secubox

secubox synced commits to feature/760-standardize-secubox-lan-to-192-168-10-0 at secubox/secubox-deb from mirror 2026-06-27 16:06:00 +00:00

secubox synced new reference feature/760-standardize-secubox-lan-to-192-168-10-0 to secubox/secubox-deb from mirror 2026-06-27 16:06:00 +00:00

secubox synced commits to feature/761-fix-podcaster-audio-player-stops-every-f at secubox/secubox-deb from mirror 2026-06-27 16:06:00 +00:00

secubox synced new reference feature/761-fix-podcaster-audio-player-stops-every-f to secubox/secubox-deb from mirror 2026-06-27 16:06:00 +00:00

secubox synced commits to feature/758-nft-based-network-stats-log-counter-drop at secubox/secubox-deb from mirror 2026-06-27 15:06:02 +00:00

secubox synced new reference feature/758-nft-based-network-stats-log-counter-drop to secubox/secubox-deb from mirror 2026-06-27 15:06:02 +00:00

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-27 15:06:02 +00:00

47076b24d3 fix(netplan): mochabin — copper eth2 as 2nd DHCP WAN candidate, out of br-lan

cb6eee4b0b docs: netboot validation + c3box first install to Debian + #748 (ref #748 #737)

5d505cae16 Merge PR #759 — nft-based network stats dashboard (#758)

1c6a978748 feat(toolbox): add Réseau dashboard tab with nft throughput sparklines (ref #758)

9696cdad13 feat(toolbox): network_drops sourced from hub netstats snapshot (ref #758)

Compare 17 commits »

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-27 08:06:02 +00:00

740cbd291f release: toolbox-ng 0.1.26 (#757 reval nudge) + toolbox 2.7.24 (Liveness card removed)

d203b9aa8f Merge branch 'feature/757-sw-revalidation-nudge' — SW revalidation nudge (#757) + remove Liveness card

52d358c9d8 ui(toolbox): remove redundant Liveness card — version stays in the top badge (ref #757)

20fca011a1 feat(sbxmitm): SW revalidation nudge — strip If-None-Match/If-Modified-Since for allow-listed HTML fetches (ref #757)

fb90349670 docs(sbxmitm): plan — SW revalidation nudge (ref #757)

Compare 12 commits »

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-27 07:05:59 +00:00

a76da4f783 release: toolbox-ng 0.1.24 + toolbox 2.7.22 — SW-neuter #753

ad4fc51d21 Merge branch 'feature/753-sw-neuter' — targeted Service-Worker neuter for the R3 banner (ref #753)

bcea1ea4ac chore(toolbox): drop unused json import in sw-candidate test (ref #753)

f6d2e44565 feat(toolbox): SW-neuter auto-learn flush + /__toolbox/sw-candidate ingest (ref #753)

634a08c3ab feat(sbxmitm): wire SWNeuter into mitmPipeline + --sw-neuter-hosts (ref #753)

Compare 9 commits »

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-27 06:06:02 +00:00

72e8cbd2db release(toolbox-ng): 0.1.23 — rebuild master (#751 nonce-CSP) + SBX_DEBUG_CSP

827165e6fd release(toolbox): 2.7.21 — bundle.py banner reconciliation (#754)

0d906b1471 Merge branch 'fix/754-bundle-reconcile' — bundle.py to #740 DOM-API banner + R4 + #752 guard (ref #754)

d1607328fd fix(toolbox): reconcile bundle.py to master — #740 DOM-API banner + R4 tier + #752 top-frame guard (ref #754)

aae47c6e2e Merge branch 'fix/751-sbxmitm-csp-debug' — SBX_DEBUG_CSP banner/CSP diagnostic (ref #751)

Compare 6 commits »

secubox synced commits to feature/748-enhanced-tow-boot-http-netboot-serial-fl at secubox/secubox-deb from mirror 2026-06-26 18:06:01 +00:00

bfb82e0bea fix(tow-boot): guard SYS_WHITE_ON_BLACK on withLogo (headless boards on U-Boot 2023.07) (ref #748)

32808a7008 feat(netboot): bump mochabin Tow-Boot to upstream U-Boot 2023.07 for wget (ref #748)

a5b69abd9c fix(netboot): drop select-only PROT_TCP; add CI diagnostic for CMD_WGET Kconfig deps (ref #748)

6f8273084b fix(netboot): minimal build-clean Tow-Boot Kconfig — wget+TFTP+signed-FIT; drop invalid WGET, defer DSA switch + env-embed (ref #748)

Compare 4 commits »

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-26 18:06:01 +00:00

c46e24f820 Merge branch 'fix/750-health-banner-spa-reinject' — health-banner SPA re-inject guard (ref #750)

3e9f6e8461 fix(hub): re-sync health-banner-open class on re-attach + bump 1.4.7 (ref #750)

4315584f79 fix(hub): health-banner SPA re-inject guard — re-attach on body wipe (ref #750)

Compare 3 commits »

secubox synced commits to feature/748-enhanced-tow-boot-http-netboot-serial-fl at secubox/secubox-deb from mirror 2026-06-26 17:06:00 +00:00

6d70a3186f ci(netboot): push-trigger build-tow-boot on #748 branch + env.VARIANT default (ref #748)

0b1e5caaca ci(netboot): add build-tow-boot workflow to nix-build enhanced Tow-Boot mochabin (ref #748)

3a33e686ed feat(netboot): Add Marvell PPv2 SoC NIC driver (MVPP2, PHY_GIGE) for Armada 7040 ethernet netboot (ref #748)

441b62f729 feat(netboot): enable MV88E6xxx DSA switch (88E6141 Topaz) for lan0-3 netboot on MOCHAbin (ref #748)

Compare 4 commits »

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-26 17:06:00 +00:00

1a8ed97cfe Merge branch 'feature/749-cookies-cross-site-tracker-detection' — cookies cross-site tracker panel (ref #749)

5cc97b1aea fix(cookies): coerce pre_consent_hits to int + await loadCrossSite in refresh (ref #749)

1f5c6ed3e3 feat(cookies): cross-site trackers panel from toolbox R3 (ref #749)

2a9350b9df feat(toolbox): GET /admin/cookie-crosssite endpoint (ref #749)

6f65a1936a feat(toolbox): cookie_xsite_detail aggregation over social_edges (ref #749)

Compare 7 commits »

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-26 16:05:59 +00:00

c8fe9bb148 fix(toolbox): clarify #ads labels — Trackers & pubs, bytes marked as estimate (ref #735)

e87d46f6a7 feat(sbxwaf): inject the real SecuBox health banner (not a custom badge) into first-party HTML (#747)

efac8cec16 feat(sbxwaf): inject SecuBox health/visit widget into first-party HTML (#747)

9561cb4bdb fix(toolbox): Live metrics read cumulative stats (events table is empty under R3) (ref #744)

344bb0738d fix(crowdsec): nftables health detects custom secubox_blacklist table (firewall reported OK)

Compare 8 commits »

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-26 15:06:00 +00:00

e5f0d22dc6 fix(waf-api): crowdsec overlay must not crash the warm refresh (ref #744)

secubox synced commits to feature/748-enhanced-tow-boot-http-netboot-serial-fl at secubox/secubox-deb from mirror 2026-06-26 14:06:00 +00:00

secubox synced new reference feature/748-enhanced-tow-boot-http-netboot-serial-fl to secubox/secubox-deb from mirror 2026-06-26 14:06:00 +00:00

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-26 14:06:00 +00:00

c6d6eb5c75 Merge #744: sbxwaf Go WAF engine + shared internal/ core

2e6cec9b38 fix(waf-api): read sbxwaf threat-log path for the WAF dashboard (ref #744)

b607d7f7d6 docs(waf-ng): package README (WIP) + ignore build artifacts (ref #744)

e5a2c5d287 fix(sbxwaf): final-review wave — vhost cache key, crowdsec LAPI url, body-inspect cap+audit, seccomp, trusted-host skip (ref #744)

11438e394c docs(sbxwaf): bench harness + cutover/rollback runbook with parity-gap gates (ref #744)

Compare 31 commits »

secubox synced commits to master at secubox/secubox-deb from mirror 2026-06-26 10:06:08 +00:00

218a65068a docs(wiki): publish refonte 126 modules to wiki/ — MODULES + CATEGORIES ×4 langues (ref #742)

0bd3b9e035 Merge branch 'docs/742-wiki-refonte-snapshots-webui-determinist'

c01f10c474 docs(wiki): refonte 126 modules — snapshots WebUI déterministes + READMEs 4 langues (ref #742)

165dc21842 fix(security-posture): RuntimeDirectoryPreserve=yes (last unit missing it) (#741)

e53f6a3f46 fix(waf): feed Threats/Blocked/Protected from CrowdSec (zero-metrics) (#733)

Compare 21 commits »