secubox-openwrt/package/secubox/luci-app-system-hub/root/usr/share/rpcd/acl.d/luci-app-system-hub.json
CyberMind-FR cec4893db9 feat(security): Implement SysWarden Evolution #1-3 security enhancements
Evolution #1 - IP Blocklist (secubox-app-ipblocklist, luci-app-ipblocklist):
- Pre-emptive blocking layer with ipset (~100k IPs)
- Default sources: Data-Shield, Firehol Level 1
- Supports nftables (fw4) and iptables backends
- LuCI KISS dashboard with sources/whitelist management

Evolution #2 - AbuseIPDB Reporter (luci-app-crowdsec-dashboard v0.8.0):
- New "AbuseIPDB" tab in CrowdSec Dashboard
- crowdsec-reporter.sh CLI for reporting blocked IPs
- RPCD handler luci.crowdsec-abuseipdb with 9 methods
- Cron job for automatic reporting every 15 minutes
- IP reputation checker in dashboard

Evolution #3 - Log Denoising (luci-app-system-hub v0.5.2):
- Three modes: RAW, SMART (noise ratio), SIGNAL_ONLY (filter known IPs)
- Integrates with IP Blocklist ipset + CrowdSec decisions
- RPCD methods: get_denoised_logs, get_denoise_stats
- Denoise mode selector panel with noise ratio indicator

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-20 20:11:24 +01:00

64 lines
1.3 KiB
JSON

{
"luci-app-system-hub": {
"description": "System Hub - Central Control Dashboard",
"read": {
"ubus": {
"luci.system-hub": [
"status",
"get_system_info",
"get_health",
"get_components",
"get_components_by_category",
"list_services",
"get_logs",
"get_denoised_logs",
"get_denoise_stats",
"get_storage",
"get_settings",
"get_backup_schedule",
"list_diagnostics",
"list_diagnostic_profiles",
"get_diagnostic_profile",
"download_diagnostic",
"run_diagnostic_test",
"remote_status",
"remote_get_credentials",
"ttyd_status"
],
"luci.secubox": [
"modules",
"getModules",
"modules_by_category",
"getModuleInfo",
"get_theme",
"getStatus",
"getHealth"
]
}
},
"write": {
"ubus": {
"luci.system-hub": [
"service_action",
"backup_config",
"restore_config",
"set_backup_schedule",
"reboot",
"save_settings",
"collect_diagnostics",
"delete_diagnostic",
"upload_diagnostics",
"remote_install",
"remote_configure",
"remote_service_action",
"remote_save_settings",
"ttyd_install",
"ttyd_start",
"ttyd_stop",
"ttyd_configure"
]
}
}
}
}