secubox-openwrt/package/secubox/secubox-p2p/root/etc/config/secubox-p2p
CyberMind-FR 1652b39137 feat(p2p): Add decentralized threat intelligence sharing via mesh
Share CrowdSec bans and mitmproxy detections between mesh nodes using
the existing blockchain chain + gossip sync. Received IOCs from trusted
peers are auto-applied as CrowdSec decisions based on a three-tier trust
model (direct/transitive/unknown).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-03 11:13:51 +01:00

69 lines
1.6 KiB
Plaintext

config p2p 'main'
option enabled '1'
option node_name ''
option discovery_enabled '1'
option discovery_method 'mdns'
option sharing_enabled '1'
option auto_sync '1'
option sync_interval '60'
# Multi-address mesh support
option advertise_wan '1'
option advertise_wireguard '1'
option prefer_wireguard '1'
config dns_federation 'dns'
option enabled '0'
option primary_dns '127.0.0.1:53'
option sync_enabled '1'
option base_domain 'sb.local'
config wireguard_mesh 'wireguard'
option enabled '0'
option listen_port '51820'
option network_cidr '10.100.0.0/24'
option auto_configure '1'
config haproxy 'haproxy'
option enabled '0'
option strategy 'round-robin'
option health_check '1'
option failover '1'
config hub_registry 'registry'
option base_url 'sb.local'
option cache_enabled '1'
option cache_ttl '300'
config maas 'maas'
option enabled '0'
option auto_register '1'
option sync_interval '60'
config gitea 'gitea'
option enabled '0'
option server_url ''
option repo_name 'secubox-backup'
option repo_owner ''
option access_token ''
option auto_backup '0'
option backup_interval '3600'
option backup_on_change '1'
option include_configs '1'
option include_packages '1'
option include_scripts '1'
config backup 'backup'
option enabled '1'
option backup_dir '/etc/secubox/backups'
option max_backups '10'
option auto_cleanup '1'
config threat_intel 'threat_intel'
option enabled '1'
option auto_apply '1'
option apply_transitive '1'
option min_severity 'high'
option collect_interval '900'
option max_iocs_per_batch '20'
option ioc_ttl '86400'