secubox-openwrt/package/secubox/luci-app-matrix/root/usr/share/rpcd/acl.d/luci-app-matrix.json
CyberMind-FR b6747c197e feat(security): Add instant ban feature and user management
- Add enhanced instant ban for critical threats (SQL injection, CVE exploits, RCE)
  - CrowdSec trigger scenario for single-hit bans on severity=critical
  - Instant ban daemon (10s polling) for rapid response
  - UCI options: instant_ban_enabled, instant_ban_duration (48h default)
  - WAF addon updated to route critical threats to instant-ban.log

- Add centralized user management (secubox-core-users, luci-app-secubox-users)
  - CLI tool: secubox-users add/del/passwd/list/sync/status
  - LuCI dashboard under System > SecuBox Users
  - Unified user provisioning across Nextcloud, PeerTube, Matrix, Jabber, Email

- Add Matrix/Conduit integration (secubox-app-matrix, luci-app-matrix)
  - LXC-based Conduit homeserver deployment
  - Full RPCD handler with user/room management
  - HAProxy integration for federation

- Add provision-users.sh script for bulk user creation
- Update secubox-feed with new IPKs

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-19 20:17:28 +01:00

38 lines
603 B
JSON

{
"luci-app-matrix": {
"description": "Grant access to Matrix homeserver management",
"read": {
"ubus": {
"luci.matrix": [
"status",
"logs",
"federation_status",
"identity_status",
"mesh_status"
]
},
"uci": ["matrix"]
},
"write": {
"ubus": {
"luci.matrix": [
"start",
"stop",
"install",
"uninstall",
"update",
"emancipate",
"configure_haproxy",
"user_add",
"user_del",
"identity_link",
"identity_unlink",
"mesh_publish",
"mesh_unpublish"
]
},
"uci": ["matrix"]
}
}
}