-12-20)**
|
|
- Dashboard received the "sh-page-header" layout, hero stats, and SecuNav top tabs.
|
|
- Introduced shared `secubox/common.css` design tokens.
|
|
|
|
2. **Modules & Monitoring Modernization (2025-12-24)**
|
|
- Modules view adopted the same header/tabs plus live chip counters.
|
|
- Monitoring cards switched to SVG sparkline charts with auto-refresh.
|
|
|
|
3. **Alerts + Settings Overhaul (2025-12-27)**
|
|
- Alerts page now mirrors the dashboard style, dynamic header chips, and filtering controls.
|
|
- Settings view gained the SecuNav tabs, chips, and shared design language.
|
|
|
|
4. **Theme Synchronisation & Deployment (2025-12-28)**
|
|
- All SecuBox views call `Theme.init()` to respect dark/light/system preferences.
|
|
- Navigation bar now darkens automatically for dark/cyberpunk themes.
|
|
- Monitoring menu entry simplified (no `/overview` shim) to prevent LuCI tab duplication.
|
|
|
|
5. **Router Deployment Notes**
|
|
- Use `secubox-tools/deploy-secubox-dashboard.sh` for view-only pushes.
|
|
- Use `secubox-tools/deploy-secubox-v0.1.2.sh` for RPCD/config updates.
|
|
- Always clear `/tmp/luci-*` after copying UI assets.
|
|
|
|
6. **SecuBox v0.5.0-A Polish (2025-12-29)**
|
|
- Monitoring and Modules views drop legacy hero/filter UIs; all tabs now use SecuNav styling.
|
|
- Help/Bonus page adopts the shared header, navbar entry, and chips.
|
|
- Alerts buttons use `sh-btn` components; nav + title chips inherit theme colors.
|
|
|
|
7. **Multi-Instance Support (2026-01-20)**
|
|
- CrowdSec LAPI port configuration fix for multi-instance deployments.
|
|
- Streamlit and HexoJS gain multi-instance management support.
|
|
- HAProxy enhanced with instance-specific configuration.
|
|
|
|
8. **HexoJS Build & Publish Integration (2026-01-21)**
|
|
- Added LuCI interface for Gitea-based Hexo build and publish workflows.
|
|
- Automated Git operations for static site generation.
|
|
|
|
9. **ARM64 Toolchain Build Requirement (2026-01-27)**
|
|
- Discovered SIGILL crashes on ARM64 (MochaBin) due to LSE atomics in SDK-built Go binaries.
|
|
- Documented requirement: Go/CGO packages (crowdsec, netifyd) MUST use full OpenWrt toolchain.
|
|
- SDK produces binaries with LSE atomic instructions that crash on some Cortex-A72 CPUs.
|
|
- Updated CLAUDE.md, secubox-tools/README.md with toolchain build rules.
|
|
|
|
10. **Documentation Regeneration (2026-01-27)**
|
|
- README.md updated to v0.16.0 with all 38 modules categorized.
|
|
- Added build requirement table distinguishing SDK vs toolchain builds.
|
|
- secubox-tools/README.md updated to v1.1.0 with SDK vs toolchain guidance.
|
|
|
|
11. **Service Registry & HAProxy ACME v0.15.0 (2026-01-28)**
|
|
- `service-registry`: Unified service aggregation dashboard with dynamic health checks, URL readiness wizard, public IP detection, and external port checks.
|
|
- `haproxy`: Webroot ACME mode (no HAProxy restart), async cert workflow, auto-open firewall when publishing.
|
|
- Menu reorganization: CrowdSec, Threat Monitor, Network Diagnostics, WireGuard all moved to LuCI Services menu.
|
|
- `tor-shield`: Exit node hostname (reverse DNS), presets with immediate activation, excluded destinations for CDN/direct, master protection switch.
|
|
- `network-tweaks`: AdGuard Home DNS control, CDN cache and WPAD proxy controls, cumulative impact counters for HAProxy vhosts/LXC/firewall.
|
|
- `client-guardian`: Safe defaults, emergency clear, and safety limits.
|
|
- `metablogizer`: Improved site creation and HAProxy integration.
|
|
- Portal: HTTP health checks and speedtest integration.
|
|
- CrowdSec: Dynamic LAPI port detection.
|
|
- 30 commits, 15 feat / 12 fix / 3 refactor.
|
|
|
|
12. **App Store KISS Evolution & Dependency Cleanup (2026-01-29)**
|
|
- Renamed `luci-app-secubox-bonus` to `secubox-app-bonus` (feeds-based architecture).
|
|
- Implemented KISS Evolution for app store: feeds, profiles, skills, feedback system.
|
|
- Stripped all libc/libubox/libubus/libuci dependencies from SecuBox packages.
|
|
- Added `PKG_FLAGS:=nonshared` to prevent automatic libc dependency injection.
|
|
|
|
13. **P2P Hub & SecuBox Console (2026-01-30)**
|
|
- `secubox-p2p`: Full P2P Hub with globe peer visualization, Hub Registry, Services Registry, parallel component sources, auto-self mesh, master deployment, DNS bridge, WireGuard mirror, Gitea repository creation, mesh backup, test cloning, gigogne distribution mode, and mDNS service publishing.
|
|
- `secubox-console`: Linux host TUI frontend with CLI tools lexical reference.
|
|
- `cdn-cache`: Added MITM SSL bump support for HTTPS caching.
|
|
- `metablogizer`: Tor hidden service integration, DNS resolution fixes, permissions fixes.
|
|
- `streamlit`: ZIP upload with selective tree extraction.
|
|
- `crowdsec-dashboard`: Extensible theming system (later removed), UCI ubus permissions.
|
|
- `secubox-core`: P2P Hub API and wizard-first menu.
|
|
- `secubox-app-bonus`: Added `secubox-feed install all` command.
|
|
- 40+ commits — largest single-day effort in project history.
|
|
|
|
14. **P2P MirrorBox & Factory Dashboard (2026-01-31)**
|
|
- `secubox-p2p` v0.6.0: MirrorBox NetMesh Catalog with DNS federation, distributed mesh services panel, WAN IP and WireGuard tunnel redundancy, mDNS service publishing, REST API for mesh visibility.
|
|
- `secubox-factory`: Unified dashboard with signed Merkle snapshots and HMAC-style signing for OpenWrt compatibility.
|
|
- `portal`: KISS redesign with service categorization.
|
|
- `crowdsec-dashboard`: KISS rewrite, console enrollment, CrowdSec theme integration, dynamic port/path detection.
|
|
- `secubox-swiss`: Unified CLI tool for SecuBox operations.
|
|
- `jitsi`: Jitsi Meet video conferencing integration.
|
|
- `mitmproxy`: HAProxy backend inspection, token auth, enhanced threat detection analytics v2.0.
|
|
- `secubox-core`: P2P mesh API endpoints for console discovery.
|
|
|
|
15. **KISS UI Rewrites & DNS Guard (2026-02-01)**
|
|
- `streamlit`: KISS UI redesign with instances management, Gitea integration, and multiple upload bug fixes.
|
|
- `metablogizer`: KISS UI redesign with backend status display.
|
|
- `ollama`: KISS UI rewrite with model suggestions and thermal monitoring.
|
|
- `netdiag`: Thermal monitoring integration.
|
|
- `dnsguard`: New DNS Guard app with provider lookup methods.
|
|
- `haproxy`: AdGuard Home detection, improved service discovery, reserved ports with listening verification.
|
|
- `p2p`: Distributed catalog with Gitea sync and health probing.
|
|
- `mitmproxy`: Enhanced threat patterns; moved to Security menu.
|
|
- `network-tweaks`: Moved to Network menu.
|
|
- `crowdsec-dashboard`: Nav path fixes, alerts/countries display fixes.
|
|
- `wireguard-dashboard`: QR code generation fix.
|
|
- `exposure`: Reserved ports with listening verification.
|
|
|
|
16. **WAF Auto-Ban & Security Hardening (2026-02-02)**
|
|
- `waf`: Sensitivity-based auto-ban system with CrowdSec integration and comprehensive CVE detection patterns (including CVE-2025-15467).
|
|
- `mitmproxy`: WAN protection mode for incoming traffic inspection; LAN transparent proxy disabled by default.
|
|
- `simplex`: SimpleX Chat self-hosted messaging servers.
|
|
- `crowdsec`: KISS setup simplification, CAPI enrollment status, restored working setup page.
|
|
- `local-build`: Added missing toolchain package shorthands and feeds path fix.
|
|
- WAF auto-ban statistics added to dashboards.
|
|
|
|
17. **Mesh Security & MAC Guardian (2026-02-03)**
|
|
- `mac-guardian`: New WiFi MAC security monitor with DHCP lease protection for odhcpd.
|
|
- `master-link`: Secure mesh onboarding with dynamic join IPK generation.
|
|
- `security-threats`: KISS rewrite with mesh threat intelligence, LXC mitmproxy detection.
|
|
- `p2p`: Decentralized threat intelligence sharing via mesh.
|
|
- `tor-shield`: Server mode for split-routing with public IP preservation.
|
|
- `wireguard-dashboard`: jshn bypass for QR code (argument size limit), peer private key persistence in UCI, server endpoint persistence.
|
|
- `localai`: gte-small preset, RPC expect unwrapping and chat JSON escaping fixes.
|
|
- `lyrion`: WAN access checkbox for firewall rules, networking fixes for device discovery.
|
|
- `tools`: SecuBox image builder and sysupgrade scripts.
|
|
- RPCD/LuCI frontend guidelines added to CLAUDE.md.
|
|
- KISS READMEs added for all 46 remaining packages.
|
|
|
|
18. **New Packages & Exposure Redesign (2026-02-04)**
|
|
- `jellyfin`: New media server package with LXC container, uninstall/update/backup, HAProxy integration, and LuCI actions.
|
|
- `zigbee2mqtt`: Complete rewrite from Docker to LXC Alpine container.
|
|
- `device-intel`: New device intelligence package with OUI emoji display (BusyBox compatibility fixes, SDK build pattern alignment).
|
|
- `dns-provider`: New DNS provider management package.
|
|
- `exposure`: KISS redesign with enriched service names, vhost integration, DNS domain sorting; toggle switch fix.
|
|
- `streamlit`: Chunked upload to bypass uhttpd 64KB JSON limit, UTF-8 `.py` file upload fix, auto-install requirements from ZIP, non-standard filename support.
|
|
- `crowdsec-dashboard`: Decisions list fix (wrong RPC expect key).
|
|
- RPCD: BusyBox ash `local` keyword compatibility fix (wrap call handlers in function).
|
|
- `glances`: Full host system visibility — LXC bind mounts for `/rom`, `/overlay`, `/boot`, `/srv`, Docker socket at `/run/docker.sock` (symlink loop fix), `@exit_after` fs plugin patch (multiprocessing fails in LXC), host hostname via `lxc.uts.name`, OpenWrt OS identity from `/etc/openwrt_release`, pre-generated `/etc/mtab` from host `/proc/mounts`.
|
|
- `zigbee2mqtt`: Direct `/dev/ttyUSB0` passthrough (socat TCP bridge fails ASH protocol), adapter `ezsp`→`ember` (z2m 2.x), `ZIGBEE2MQTT_DATA` env var, `mosquitto-nossl` dependency.
|
|
- `smbfs`: New SMB/CIFS remote mount manager package — UCI config, `smbfsctl` CLI (add/remove/mount/umount/test/status), auto-mount init script, credentials storage, Jellyfin+Lyrion integration, catalog entry.
|
|
- `jellyfin`: KISS READMEs for both backend and LuCI packages.
|