secubox-openwrt/package/secubox/secubox-app-matrix/files/etc/config/matrix
CyberMind-FR b6747c197e feat(security): Add instant ban feature and user management
- Add enhanced instant ban for critical threats (SQL injection, CVE exploits, RCE)
  - CrowdSec trigger scenario for single-hit bans on severity=critical
  - Instant ban daemon (10s polling) for rapid response
  - UCI options: instant_ban_enabled, instant_ban_duration (48h default)
  - WAF addon updated to route critical threats to instant-ban.log

- Add centralized user management (secubox-core-users, luci-app-secubox-users)
  - CLI tool: secubox-users add/del/passwd/list/sync/status
  - LuCI dashboard under System > SecuBox Users
  - Unified user provisioning across Nextcloud, PeerTube, Matrix, Jabber, Email

- Add Matrix/Conduit integration (secubox-app-matrix, luci-app-matrix)
  - LXC-based Conduit homeserver deployment
  - Full RPCD handler with user/room management
  - HAProxy integration for federation

- Add provision-users.sh script for bulk user creation
- Update secubox-feed with new IPKs

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-19 20:17:28 +01:00

41 lines
864 B
Plaintext

config matrix 'main'
option enabled '0'
option data_path '/srv/matrix'
option memory_limit '512'
config matrix 'server'
option hostname 'matrix.local'
option port '8448'
option http_port '8008'
option registration_enabled '0'
option registration_token ''
option max_request_size '20971520'
config matrix 'federation'
option enabled '1'
option allow_public_rooms '1'
option trusted_servers 'matrix.org'
config matrix 'admin'
option email 'admin@localhost'
option initial_user 'admin'
option initial_password ''
config matrix 'database'
option backend 'rocksdb'
option cache_capacity '300'
config matrix 'network'
option domain ''
option haproxy '0'
option haproxy_ssl '1'
option firewall_wan '0'
config matrix 'identity'
option did_linked '0'
option did_user ''
config matrix 'mesh'
option published '0'
option service_name 'matrix'