CyberMind-FR
fbd0abd716
Problem: get_overview RPC was timing out (30s+) due to 12+ sequential cscli calls with CAPI data, causing "TypeError: can't assign to property 'countries' on 5" in LuCI. Solution: - Pre-cached architecture with /tmp/secubox/crowdsec-overview.json - get_overview() returns cached data instantly (0.08s) - refresh_overview_cache() runs via cron every minute - Reduced cscli calls from 12 to 4 (metrics, decisions, alerts, bouncers) - Extract flat decisions array using jsonfilter - Manual JSON building to avoid jshn argument size limits - Add /etc/cron.d/crowdsec-dashboard for periodic refresh Also includes: - Streamlit Control: Deploy functionality like metablogizer - Streamlit Control: Enhanced Security page with WAF/CrowdSec data - mitmproxy LuCI: Add timeout race to prevent page hang Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
82 lines
2.7 KiB
Makefile
82 lines
2.7 KiB
Makefile
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
# Copyright (C) 2024 CyberMind.fr - Gandalf
|
|
#
|
|
# LuCI CrowdSec Dashboard - Real-time security monitoring interface
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=luci-app-crowdsec-dashboard
|
|
PKG_VERSION:=0.8.0
|
|
PKG_RELEASE:=1
|
|
PKG_ARCH:=all
|
|
|
|
PKG_LICENSE:=Apache-2.0
|
|
PKG_MAINTAINER:=CyberMind <contact@cybermind.fr>
|
|
|
|
LUCI_TITLE:=LuCI CrowdSec Dashboard
|
|
LUCI_DESCRIPTION:=Real-time security monitoring dashboard for CrowdSec on OpenWrt
|
|
LUCI_DEPENDS:=+luci-base +luci-lib-jsonc +rpcd +rpcd-mod-luci +crowdsec
|
|
|
|
LUCI_PKGARCH:=all
|
|
|
|
|
|
include $(TOPDIR)/feeds/luci/luci.mk
|
|
|
|
define Package/luci-app-crowdsec-dashboard/conffiles
|
|
/etc/config/crowdsec-dashboard
|
|
/etc/config/crowdsec_abuseipdb
|
|
endef
|
|
|
|
define Package/luci-app-crowdsec-dashboard/install
|
|
# UCI config files
|
|
$(INSTALL_DIR) $(1)/etc/config
|
|
$(INSTALL_CONF) ./root/etc/config/crowdsec-dashboard $(1)/etc/config/
|
|
$(INSTALL_CONF) ./root/etc/config/crowdsec_abuseipdb $(1)/etc/config/
|
|
|
|
# Cron jobs
|
|
$(INSTALL_DIR) $(1)/etc/cron.d
|
|
$(INSTALL_DATA) ./root/etc/cron.d/crowdsec-reporter $(1)/etc/cron.d/
|
|
$(INSTALL_DATA) ./root/etc/cron.d/crowdsec-dashboard $(1)/etc/cron.d/
|
|
|
|
# Reporter script
|
|
$(INSTALL_DIR) $(1)/usr/sbin
|
|
$(INSTALL_BIN) ./root/usr/sbin/crowdsec-reporter.sh $(1)/usr/sbin/
|
|
|
|
# RPCD backends (MUST be 755 for ubus calls)
|
|
$(INSTALL_DIR) $(1)/usr/libexec/rpcd
|
|
$(INSTALL_BIN) ./root/usr/libexec/rpcd/luci.crowdsec-dashboard $(1)/usr/libexec/rpcd/
|
|
$(INSTALL_BIN) ./root/usr/libexec/rpcd/luci.crowdsec-abuseipdb $(1)/usr/libexec/rpcd/
|
|
|
|
# ACL permissions
|
|
$(INSTALL_DIR) $(1)/usr/share/rpcd/acl.d
|
|
$(INSTALL_DATA) ./root/usr/share/rpcd/acl.d/luci-app-crowdsec-dashboard.json $(1)/usr/share/rpcd/acl.d/
|
|
|
|
# LuCI menu
|
|
$(INSTALL_DIR) $(1)/usr/share/luci/menu.d
|
|
$(INSTALL_DATA) ./root/usr/share/luci/menu.d/luci-app-crowdsec-dashboard.json $(1)/usr/share/luci/menu.d/
|
|
|
|
# JavaScript API module
|
|
$(INSTALL_DIR) $(1)/www/luci-static/resources/crowdsec-dashboard
|
|
$(INSTALL_DATA) ./htdocs/luci-static/resources/crowdsec-dashboard/*.js $(1)/www/luci-static/resources/crowdsec-dashboard/
|
|
$(INSTALL_DATA) ./htdocs/luci-static/resources/crowdsec-dashboard/*.css $(1)/www/luci-static/resources/crowdsec-dashboard/
|
|
|
|
# JavaScript views
|
|
$(INSTALL_DIR) $(1)/www/luci-static/resources/view/crowdsec-dashboard
|
|
$(INSTALL_DATA) ./htdocs/luci-static/resources/view/crowdsec-dashboard/*.js $(1)/www/luci-static/resources/view/crowdsec-dashboard/
|
|
endef
|
|
|
|
define Package/luci-app-crowdsec-dashboard/postinst
|
|
#!/bin/sh
|
|
[ -n "$${IPKG_INSTROOT}" ] || {
|
|
/etc/init.d/rpcd restart
|
|
rm -rf /tmp/luci-modulecache /tmp/luci-indexcache 2>/dev/null
|
|
echo "CrowdSec Dashboard installed."
|
|
}
|
|
exit 0
|
|
endef
|
|
|
|
# call BuildPackage - OpenWrt buildroot
|
|
$(eval $(call BuildPackage,luci-app-crowdsec-dashboard))
|