MirrorNet Core (secubox-mirrornet): - DID-based identity (did:plc:) with keypair management - Peer reputation scoring (0-100) with trust levels - Service mirroring via reverse proxy chaining - Enhanced gossip protocol with priority routing - Health monitoring with anomaly detection - mirrorctl CLI with 30+ commands Identity Package (secubox-identity): - Standalone DID generation (AT Protocol compatible) - HMAC-SHA256 keys with Ed25519 fallback - Key rotation with backup support - Trust scoring integration - identityctl CLI with 25+ commands P2P Intel Package (secubox-p2p-intel): - Signed IOC sharing for mesh - Collectors: CrowdSec, mitmproxy, WAF, DNS Guard - Cryptographic signing and validation - Source trust verification - Application: nftables/iptables/CrowdSec - Approval workflow for manual review - p2p-intelctl CLI with 20+ commands LuCI Dashboard (luci-app-secubox-mirror): - Identity card with DID, hostname, role - Peer reputation table with trust levels - Gossip protocol statistics - Health alerts with acknowledgment - RPCD handler with 15 methods Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
19 lines
520 B
Plaintext
19 lines
520 B
Plaintext
config identity 'main'
|
|
option enabled '1'
|
|
option did_method 'plc'
|
|
# did:plc is the primary method (compatible with AT Protocol)
|
|
|
|
config keys 'keys'
|
|
option rotation_days '90'
|
|
option backup_enabled '1'
|
|
option algorithm 'hmac-sha256'
|
|
# Note: Ed25519 preferred but not always available on OpenWrt
|
|
|
|
config trust 'trust'
|
|
option enabled '1'
|
|
option initial_score '50'
|
|
option min_trust '20'
|
|
option ban_threshold '10'
|
|
option verification_required '0'
|
|
# If 1, requires signature verification for all peer interactions
|