secubox-openwrt/package/secubox/secubox-config-advisor/files/etc/config/config-advisor
CyberMind-FR 0f4649c1e0 feat(config-advisor): Add ANSSI CSPN compliance checking packages
secubox-config-advisor:
- 7 check categories (network, firewall, auth, encryption, services, logging, updates)
- 25+ security rules with severity-weighted scoring (0-100, grade A-F)
- Auto-remediation for 7 checks with dry-run mode
- LocalAI integration for AI-powered suggestions
- config-advisorctl CLI with 20+ commands

luci-app-config-advisor:
- Dashboard with score circle, grade, risk level, compliance rate
- Compliance view by category with pass/fail/warn badges
- Remediation view with apply/preview buttons
- Settings for framework, weights, categories, LocalAI

Part of v1.0.0 ANSSI CSPN certification roadmap.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-06 05:56:17 +01:00

38 lines
879 B
Plaintext

config advisor 'main'
option enabled '1'
option check_interval '3600'
# Check every hour
option auto_remediate '0'
# Manual remediation by default
option notification_enabled '1'
config localai 'localai'
option enabled '1'
option url 'http://127.0.0.1:8091'
option model 'mistral'
option min_confidence '75'
config compliance 'compliance'
option framework 'anssi_cspn'
# Frameworks: anssi_cspn, cis, nist, custom
option strict_mode '0'
# Strict mode fails on warnings
option report_format 'json'
config scoring 'scoring'
option weight_critical '40'
option weight_high '25'
option weight_medium '20'
option weight_low '10'
option weight_info '5'
option passing_score '70'
config categories 'categories'
option network '1'
option firewall '1'
option authentication '1'
option encryption '1'
option services '1'
option logging '1'
option updates '1'