gandalf/secubox-openwrt
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
L'appliance de cybersécurité 100% open source qui embarque wizard, profils et App Store sur OpenWrt 24.10. https://secubox.maegia.tv/
748 Commits 4 Branches 294 Tags 320 MiB
HTML 44.8%
JavaScript 25.1%
Shell 17.9%
CSS 7.5%
EJS 2.2%
Other 2.5%
b64f9a0a1d
Go to file
CyberMind-FR b64f9a0a1d feat(appstore): Implement KISS Evolution - feeds, profiles, skills, feedback 
Add four major features to enhance SecuBox AppStore:

1. Feed Source Management:
   - Feed types: published, unpublished, development
   - Share tokens for private feed access
   - CLI: secubox feed list/add/share/import
   - LuCI: Feed type badges and share URLs in catalog-sources

2. Profile Export/Import:
   - Export configurations with feed sources embedded
   - Import from URL or file with merge/replace modes
   - CLI: secubox profile export/import/share
   - LuCI: New profiles.js view with export/import dialogs

3. Skill System:
   - Capability discovery from module catalogs
   - Quality indicators based on provider count
   - CLI: secubox skill list/providers/install/check
   - LuCI: New skills.js view with provider browser

4. Feedback Loop:
   - Issue reporting and resolution tracking
   - Search existing resolutions
   - CLI: secubox feedback report/resolve/search/list
   - LuCI: New feedback.js view for knowledge base

Technical changes:
- RPCD backend with 17 new API methods
- POSIX shell compatibility fixes (ESC via printf, tr A-Z a-z)
- LuCI menu entries for new views

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-30 19:46:27 +01:00
.claude feat(appstore): Implement KISS Evolution - feeds, profiles, skills, feedback 2026-01-30 19:46:27 +01:00
.codex docs: Update README v0.16.0 with 38 modules, add CHANGELOG 2026-01-27 10:58:48 +01:00
.gitea/workflows feat(appstore): Implement KISS Evolution - feeds, profiles, skills, feedback 2026-01-30 19:46:27 +01:00
.github fix: Remove duplicate packages and disable sheeva64 device 2026-01-09 20:02:45 +01:00
.secubox-reports
.vscode
acl luci-app-vhost-manager: migrate to vhosts config 2025-12-29 16:31:18 +01:00
docs chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00
DOCS synch 2026-01-17 06:59:37 +01:00
EXAMPLES fix: Rename JS example file to avoid validation errors 2026-01-09 20:13:44 +01:00
package/secubox feat(appstore): Implement KISS Evolution - feeds, profiles, skills, feedback 2026-01-30 19:46:27 +01:00
scripts chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00
secubox-tools feat(appstore): Implement KISS Evolution - feeds, profiles, skills, feedback 2026-01-30 19:46:27 +01:00
site chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00
templates feat: Release v0.8.2 - Admin Control Center, Documentation Mirror & Docker Automation 2026-01-04 08:29:31 +01:00
.config chore: Add build configuration and update settings 2026-01-10 18:32:17 +01:00
.gitignore feat(appstore): Implement KISS Evolution - feeds, profiles, skills, feedback 2026-01-30 19:46:27 +01:00
AGENTS.md hello 2026-01-04 19:50:25 +01:00
CHANGELOG.md docs: Update README v0.16.0 with 38 modules, add CHANGELOG 2026-01-27 10:58:48 +01:00
CLAUDE.md feat: Add HTTP health checks, portal speedtest, and fix cert detection 2026-01-30 19:46:26 +01:00
DEBUG_GUIDE.md hello 2026-01-04 19:50:25 +01:00
decisions fix: Use correct UCI section types in SecuBox settings view (v0.6.0-r12) 2026-01-07 12:18:18 +01:00
DEPLOY_UPDATES.md fix(luci-app-secubox-admin): remove luci-app-secubox dependency to fix installation conflict 2026-01-04 15:15:05 +01:00
deploy-modules-with-theme.sh
deploy-theme.sh
deploy-to-router.sh fix(deploy): correct package search paths for local-build.sh 2026-01-04 16:13:57 +01:00
ENHANCEMENTS_V2.md hello 2026-01-04 19:50:25 +01:00
enrich-catalog.py hello 2026-01-04 19:50:25 +01:00
mkdocs.yml chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00
plugins refactor secubox app packaging and theme 2025-12-29 21:57:12 +01:00
profiles refactor secubox app packaging and theme 2025-12-29 21:57:12 +01:00
README.md docs: Update README v0.16.0 with 38 modules, add CHANGELOG 2026-01-27 10:58:48 +01:00
rpc_reload.sh
RPC_TIMEOUT_FIXES.md hello 2026-01-04 19:50:25 +01:00
test-direct.js
test-modules-simple.js
TIMEOUT_FIX.md hello 2026-01-04 19:50:25 +01:00
TODO-ANALYSE.md docs: Update README v0.16.0 with 38 modules, add CHANGELOG 2026-01-27 10:58:48 +01:00
WIKI-SETUP-GUIDE.md chore: Update GitHub repo URL to CyberMind-FR organization 2026-01-14 09:44:01 +01:00

README.md

SecuBox - Security Suite for OpenWrt

Version: 0.16.0 Last Updated: 2026-01-27 Status: Active Development Modules: 38 LuCI Applications

Build OpenWrt Packages License

Overview

SecuBox is a comprehensive security and network management suite for OpenWrt, providing a unified ecosystem of 38 specialized dashboards and tools. All modules are compiled automatically for multiple OpenWrt architectures via GitHub Actions.

Website: secubox.cybermood.eu Publisher: CyberMind.fr

SecuBox Modules

SecuBox Core (5 modules)

Module Version Description
luci-app-secubox 0.7.1 Central dashboard/Hub for all SecuBox modules
luci-app-secubox-portal 0.7.0 Unified entry point with tabbed navigation
luci-app-secubox-admin 1.0.0 Admin control center with appstore and monitoring
luci-app-secubox-bonus 0.2.0 Documentation, local repo, and app store
luci-app-system-hub 0.5.1 Central system control with logs and backup

Security & Threat Management (9 modules)

Module Version Description
luci-app-crowdsec-dashboard 0.7.0 Real-time CrowdSec security monitoring
luci-app-secubox-security-threats 1.0.0 Unified netifyd DPI + CrowdSec intelligence
luci-app-client-guardian 0.4.0 Network access, captive portal, parental controls
luci-app-auth-guardian 0.4.0 OAuth2/OIDC authentication, voucher system
luci-app-exposure 1.0.0 Service exposure manager
luci-app-tor-shield 1.0.0 Tor anonymization dashboard
luci-app-mitmproxy 0.4.0 HTTPS traffic inspection
luci-app-cyberfeed 0.1.1 Cyberpunk RSS feed aggregator
luci-app-ksm-manager 0.4.0 Cryptographic key/HSM management

Deep Packet Inspection (2 modules)

Module Version Description
luci-app-ndpid 1.1.2 nDPId deep packet inspection dashboard
luci-app-secubox-netifyd 1.2.1 netifyd DPI with real-time flow monitoring

Network & Connectivity (8 modules)

Module Version Description
luci-app-vhost-manager 0.5.0 Nginx reverse proxy with Let's Encrypt SSL
luci-app-haproxy 1.0.0 Load balancer with vhosts and SSL
luci-app-wireguard-dashboard 0.7.0 WireGuard VPN monitoring
luci-app-network-modes 0.5.0 Sniffer, AP, Relay, Router modes
luci-app-network-tweaks 1.0.0 Auto Proxy DNS & Hosts from vhosts
luci-app-mqtt-bridge 0.4.0 USB-to-MQTT IoT hub
luci-app-cdn-cache 0.5.0 Content delivery optimization
luci-app-media-flow 0.6.4 Streaming detection (Netflix, YouTube, Spotify)

Bandwidth & Traffic Management (2 modules)

Module Version Description
luci-app-bandwidth-manager 0.5.0 QoS rules, client quotas, SQM integration
luci-app-traffic-shaper 0.4.0 TC/CAKE traffic shaping

Content & Web Platforms (5 modules)

Module Version Description
luci-app-gitea 1.0.0 Gitea Platform management
luci-app-hexojs 1.0.0 Hexo static site generator
luci-app-metabolizer 1.0.0 Metabolizer CMS support
luci-app-magicmirror2 0.4.0 MagicMirror2 smart display
luci-app-mmpm 0.2.0 MagicMirror Package Manager

AI/LLM & Analytics (4 modules)

Module Version Description
luci-app-localai 0.1.0 LocalAI LLM management
luci-app-ollama 0.1.0 Ollama LLM management
luci-app-glances 1.0.0 Glances system monitoring
luci-app-netdata-dashboard 0.5.0 Real-time Netdata monitoring

Streaming & Data Processing (2 modules)

Module Version Description
luci-app-streamlit 1.0.0 Streamlit Platform management
luci-app-picobrew 1.0.0 PicoBrew Server management

IoT & Smart Devices (1 module)

Module Version Description
luci-app-zigbee2mqtt 1.0.0 Zigbee2MQTT docker management

Supported Architectures

ARM 64-bit (AArch64)

Target Devices
aarch64-cortex-a53 ESPRESSObin, BananaPi R64
aarch64-cortex-a72 MOCHAbin, Raspberry Pi 4, NanoPi R4S
mediatek-filogic GL.iNet MT3000, BananaPi R3
rockchip-armv8 NanoPi R4S/R5S, FriendlyARM
bcm27xx-bcm2711 Raspberry Pi 4, Compute Module 4

ARM 32-bit

Target Devices
arm-cortex-a7-neon Orange Pi, BananaPi, Allwinner
arm-cortex-a9-neon Linksys WRT, Turris Omnia
qualcomm-ipq40xx Google WiFi, Zyxel NBG6617

MIPS

Target Devices
mips-24kc TP-Link Archer, Ubiquiti
mipsel-24kc Xiaomi, GL.iNet, Netgear

x86

Target Devices
x86-64 PC, VMs, Docker, Proxmox

Installation

From Pre-built Packages

Download from GitHub Releases:

opkg update
opkg install luci-app-secubox-portal_*.ipk
opkg install luci-app-system-hub_*.ipk
opkg install luci-app-crowdsec-dashboard_*.ipk

Build from Source

# Clone into OpenWrt SDK
cd ~/openwrt-sdk/package/
git clone https://github.com/CyberMind-FR/secubox-openwrt.git secubox

# Build
cd ~/openwrt-sdk/
make package/secubox/luci-app-secubox-portal/compile V=s

Add as OpenWrt Feed

Add to feeds.conf.default:

src-git secubox https://github.com/CyberMind-FR/secubox-openwrt.git

Then:

./scripts/feeds update secubox
./scripts/feeds install -a -p secubox
make menuconfig  # Select modules under LuCI > Applications
make V=s

Repository Structure

secubox-openwrt/
├── package/secubox/           # All 38 SecuBox LuCI packages
│   ├── luci-app-secubox/      # Core hub
│   ├── luci-app-secubox-portal/
│   ├── luci-app-secubox-admin/
│   ├── luci-app-crowdsec-dashboard/
│   ├── luci-app-secubox-netifyd/
│   ├── luci-app-haproxy/
│   ├── luci-app-streamlit/
│   ├── luci-app-gitea/
│   ├── luci-app-hexojs/
│   └── ... (38 modules total)
├── secubox-tools/             # Build tools and local SDK
│   ├── local-build.sh         # Local package builder
│   ├── validate-modules.sh    # Module validation
│   ├── openwrt/               # Full toolchain (for Go/native builds)
│   └── sdk/                   # OpenWrt SDK (for LuCI apps)
├── DOCS/                      # Documentation
│   ├── DEVELOPMENT-GUIDELINES.md
│   ├── QUICK-START.md
│   └── VALIDATION-GUIDE.md
└── .github/workflows/         # CI/CD

Build Requirements

SDK builds (for LuCI apps - shell/Lua packages):

./secubox-tools/local-build.sh build luci-app-crowdsec-dashboard

Full toolchain builds (for Go/native packages):

cd secubox-tools/openwrt
make package/crowdsec/compile V=s
Package Build Type Reason
crowdsec Toolchain Go binary with CGO
crowdsec-firewall-bouncer Toolchain Go binary with CGO
netifyd Toolchain C++ native binary
nodogsplash Toolchain C native binary
All luci-app-* SDK Shell/Lua/JS packages

OpenWrt Compatibility

Version Status Package Format
25.x Testing .apk
24.10.x Recommended .ipk
23.05.x Supported .ipk

Development

Developer Documentation

Guide Description
DOCS/DEVELOPMENT-GUIDELINES.md Design System, RPCD/ubus, ACL, JavaScript
DOCS/QUICK-START.md Quick reference and code templates
DOCS/VALIDATION-GUIDE.md Module validation procedures
CLAUDE.md OpenWrt shell scripting guidelines
secubox-tools/README.md Build tools and SDK usage

Critical Rules

  1. RPCD naming: filename = ubus object (luci.system-hub)
  2. Menu paths: path = view file (system-hub/overview.js)
  3. Permissions: RPCD=755, CSS/JS=644
  4. Validate: ./secubox-tools/validate-modules.sh
  5. Go/native packages: Use full toolchain, not SDK

Public Pages

SecuBox includes public pages accessible without authentication:

  • Crowdfunding Campaign - Support the project development
  • Bug Bounty Program - Security vulnerability reporting
  • Development Status - Modules list, roadmap, changelog

Access at: https://your-secubox/cgi-bin/luci/secubox-public/

Links

License

Apache-2.0 © 2024-2026 CyberMind.fr

Contributing

  1. Fork the repository
  2. Create a feature branch (git checkout -b feature/amazing-feature)
  3. Commit your changes (git commit -m 'Add amazing feature')
  4. Push to the branch (git push origin feature/amazing-feature)
  5. Open a Pull Request

Author

Gandalf - CyberMind.fr

Made with love in France