Package: secubox-ad-guard
Version: 1.14.1-1~bookworm1
Architecture: all
Maintainer: SecuBox <dev@secubox.local>
Installed-Size: 564
Depends: secubox-core (>= 1.7.1), secubox-toolbox, secubox-aggregator (>= 0.4.1), unbound, python3-httpx | python3-pip, dns-root-data
Recommends: python3-maxminddb
Priority: optional
Section: admin
Filename: pool/main/s/secubox-ad-guard/secubox-ad-guard_1.14.1-1~bookworm1_all.deb
Size: 133172
SHA256: 099454d7cf7f01150eb6c1f0023838ab970d948af9166dee1bae664126869d3a
SHA1: 6024eaf95c88d68031aa212bc9da4f75da353d6a
MD5sum: 8b7979a7280855c57d6440b7285f0baf
Description: SecuBox Ad Guard Module
 Ad and tracker detection with per-device statistics.
 Features blocklist management, delayed blacklisting workflow,
 and device-type classification (IoT, phones, smart TVs, etc.).
 .
 Provides a board-wide DNS ad/tracker sinkhole (#740): compiles the modular
 filter-list resource (EasyList/EasyPrivacy/OISD/HaGeZi/NoScript) and renders
 it as Unbound always_nxdomain local-zones, refreshed weekly by timer.

Package: secubox-aggregator
Version: 0.4.2-1~bookworm1
Architecture: all
Maintainer: CyberMind FR <devel@cybermind.fr>
Installed-Size: 97
Depends: python3:any, python3-httpx, python3, python3-fastapi, python3-uvicorn, secubox-core
Breaks: secubox-groupd (<< 0.3.1~)
Replaces: secubox-groupd (<< 0.3.1~)
Homepage: https://github.com/CyberMind-FR/secubox-deb
Priority: optional
Section: net
Filename: pool/main/s/secubox-aggregator/secubox-aggregator_0.4.2-1~bookworm1_all.deb
Size: 27118
SHA256: 6cbb9b776f1acd50406629af8a81df87053c01fa4d9d48a4267332d97fc5806c
SHA1: 47cf69339b96025fcd59579acb9bbc3d524279eb
MD5sum: 2a7c464616c8811a4bb34803fb37ee92
Description: SecuBox API gateway — master ASGI process
 Mounts SecuBox module FastAPIs as sub-apps under /api/v1/<module>,
 eliminating the duplicated Python interpreter overhead of running
 each module as its own uvicorn process.
 .
 Pilot mounts (per /etc/secubox/aggregator.toml) save ~30 MB RAM per
 migrated module versus a per-module systemd unit. Full migration of
 the ~100 SecuBox modules would free ~3 GB on a typical install.

Package: secubox-annuaire
Version: 0.14.1-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 640
Depends: secubox-core (>= 1.5.24), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-pydantic, python3-cryptography, python3-tomli-w, gnupg, gpg-agent, adduser, util-linux
Breaks: secubox-openpgp (<< 0.3.1~)
Replaces: secubox-openpgp (<< 0.3.1~)
Priority: optional
Section: admin
Filename: pool/main/s/secubox-annuaire/secubox-annuaire_0.14.1-1~bookworm1_all.deb
Size: 142202
SHA256: 78d1330128166385050026d0cffad24e9802734a40b1a8231ca659967c7e3b83
SHA1: 66cafa742ce86b6e75d18e41e3819f53d8d633bd
MD5sum: d837c33d779388826a63d6662cd1dbda
Description: SecuBox Annuaire-Miroir — federated self-certifying trust substrate
 The Annuaire-Miroir is the trust directory for SecuBox-DEB, providing a
 BLAKE2b-chained, CONIKS-style append-only audit journal with four protocols:
 AUTO-ADD (provisional discovery), INVITE (capability-based membership),
 PROPOSAL (anti-plutocratic governance), and EMANCIPATE (staged anchor removal).
 All objects are Ed25519-signed, RFC 3339-timestamped, and access-gated by
 the can() resolver. Served on /run/secubox/annuaire.sock, JWT-gated.

Package: secubox-appstore
Version: 0.9.0-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 405
Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, sudo
Breaks: secubox-metacatalog (<< 1.2.5~)
Replaces: secubox-metacatalog (<< 1.2.5~)
Priority: optional
Section: admin
Filename: pool/main/s/secubox-appstore/secubox-appstore_0.9.0-1~bookworm1_all.deb
Size: 72170
SHA256: 5b4dab4f6e79765c9e05fbf04e392e1ca895405ea6407de57254a5053555dc81
SHA1: f2d95a6f89e53c29a7771e043ddffdc443e55a66
MD5sum: c1371fa047a41c7d4759f801ce99671e
Description: SecuBox App Store — module catalog & lifecycle (Phase A)
 Categorized, tiered, searchable catalog of SecuBox modules with live
 install/run state, served as a hub web UI. Phase A is read-only; install,
 enable/disable, preferences and profiles arrive in later phases via a
 privileged worker.

Package: secubox-auth
Version: 1.8.2-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 918
Depends: python3-aiosqlite, python3-fastapi, python3-uvicorn, python3-argon2, python3-pyotp, python3-jwt, secubox-core (>= 1.5.47~), secubox-annuaire (>= 0.10.11~), python3-qrcode, python3-jsonschema, python3-tomli | python3 (>= 3.11), jq, python3, python3-cryptography, secubox-aggregator
Recommends: secubox-webos (>= 1.0.338)
Breaks: secubox-oidc (<< 0.1.3~), secubox-sbxid (<< 0.4.20~), secubox-users (<< 1.8.18~)
Replaces: secubox-oidc (<< 0.1.3~), secubox-sbxid (<< 0.4.20~), secubox-users (<< 1.8.18~)
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: net
Filename: pool/main/s/secubox-auth/secubox-auth_1.8.2-1~bookworm1_all.deb
Size: 205192
SHA256: 4741c4d1b7627b108b55482c553d6b25db0f8bd956b91f8bf4f7bcc8910279ce
SHA1: 66294086105f10ea61120944de398dcb64ef677a
MD5sum: 30077b9e36804a9f4ed1af8491b7cad3
Description: SecuBox Auth Guardian
 Authentification avancée : OAuth2 (Google/GitHub), vouchers, sessions, portail splash.
 .
 Port Debian bookworm de luci-app-auth-guardian (SecuBox OpenWrt / CyberMind.fr).

Package: secubox-autoload
Version: 0.6.1-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 162
Depends: python3 (>= 3.11), secubox-core, wireguard-tools, nftables, adduser
Recommends: apparmor
Priority: optional
Section: admin
Filename: pool/main/s/secubox-autoload/secubox-autoload_0.6.1-1~bookworm1_all.deb
Size: 39944
SHA256: 0d10b7f897d12c03cd4be3f1cbdf5b1893ac416858d3f6455c22515ec0d7449f
SHA1: 96497414517f8ce84c8f84fd13bddbcad310e2e8
MD5sum: 8d1b08fbeb91cc7f1b9897b9ddf48232
Description: SecuBox — provisionnement réseau Auto-Load, côté infrastructure
 Jetons clients (un par box, à usage unique, stockés sous forme d'empreinte),
 statut d'abonnement avec échéance, révocation, préenregistrement par numéro de
 série, service d'enrôlement et panel, hub WireGuard (10.64.0.0/16, udp/51830).
 Parent #2182. Installé sur l'infrastructure (admin.gk2.secubox.in) seulement.

Package: secubox-autoload-agent
Version: 0.9.0-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 89
Depends: python3 (>= 3.11), wireguard-tools, gpgv, gnupg, secubox-premier-pas (>= 0.5.0), secubox-profiles
Priority: optional
Section: admin
Filename: pool/main/s/secubox-autoload-agent/secubox-autoload-agent_0.9.0-1~bookworm1_all.deb
Size: 22468
SHA256: f8640bed44d95167973f9eff32edbe73f0291e8140937137ca7377fe429e7a93
SHA1: c08c042574953d8eb81efa982883016a31a745e4
MD5sum: 03aa7956916d846e102274702d459018
Description: SecuBox — provisionnement réseau Auto-Load, côté box
 Agent de la box cliente : clé WireGuard générée sur la box, tunnel sortant
 vers l'infrastructure (admin.gk2.secubox.in), jamais de port entrant.
 Parent #2182.

Package: secubox-bbs
Version: 0.30.12-1~bookworm1
Architecture: arm64
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 24240
Depends: adduser, acl
Recommends: nginx, qrencode, secubox-core, chromium, python3-httpx
Suggests: secubox-billets
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: web
Filename: pool/main/s/secubox-bbs/secubox-bbs_0.30.12-1~bookworm1_arm64.deb
Size: 10564118
SHA256: d70f621d8c614c21a2ecbef349a6288c57a845ee5b0b48fec995896cffcca58a
SHA1: ba3dc4275cb255fbb084e0856e21a9d60e6ac591
MD5sum: 64766a6dc826db8d36d664791583218c
Description: SecuBox-Deb — BBS auto-heberge (forums, bibliotheque, publication)
 Un BBS moderne pour une SecuBox : salons, fils, bibliotheque de fichiers,
 messagerie interne, et publication d'un fil vers le module billets.
 .
 LE DISQUE FAIT FOI. Chaque message est un fichier Markdown sous content/ ;
 la base SQLite n'en est que l'index, entierement reconstructible. Le BBS
 tient donc dans un repertoire copiable a chaud par rsync, sans arreter le
 service, et reste lisible sans ce logiciel.
 .
 L'inscription se fait SUR INVITATION. Les mots de passe ne sont pas dans la
 base : ils vivent a part, hors de l'arborescence de contenu, pour qu'une
 archive de contenu ne les emporte jamais.

Package: secubox-billets
Version: 0.13.2-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 3894
Depends: secubox-core (>= 1.5.39~), python3 (>= 3.11), python3-venv, adduser, nginx
Homepage: https://secubox.in
Priority: optional
Section: web
Filename: pool/main/s/secubox-billets/secubox-billets_0.13.2-1~bookworm1_all.deb
Size: 3489554
SHA256: 4f78b2d0704ecd760e389eb111e96dbe09d2f007e704d58842b0c16462932f03
SHA1: db38f8627e58903b474d3b2e89c5a0e76a10d844
MD5sum: 0293e94b2ae44f7516152e9df326dc59
Description: billets — micro-blog gateway inter-médias sociaux (SecuBox)
 Self-hosted micro-blog with an author admin, a public read feed with comments
 and emoji reactions, and inbound/outbound social-media gateway features:
 SSRF-guarded oEmbed ingestion (sanitized, iframe-allowlisted), OpenGraph link
 cards, Atom/JSON feeds, an outbound oEmbed endpoint and share intents.
 FastAPI + aiosqlite (WAL) + Jinja2, served on a Unix socket behind nginx.
 Every billet's content and style are versioned in a Gitea repo; every security
 decision is written to an append-only BLAKE2b-chained event log.

Package: secubox-core
Version: 1.7.9-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 807
Depends: python3:any, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jwt, python3-cryptography, python3-httpx | python3-pip, python3-python-multipart | python3-multipart | python3-pip, nginx, systemd-timesyncd | time-daemon, nftables, openssl
Recommends: wireguard-tools
Breaks: secubox-defaults (<< 1.0.3~), secubox-metrics (<< 1.12.9~)
Replaces: secubox-defaults (<< 1.0.3~), secubox-metrics (<< 1.12.9~)
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: net
Filename: pool/main/s/secubox-core/secubox-core_1.7.9-1~bookworm1_all.deb
Size: 188356
SHA256: 9daf79ea4ac10726043cb5418cac704f4c4eaa0a486466f4a2ff387cb82244d2
SHA1: 5cdfb5f96759a7d4f7325c8aa5793531087b023c
MD5sum: 816585d78d0456f319a7a61495e32674
Description: SecuBox-DEB — bibliothèque centrale et infrastructure
 Bibliothèque Python partagée (JWT auth, config TOML, logging structuré),
 configuration nginx reverse proxy, et scripts d'initialisation firstboot.
 .
 Ce paquet est requis par tous les modules secubox-*.
 Port Debian bookworm du cœur de SecuBox OpenWrt (CyberMind.fr).

Package: secubox-dpi
Version: 1.14.2-1~bookworm1
Architecture: arm64
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 2740
Depends: secubox-core (>= 1.4.3), iproute2, libndpi-bin, python3-geoip2, geoip-database, python3-zmq, secubox-ndpid-engine
Recommends: ffmpeg, yt-dlp, curl
Breaks: secubox-mediaflow (<< 2.4.5~), secubox-ndpid (<< 1.1.4~)
Replaces: secubox-mediaflow (<< 2.4.5~), secubox-ndpid (<< 1.1.4~)
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: net
Filename: pool/main/s/secubox-dpi/secubox-dpi_1.14.2-1~bookworm1_arm64.deb
Size: 893204
SHA256: baac4d0a9cc9b59c337d743b5c12a3bce344c58e30f8cf4c2c9e56aa1691af9e
SHA1: 0d8bedf22765615053263603ac54489b27d630f0
MD5sum: 49d814548f901832f9dc00141596ce9f
Description: SecuBox DPI Analytics — nDPId/sbxdpi app/protocol classification
 Analytics layer over the SecuBox DPI pipeline: top applications, top
 protocols, bandwidth-by-app, bandwidth-by-device, talkers, and risk
 visualization.
 .
 The live engine is full nDPId (nDPI 5.x → nDPIsrvd → sbxdpi,
 dpi-live.sock). See secubox-ndpid for the JA3/JA4 TLS-fingerprinting
 nDPId dashboard.
 .
 Port Debian bookworm du DPI dashboard (SecuBox OpenWrt / CyberMind.fr).

Package: secubox-haproxy
Version: 1.12.1-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 541
Depends: secubox-core (>= 1.6.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, nginx, python3-jinja2, python3, python3-fastapi | python3-pip
Recommends: haproxy, secubox-waf-ng, tor
Breaks: secubox-exposure (<< 1.5.2~), secubox-vhost (<< 1.6.5~)
Replaces: secubox-exposure (<< 1.5.2~), secubox-vhost (<< 1.6.5~)
Priority: optional
Section: net
Filename: pool/main/s/secubox-haproxy/secubox-haproxy_1.12.1-1~bookworm1_all.deb
Size: 116908
SHA256: 6f6fa714e628a0f4f05a76bc8ae13a0dbeeab8f0d06ba5358f97da19e2b22684
SHA1: f5da0d996f9c6f3990299e8b76b42c1f5d42b4d1
MD5sum: 3c2cfb9cdb11ab374aca01db7a618ef6
Description: SecuBox HAProxy Dashboard
 Dashboard HAProxy avec gestion des vhosts et backends.
 Port Debian bookworm de luci-app-haproxy (SecuBox OpenWrt).
 .
 Features:
  - WAF integration for MITM traffic inspection
  - Per-vhost WAF bypass controls
  - Dynamic route syncing with WAF module

Package: secubox-health
Version: 1.3.2-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 164
Depends: python3 (>= 3.11), python3-aiohttp, secubox-core (>= 1.4.0), python3-uvicorn, python3-fastapi, lxc, systemd
Breaks: secubox-health-doctor (<< 1.2.1~), secubox-watchdog (<< 1.2.5~)
Replaces: secubox-health-doctor (<< 1.2.1~), secubox-watchdog (<< 1.2.5~)
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: admin
Filename: pool/main/s/secubox-health/secubox-health_1.3.2-1~bookworm1_all.deb
Size: 36136
SHA256: 2fa395d68d1af786857fe6df6f8602e3427c64453fab8f1ab10af6de77c4676d
SHA1: fe86195b37f256322bf7175260dcb431b007a6cb
MD5sum: 34a5da9fc630b56109a65df48302f85b
Description: SecuBox health probers (vhost + module health monitoring)
 Reconstitue en paquet source les sondes de santé de la board, jusque-là
 déployées à la main sur gk2 (aucune source dépôt) :
  - secubox-health-prober (prober.py) : sonde chaque vhost via nginx et écrit
    /var/cache/secubox/health/status.json. Ignore désormais les vhosts
    lifecycle=on-demand (modules.d) — les sonder les maintenait éveillés et
    neutralisait secubox-sleeper (scale-to-zero).
  - secubox-module-prober (module_prober.py) : santé par socket unix /health.

Package: secubox-hub
Version: 1.12.11-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 1330
Depends: secubox-core (>= 1.5.39~), secubox-aggregator, fonts-noto-color-emoji
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: net
Filename: pool/main/s/secubox-hub/secubox-hub_1.12.11-1~bookworm1_all.deb
Size: 238504
SHA256: c6cba733df3963fea34ee4ad5638c37459dbff62cabf07c2528ede3889304103
SHA1: aeea23104d1f65f532889f80fad3ae1ba4955b1b
MD5sum: db82d9a3e75fd85a02d05b020cd7683f
Description: SecuBox Hub — Tableau de bord central
 Hub central SecuBox : lanceur de modules, état des services, alertes consolidées.
 .
 Port Debian bookworm de luci-app-secubox (SecuBox OpenWrt / CyberMind.fr).

Package: secubox-metrics
Version: 1.28.0-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 703
Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-maxminddb | python3-pip, python3-geoip2 | python3-pip, python3-cryptography, nftables, python3-psutil, secubox-haproxy, lxc, lxc-templates, debootstrap, python3-toml, openssl, curl, jq
Recommends: geoipupdate, python3-fpdf2 | python3-fpdf (>= 2), python3-matplotlib, python3-weasyprint | wkhtmltopdf, glances
Conflicts: secubox-metalogizer
Breaks: secubox-glances (<< 1.1.4~), secubox-grafana (<< 1.0.18~), secubox-reporter (<< 1.2.4~)
Replaces: secubox-glances (<< 1.1.4~), secubox-grafana (<< 1.0.18~), secubox-metalogizer, secubox-reporter (<< 1.2.4~)
Provides: secubox-metalogizer
Homepage: https://secubox.in
Priority: optional
Section: admin
Filename: pool/main/s/secubox-metrics/secubox-metrics_1.28.0-1~bookworm1_all.deb
Size: 169286
SHA256: cd4f789f9921d1ad475d064325ec8b303cc7cb14ae84372a6867716136a5bb28
SHA1: 6439a1a0a7cd654d886a0cf5c2dc644ab3293884
MD5sum: 00fddff5630943138983a1aeb228cb3d
Description: SecuBox Metrics Dashboard
 Real-time system metrics dashboard with caching.
 Provides overview stats, WAF metrics, connection counts,
 and service status monitoring.

Package: secubox-minimal
Version: 0.3.0-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 7
Depends: secubox-core (>= 1.0), secubox-aggregator, secubox-system (>= 1.0), secubox-hardening (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-auth (>= 1.4.0), secubox-dpi (>= 1.7.0), secubox-ndpid-engine, secubox-dns-guard, secubox-ad-guard (>= 1.6.2), secubox-nac (>= 1.0), secubox-freebox, secubox-ipv6guard, secubox-webfilter (>= 0.2.1), secubox-autoload-agent
Conflicts: secubox-metrics, secubox-waf, secubox-waf-ng, secubox-webos
Homepage: https://secubox.in
Priority: optional
Section: metapackages
Filename: pool/main/s/secubox-minimal/secubox-minimal_0.3.0-1~bookworm1_all.deb
Size: 2120
SHA256: 7c69ac8edb3a1f1b0e8b5cffc1da5b333f40ff15dc53ccbd35d3574eb78ab994
SHA1: bb3ce013c1a61764854d4b7fa96a28a545bd4902
MD5sum: 1beeeb0ddc5df3ed3aa469a20b5c91d5
Description: SecuBox Minimal — DPI, garde DNS, filtre de publicites, NAC et Freebox
 Profil minimal, pour une petite carte (ESPRESSObin) : inspection des paquets (DPI), detection d'anomalies DNS (dns-guard), filtrage
 des publicites et traqueurs (ad-guard), controle d'acces reseau (NAC), module Freebox, garde IPv6 et filtrage web, avec la seule interface d'administration.
 Ni WAF, ni profil ISP, ni Hall, ni metrics (le module « visites »), ni VPN, ni service heberge. Les modules exclus sont en Conflicts :
 un Recommends de secubox-auth ou de secubox-freebox ramenait le Hall dans l'image.
 secubox-toolbox est tire par ad-guard (dependance dure) ; le moteur d'interception secubox-toolbox-ng n'est pas installe.

Package: secubox-nac
Version: 3.9.2-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 562
Depends: secubox-core (>= 1.4.3), dnsmasq, nftables, nginx, ieee-data
Breaks: secubox-device-intel (<< 1.3.2~), secubox-hub (<< 1.9.18~), secubox-iot-guard (<< 1.1.5~), secubox-mac-guard (<< 1.2.3~)
Replaces: secubox-hub (<< 1.9.18~)
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: net
Filename: pool/main/s/secubox-nac/secubox-nac_3.9.2-1~bookworm1_all.deb
Size: 130514
SHA256: 517c1a76dbf47cf4b9c1b685fba5735f26fd3026176694746f770ef540014670
SHA1: af1eca3549e9da76a0e5cff17318ca1b7a20744b
MD5sum: 291d567d0e95417fea3745ca5b5e3dc4
Description: SecuBox NAC / Client Guardian
 Contrôle d'accès réseau : zones nftables, portail captif, contrôle parental, quarantaine.
 .
 Port Debian bookworm de luci-app-client-guardian (SecuBox OpenWrt / CyberMind.fr).

Package: secubox-profiles
Version: 0.23.0-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 459
Depends: python3 (>= 3.11), python3-fastapi, python3-uvicorn, python3-pydantic, secubox-core (>= 1.5.30)
Priority: optional
Section: admin
Filename: pool/main/s/secubox-profiles/secubox-profiles_0.23.0-1~bookworm1_all.deb
Size: 106168
SHA256: 6a8d45581b0f67d2f3dea736a6bfde922ca0411f070014753eb1e07edcb0789b
SHA1: a90fa13c9bb4e9f41838d56846cc698a9810e491
MD5sum: 218fad574dc85fcfb2e4d772332b5a9e
Description: SecuBox — inventaire et profils de modules (phase 1, lecture seule)
 Manifestes de modules, profiler de configuration, état et diff — CLI
 secubox-profilectl et API web (webui /profiles/, socket dédié, jamais
 servi par l'aggregator).
 Phase 1 n'applique aucun changement : scan/status/diff + écriture de l'état
 désiré (profils, pins) uniquement. `apply` n'existe pas encore.

Package: secubox-security-posture
Version: 2.4.1-1~bookworm1
Architecture: all
Maintainer: CyberMind <devel@cybermind.fr>
Installed-Size: 386
Depends: secubox-core (>= 1.4.0), python3, python3-fastapi, python3-uvicorn, python3-httpx, python3-yaml, auditd, debsums, sudo, nftables
Recommends: aide, rkhunter, chkrootkit
Breaks: secubox-antirootkit (<< 0.1.7~), secubox-cve-triage (<< 1.2.5~)
Replaces: secubox-antirootkit (<< 0.1.7~), secubox-cve-triage (<< 1.2.5~)
Homepage: https://github.com/CyberMind-FR/secubox-deb
Priority: optional
Section: net
Filename: pool/main/s/secubox-security-posture/secubox-security-posture_2.4.1-1~bookworm1_all.deb
Size: 83552
SHA256: ed285efa8f6ce42b4b8f5b3ea50fdb958d9f5c20a776cf26383290aa47295706
SHA1: 06289443b649e888cd1af20baea9e09c3c3aaa24
MD5sum: e8b8acae00f1b590dd044b5638db5aa1
Description: SecuBox Security Posture - honest board-truthful scorecard
 SecuBox Security Posture computes a single security score (mapped to a
 DEFCON 5-1 dial) from real, provenance-tracked signals collected over public
 sibling module sockets and unprivileged /proc reads.
 .
 Every indicator records where its value came from; signals that cannot be
 measured render as UNKNOWN or MANUAL and are excluded from the score rather
 than faked. Indicators are grouped by the six SecuBox module-domains
 (AUTH/WALL/BOOT/MIND/ROOT/MESH).
 .
 Features:
  * Overall posture score with DEFCON level and per-domain coverage
  * Repaired ANSSI CSPN compliance backbone (real checks, manual flagged)
  * Real TPN media-protection overlay (anti-piracy DNS, TLS coverage)
  * Actionable findings with remediation commands and module deep-links
  * Background 60s cache; read-only REST API on a unix socket

Package: secubox-system
Version: 1.10.2-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 717
Depends: polkitd | policykit-1, secubox-core (>= 1.5.47~), python3-psutil, python3-fastapi | python3-pip, systemd, util-linux, python3, systemd-zram-generator
Recommends: lxc
Breaks: secubox-admin (<< 1.2.3~), secubox-ksm (<< 1.2.3~), secubox-system-hub (<< 1.0.3~), secubox-system-tuning (<< 1.2.6~)
Replaces: secubox-admin (<< 1.2.3~), secubox-ksm (<< 1.2.3~), secubox-system-hub (<< 1.0.3~), secubox-system-tuning (<< 1.2.6~)
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: net
Filename: pool/main/s/secubox-system/secubox-system_1.10.2-1~bookworm1_all.deb
Size: 128096
SHA256: 4c25e35e1d127b207085908ff17d668896ebc826e351b2fe1b76b0e3c06e344a
SHA1: dbabf7dee259d0f43f392840c25b0c594b02273b
MD5sum: b3722b46463fe9745b8df2e51427000f
Description: SecuBox System Hub
 Centre de contrôle système : santé, services systemd, logs journald, diagnostics, backup.
 .
 Port Debian bookworm de luci-app-system-hub (SecuBox OpenWrt / CyberMind.fr).

Package: secubox-toolbox-ng
Version: 0.13.0-1~bookworm1
Architecture: arm64
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 23704
Conflicts: secubox-mitmproxy
Replaces: secubox-mitmproxy
Homepage: https://cybermind.fr/secubox
Priority: optional
Section: net
Filename: pool/main/s/secubox-toolbox-ng/secubox-toolbox-ng_0.13.0-1~bookworm1_arm64.deb
Size: 5326184
SHA256: e0c03a2c7167ba7f7080256f9edd008c2a5f7f01a105664de345ec41cad1421c
SHA1: 92d7be1a821296acc6901d0425ffbde70cd2beca
MD5sum: 14164d346ae4bb546bf84eaa583fdb06
Description: SecuBox-Deb — outils Go du parc (sbxmitm, sbx-sentinel, sbx-authwatch, sbxdpi)
 LE MODULE GO DU PARC vit ici (go.mod, vendor/), et il porte CINQ commandes :
 sbxmitm, sbx-sentinel, sbx-authwatch, sbxdpi — livrees par ce paquet — et
 sbxwaf, qui ne l'est PAS : c'est secubox-waf-ng qui compile et livre le moteur
 du pare-feu depuis cette meme source.
 .
 sbxdpi est la couche Go qui emancipe nDPId : il consomme le flux JSON du
 distributeur nDPIsrvd (moteur C libre, nDPI 5.x), applique le filtrage
 declaratif du parc (exemption premiere partie, listes deny/allow, mise en
 sourdine des risques — memes conffiles *.txt que sbx-sentinel), agrege les
 stats DPI et les sert en lecture seule sur /run/secubox/aggregator.sock
 (/api/v1/dpi/) pour la cardlet DPI du Hall, derriere nginx + JWT FastAPI.
 .
 Multi-core Go re-implementation of the R3 toolbox MITM engine (#662),
 porte hors de l'ancienne flotte de workers Python mitmproxy, bridee par
 le GIL et retiree depuis. Livre le
 standalone sbxmitm binary plus a DISABLED systemd template unit.
 .
 This package is the Phase-6-cutover migration target. The unit is NOT
 enabled or started by the maintainer scripts — the live R3 tunnel keeps
 running on the Python workers until the cutover is performed manually.
 Installing this package changes NO runtime behaviour (no service start,
 no nft DNAT).

Package: secubox-tor
Version: 1.7.0-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 263
Depends: secubox-core (>= 1.4.0), tor, unbound, nftables, dns-root-data, python3, python3-fastapi, python3-uvicorn, secubox-hub, nginx
Breaks: secubox-macro (<< 0.1.1~), secubox-proxypac (<< 1.2.7~)
Replaces: secubox-macro (<< 0.1.1~), secubox-proxypac (<< 1.2.7~)
Priority: optional
Section: admin
Filename: pool/main/s/secubox-tor/secubox-tor_1.7.0-1~bookworm1_all.deb
Size: 56096
SHA256: b51f923f4da1e5aa412281b84e8d36ac37ff708c0adc22b3a33cf95930171eec
SHA1: 3738a1542d31016995e395184f9e218e4933ff26
MD5sum: da61bf01d8a48e5ba5bf18625cad73b3
Description: SecuBox Tor — Tor relay + hidden-services manager
 Manages a local Tor daemon: transparent-proxy + SOCKS modes,
 hidden-service publishing, circuit monitoring, identity rotation,
 DNS-over-Tor, and kill-switch enforcement. Pairs with
 secubox-exposure when publishing hidden services for SecuBox vhosts.

Package: secubox-webos
Version: 1.12.3-1~bookworm1
Architecture: all
Maintainer: Gerald KERMA <devel@cybermind.fr>
Installed-Size: 2003
Depends: secubox-core (>= 1.5.39~), python3, python3-fastapi | python3-pip, python3-httpx, python3-python-multipart | python3-multipart | python3-pip, python3-uvicorn | python3-pip, python3-pydantic | python3-pip
Breaks: secubox-sbxui (<< 0.1.3~)
Replaces: secubox-sbxui (<< 0.1.3~)
Homepage: https://secubox.in
Priority: optional
Section: admin
Filename: pool/main/s/secubox-webos/secubox-webos_1.12.3-1~bookworm1_all.deb
Size: 680024
SHA256: 5177aa1ba96abba63321598021b1d70233f77f654ad3d19969a6e5ce79e0382f
SHA1: 4fc27ed0d8cc9ae0b921ec3ca4ca6656765fe219
MD5sum: 55eb25c2b89c256e8ff24f9598785116
Description: SecuBox WebOS — normalized service registry (Hall P1)
 Aggregator-independent registry service exposing a normalized view of
 SecuBox services (catalogue + health + reach), served on its own socket.