- Add enhanced instant ban for critical threats (SQL injection, CVE exploits, RCE) - CrowdSec trigger scenario for single-hit bans on severity=critical - Instant ban daemon (10s polling) for rapid response - UCI options: instant_ban_enabled, instant_ban_duration (48h default) - WAF addon updated to route critical threats to instant-ban.log - Add centralized user management (secubox-core-users, luci-app-secubox-users) - CLI tool: secubox-users add/del/passwd/list/sync/status - LuCI dashboard under System > SecuBox Users - Unified user provisioning across Nextcloud, PeerTube, Matrix, Jabber, Email - Add Matrix/Conduit integration (secubox-app-matrix, luci-app-matrix) - LXC-based Conduit homeserver deployment - Full RPCD handler with user/room management - HAProxy integration for federation - Add provision-users.sh script for bulk user creation - Update secubox-feed with new IPKs Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
38 lines
603 B
JSON
38 lines
603 B
JSON
{
|
|
"luci-app-matrix": {
|
|
"description": "Grant access to Matrix homeserver management",
|
|
"read": {
|
|
"ubus": {
|
|
"luci.matrix": [
|
|
"status",
|
|
"logs",
|
|
"federation_status",
|
|
"identity_status",
|
|
"mesh_status"
|
|
]
|
|
},
|
|
"uci": ["matrix"]
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"luci.matrix": [
|
|
"start",
|
|
"stop",
|
|
"install",
|
|
"uninstall",
|
|
"update",
|
|
"emancipate",
|
|
"configure_haproxy",
|
|
"user_add",
|
|
"user_del",
|
|
"identity_link",
|
|
"identity_unlink",
|
|
"mesh_publish",
|
|
"mesh_unpublish"
|
|
]
|
|
},
|
|
"uci": ["matrix"]
|
|
}
|
|
}
|
|
}
|