secubox-openwrt/package/secubox/secubox-app-crowdsec-bouncer/Makefile
CyberMind-FR a0d3faed9e feat: Add local crowdsec-firewall-bouncer with nftables integration
New package: crowdsec-firewall-bouncer (v0.0.34)
- Based on official OpenWrt package from openwrt/packages
- Full nftables integration with IPv4/IPv6 support
- Timeout-based sets for automatic ban expiration
- Input and forward chain filtering
- Interface-based filtering
- procd service management with ujail support
- UCI configuration

Init script features:
- Creates nftables tables: crowdsec (IPv4), crowdsec6 (IPv6)
- Creates timeout-enabled sets for blocklists
- Generates YAML config from UCI settings
- Automatic cleanup on service stop

Updated secubox-app-crowdsec-bouncer to v0.0.32

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-11 07:33:45 +01:00

44 lines
1.2 KiB
Makefile

include $(TOPDIR)/rules.mk
PKG_NAME:=secubox-app-crowdsec-bouncer
PKG_VERSION:=0.0.32
PKG_RELEASE:=1
PKG_ARCH:=all
PKG_MAINTAINER:=CyberMind Studio <contact@cybermind.fr>
PKG_LICENSE:=MIT
include $(INCLUDE_DIR)/package.mk
define Package/secubox-app-crowdsec-bouncer
SECTION:=net
CATEGORY:=Network
PKGARCH:=all
SUBMENU:=SecuBox Apps
TITLE:=SecuBox CrowdSec Firewall Bouncer wrapper
DEPENDS:=+uci +libuci +crowdsec-firewall-bouncer +crowdsec +nftables
endef
define Package/secubox-app-crowdsec-bouncer/description
Enhanced wrapper for CrowdSec Firewall Bouncer with automatic configuration
and registration for SecuBox-powered OpenWrt routers. Provides nftables-based
IP blocking from CrowdSec decisions with automatic API key management and
interface detection.
endef
define Package/secubox-app-crowdsec-bouncer/conffiles
/etc/config/crowdsec
endef
define Build/Compile
endef
define Package/secubox-app-crowdsec-bouncer/install
$(INSTALL_DIR) $(1)/etc/config
$(INSTALL_CONF) ./files/crowdsec-bouncer.config $(1)/etc/config/crowdsec-bouncer
$(INSTALL_DIR) $(1)/etc/uci-defaults
$(INSTALL_BIN) ./files/crowdsec-bouncer.defaults $(1)/etc/uci-defaults/99_crowdsec-bouncer
endef
$(eval $(call BuildPackage,secubox-app-crowdsec-bouncer))