Package: secubox-ad-guard Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Installed-Size: 105 Depends: secubox-core (>= 1.0.0), python3-httpx | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-ad-guard/secubox-ad-guard_1.0.0-1_all.deb Size: 18694 SHA256: 00de6cc02cc5efc445337fd74483337523449ab4922e5423a8655cd985dd31b1 SHA1: 3f2e0fa870b09064451bd39dcc63514d2ea6c890 MD5sum: 9f44df12fa415173b827e76ce674ba65 Description: SecuBox Ad Guard Module Ad and tracker detection with per-device statistics. Features blocklist management, delayed blacklisting workflow, and device-type classification (IoT, phones, smart TVs, etc.). Package: secubox-admin Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 91 Depends: secubox-core (>= 1.0), python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-admin/secubox-admin_1.0.0-1~bookworm1_all.deb Size: 15510 SHA256: ad382b9a97ef24dfba0b405a84ab57eab29680bd5349320ecf27eb7b0a3d5828 SHA1: 74cd0fe47d58bf2d4c3aac7a63f2be30a251028f MD5sum: c25007b845851822564dd15048382cf9 Description: SecuBox System Administration Dashboard Advanced system administration module for SecuBox. Provides web UI and API for system management tasks. . Features: - System status overview (CPU, memory, disk, load) - Systemd service management (start, stop, restart) - System logs viewer (journalctl integration) - Disk usage monitoring - Process manager (top processes by CPU/memory) - APT updates management - System reboot/shutdown with confirmation . Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-aggregator Version: 0.2.1-1~bookworm1 Architecture: all Maintainer: CyberMind FR Installed-Size: 47 Depends: python3:any, python3, python3-fastapi, python3-uvicorn, secubox-core Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: net Filename: pool/main/s/secubox-aggregator/secubox-aggregator_0.2.1-1~bookworm1_all.deb Size: 11316 SHA256: b7f641b01663181d7d7803df49a05213a16bab5137c585ebdbd75a4e6fa6be46 SHA1: 17ed9d822f8c3f043431308542a3ef9cc0b531ac MD5sum: 0bd0ea96f47f9387b77ff34005a44f12 Description: SecuBox API gateway — master ASGI process Mounts SecuBox module FastAPIs as sub-apps under /api/v1/, eliminating the duplicated Python interpreter overhead of running each module as its own uvicorn process. . Pilot mounts (per /etc/secubox/aggregator.toml) save ~30 MB RAM per migrated module versus a per-module systemd unit. Full migration of the ~100 SecuBox modules would free ~3 GB on a typical install. Package: secubox-ai-gateway Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 68 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-ai-gateway/secubox-ai-gateway_1.0.1-1~bookworm1_all.deb Size: 13238 SHA256: b2a6f713f187e61f5e22a4ee612a67754255f7faa6c838c22e8c96d2a2b0d4a3 SHA1: 837917af968737e7ee44dbfa295071e560ab2478 MD5sum: 979c678c062ab37aa274c1d4de622aa4 Description: SecuBox AI Gateway — data-sovereignty router for AI requests Routes AI inference requests across the available backends with per-request policy enforcement (sovereignty constraints, cost caps, data-class rules). Tracks egress + redirects sensitive prompts to local backends. . Distinct from sibling packages in the AI cluster: - secubox-ai-insights — ML-based threat detection. - secubox-localai — self-hosted LocalAI LLM runtime. - secubox-ollama — Ollama LLM runtime wrapper. - secubox-mcp-server — Model Context Protocol server. Package: secubox-ai-insights Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 104 Depends: secubox-core (>= 1.0), python3 (>= 3.11) Recommends: crowdsec, suricata Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-ai-insights/secubox-ai-insights_1.0.0-1~bookworm1_all.deb Size: 18030 SHA256: 85c704924504a268e9110abb1be8b58d8ec6cd207b9a635bb49387f320149f00 SHA1: 6d559d866a6513e08b86aef15121da060ed4fef2 MD5sum: 0cf63d7f6485652720172ede833e97b9 Description: SecuBox AI Insights - ML-based Threat Detection Machine learning powered threat detection and security insights module. . Features: - ML-based threat detection and classification - Anomaly detection in network traffic - Log analysis with trained models - Threat scoring and risk assessment - CrowdSec and Suricata integration - Model management (train, deploy) - Alert correlation engine . Port Debian bookworm de SecuBox OpenWrt (CyberMind.fr). Package: secubox-auth Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 129 Depends: python3-aiosqlite, python3-fastapi, python3-uvicorn, python3-argon2, python3-pyotp, python3-jose, secubox-core (>= 1.0), secubox-users (>= 1.4) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-auth/secubox-auth_1.0.2-1~bookworm1_all.deb Size: 24494 SHA256: 7d3a1853d9684d9dad932cf181b753401e0e114e0a2e58a2f5196d6afa77b646 SHA1: 61fa73098a4fb1c1c3aec1cd45cfaea8e6008ed5 MD5sum: 924b859984e7362e84587fd62c51e273 Description: SecuBox Auth Guardian Authentification avancée : OAuth2 (Google/GitHub), vouchers, sessions, portail splash. . Port Debian bookworm de luci-app-auth-guardian (SecuBox OpenWrt / CyberMind.fr). Package: secubox-authelia Version: 1.0.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 96 Depends: secubox-core (>= 1.0), secubox-users (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, python3-yaml, openssl, curl, jq Recommends: secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-authelia/secubox-authelia_1.0.9-1~bookworm1_all.deb Size: 23622 SHA256: 4d492ebf8bf08d1262b1cad643b410f18c60dcff3e17030be514962a74b97782 SHA1: adade4a6c46d0886eb225abfaa25efb135e77d5a MD5sum: ac74bcddd923d646676dad146a5b504d Description: SecuBox Authelia — SSO IdP (AUTH-BRIDGE layer) Hosts Authelia in a Debian bookworm LXC at 10.100.0.20 on br-lxc. File-backend identity provider reading /etc/secubox/users.json (the same argon2-hashed user store already managed by secubox-users) so the canonical SecuBox identity is the single source of truth for SSO. . OIDC clients pre-provisioned for the three native admin UIs that already support OIDC: Grafana, Gitea, Nextcloud. YaCy/RustDesk-web/mitmproxy-web (no native OIDC) get nginx `auth_request` integration to the same Authelia. . Health-banner injected on the Authelia login page via nginx sub_filter so the operator sees the SecuBox system health bar even on the SSO screen. Package: secubox-avatar Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 95 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, python3-pil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-avatar/secubox-avatar_1.0.0-1~bookworm1_all.deb Size: 17636 SHA256: fd64a71924b699a247dfd7ee8d8e21b23894bf4cb31fbafb608c90c8ba6b1e78 SHA1: b631d05aa5b23c45e769f29e890b537a3a883fdc MD5sum: 81ab8e3e1f9f124fb4fc5f0e034470b9 Description: SecuBox Identity and Avatar Manager Identity and avatar management module for SecuBox services. Provides unified identity management across Gitea, Nextcloud, Mail, Matrix. . Features: avatar upload, identity sync, service integration, P31 Phosphor theme. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-backup Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 92 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-backup/secubox-backup_1.0.1-1~bookworm1_all.deb Size: 16254 SHA256: 6c2e222f666cab70b2fe6e8d3ae482f447373d1af2016cf0001a4c4933e1c5e9 SHA1: ce2b0a7473504a217306b51378ac1f77995f8103 MD5sum: 4aaf0fe13fc3b3bf3d4927155e891367 Description: SecuBox Backup — config + LXC-container backup manager Backup manager covering SecuBox configs (/etc/secubox, nginx, wireguard, haproxy, nftables), service data (/var/lib/secubox, nextcloud, gitea), and LXC containers with automatic stop/start around snapshots. Web dashboard with stats and history. Package: secubox-c3box Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 66 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-c3box/secubox-c3box_1.0.0-1~bookworm1_all.deb Size: 11042 SHA256: 1d7322199366655730aeed636405653ee2d855bccf64d5303520cb02b1dad4ed SHA1: 14de50f6eb2c5bf405d3ea6a8464ac3597a213b7 MD5sum: ceac9785b6521a74c354495527407cba Description: SecuBox C3box Module C3Box Services Portal Package: secubox-cdn Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 132 Depends: secubox-core (>= 1.0), nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-cdn/secubox-cdn_1.0.4-1~bookworm1_all.deb Size: 23020 SHA256: 4a1514e735707424955f9b04411102a01283fe47a4b3b8019a37c52272160027 SHA1: cc1405ec104b270e79c47c210005a0513a4770d4 MD5sum: bbe398348f55792302222aad6b143fe7 Description: SecuBox CDN Cache Cache CDN local : économies bande passante, politiques par domaine/extension, stats hit ratio. . Port Debian bookworm de luci-app-cdn-cache (SecuBox OpenWrt / CyberMind.fr). Package: secubox-certs Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: secubox-core (>= 1.0.0), python3, python3-fastapi, python3-uvicorn, python3-pydantic, certbot Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-certs/secubox-certs_1.0.0-1~bookworm1_all.deb Size: 16894 SHA256: 051906ae9a596b5f92371dd99cbdc550a21abf72475b6e856d791cb8f9c178a7 SHA1: 77ba0db9a753cb4ef79aac0e8277dbf2d87bbb3e MD5sum: 66f4aa5273ea5952e3cd82a2a3140fbb Description: SecuBox ACME / TLS certificate manager FastAPI control plane managing the HAProxy certificate bundle at /data/haproxy/certs/, certbot renewals, and the WebUI surface at /certs/ on the canonical hub vhost. Reconstructed from the running deployment on gk2 (closes #306 follow-up — the module existed but had no source-side package). Package: secubox-cloner Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 58 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Priority: optional Section: admin Filename: pool/main/s/secubox-cloner/secubox-cloner_1.0.0-1_all.deb Size: 9476 SHA256: 3a98ecaf5c0f864fb143cf9d483032bcd570d9406a31bbf853ecd4c883f2adbf SHA1: 4ae4bd852671ff343af592000c0ac6d9f2759578 MD5sum: 0b8aa65c8975a7b671fb65632f33fb8a Description: SecuBox Cloner - System backup and restore System backup and restore for SecuBox. Create, manage, and restore compressed backups of system configuration and data. Package: secubox-config-advisor Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 67 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-config-advisor/secubox-config-advisor_1.0.1-1~bookworm1_all.deb Size: 11758 SHA256: d4e174f0070503b56bf2f81c39ee49a0e1b49adb09fb61ba8c527b613169ddeb SHA1: b7ef9a284db491c398469404598713155f55b312 MD5sum: e88f45b5de1b4bba91ab92aeaa8d2abf Description: SecuBox Config Advisor — security configuration audit + recommendations Scans installed SecuBox config (nftables rules, nginx vhosts, systemd unit hardening, AppArmor profiles, file permissions) and surfaces deviations from the CSPN-aligned baseline. Read-only; produces an actionable recommendations report rather than auto- applying fixes. Package: secubox-console Version: 1.2.0-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 144 Depends: python3 (>= 3.11), python3-httpx | python3-pip, python3-rich Recommends: secubox-core (>= 1.1.0), python3-pip Suggests: secubox-hub, secubox-watchdog, secubox-soc-gateway Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-console/secubox-console_1.2.0-1_all.deb Size: 24904 SHA256: dc6bb3235368ee963095adec5435bbfe488cb433858c5147a94cc6cbd03b6028 SHA1: 96c9504d68125bdc80781a997e897cbaf103149d MD5sum: a61bea8c689884c690de68a6c7401e2d Description: SecuBox Console TUI — Terminal Dashboard Terminal-based dashboard for SecuBox appliances using Python Textual. Provides system monitoring, service management, and network status via a TUI that auto-starts on TTY1 when GUI kiosk is disabled. . Features: - Live system metrics (CPU, memory, disk) - Service management with start/stop/restart - Network interface status with WAN/LAN classification - Real-time log viewer with filtering - Vim-style keyboard navigation - Board-specific theming (MOCHAbin, ESPRESSObin, etc.) . Port Debian bookworm de SecuBox-DEB (CyberMind.fr). Package: secubox-cookies Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 106 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: secubox-mitmproxy Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-cookies/secubox-cookies_1.0.0-1~bookworm1_all.deb Size: 16430 SHA256: 0dffcdd6d0a4c64bbc0efb31e9331aa4b099ffd8f133be417afd74b52fe31472 SHA1: 04a7ca2745f73f5622ff32faba9894816ae84a84 MD5sum: 465b0ad52cbbcc01c0cdc3786a760fd8 Description: SecuBox Cookie Tracker Cookie tracking, analysis, and privacy compliance monitoring. Provides third-party cookie detection, tracker identification, GDPR compliance checking, policy enforcement, and alerts. Package: secubox-core Version: 1.1.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 247 Depends: python3:any, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jose, python3-httpx | python3-pip, nginx, nftables, openssl Recommends: crowdsec, wireguard-tools Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-core/secubox-core_1.1.6-1~bookworm1_all.deb Size: 55998 SHA256: 9d4f72783faac2fd4a2b9c7922d23d110dac39d2ce524627ffae72614af25331 SHA1: b758b035f0ef17dfb29da6428940c1cad63bb964 MD5sum: 1f41ee2a00e2256478eafab6bc0c5186 Description: SecuBox-DEB — bibliothèque centrale et infrastructure Bibliothèque Python partagée (JWT auth, config TOML, logging structuré), configuration nginx reverse proxy, et scripts d'initialisation firstboot. . Ce paquet est requis par tous les modules secubox-*. Port Debian bookworm du cœur de SecuBox OpenWrt (CyberMind.fr). Package: secubox-crowdsec Version: 1.0.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 304 Depends: secubox-core (>= 1.0), crowdsec Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-crowdsec/secubox-crowdsec_1.0.7-1~bookworm1_all.deb Size: 53948 SHA256: e2eadd8277e523b0eed791c8c0c5badd4d4f5b44c13f328b1f7d4b279e2be881 SHA1: 549d71bbf53e7934e88163f256c2773cab4f0bc1 MD5sum: e34372c1deaccb2a186b471aa2998b54 Description: SecuBox CrowdSec Dashboard Tableau de bord CrowdSec : décisions, alertes, bouncers, métriques géographiques. . Port Debian bookworm de luci-app-crowdsec-dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-cve-triage Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 97 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-cve-triage/secubox-cve-triage_1.0.1-1~bookworm1_all.deb Size: 17136 SHA256: 2c128c008a19060fc26302f1516c1725d8cbcc5b13d2f7af4517c3ef947b7e65 SHA1: 5cdddd965e0a67503cf1e03d896b96358be38618 MD5sum: da64d4ba2f61e99403624a2cf27c652e Description: SecuBox CVE Triage — vulnerability assessment workflow CVE triage dashboard: pull advisories, score against the installed package set, track remediation. Maintains its own data store under /var/lib/secubox/cve-triage/. . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella alert dashboard (CrowdSec + Suricata + WAF), not vulnerability-focused. - secubox-threat-analyst — AI agent for CrowdSec scenarios. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables IP blocklist enforcement. - secubox-network-anomaly — DNS-log anomaly detection. - secubox-openclaw — OSINT / reconnaissance. Package: secubox-cyberfeed Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 81 Depends: secubox-core (>= 1.0.0), python3-httpx | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-cyberfeed/secubox-cyberfeed_1.0.0-1~bookworm1_all.deb Size: 13862 SHA256: e4bf29530131d05c34328aae4c69775a5d55c964db72eba46c875743dee06823 SHA1: b9274fd5319c47831531ab5046575951a9b71ec9 MD5sum: d9e530e356569a192106e64abdf43979 Description: SecuBox CyberFeed - Threat Intelligence Feed Aggregator Aggregates threat feeds from multiple sources (abuse.ch, Spamhaus, etc.) and provides unified blocklist management for IPs, domains, and IoCs. . Features: - Multi-source threat feed aggregation - IP and domain blocklist management - Threat indicator (IoC) tracking - Scheduled feed updates - Feed health monitoring - Export to nftables, unbound, dnsmasq formats Package: secubox-daemon Version: 0.1.0-1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 13021 Depends: libc6 (>= 2.34), wireguard-tools Recommends: secubox-core Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-daemon/secubox-daemon_0.1.0-1_amd64.deb Size: 4026988 SHA256: 69a6b32bfbe41d40b94cf9c0010f25212d2c95a1661e2c0b7898bdd14be86d29 SHA1: ae05634a687a0b373e4dbfa34552d737b7925a05 MD5sum: b8501fa9a6d65d734625b1447beb5add Description: SecuBox Mesh Daemon - WireGuard mesh with ZKP authentication Go-based mesh networking daemon for SecuBox featuring: - mDNS peer discovery - WireGuard mesh topology with automatic mesh gate election - GK-HAM-2025 Zero-Knowledge Proof authentication with 24h PFS - SQLite telemetry with metrics collection Includes secuboxd daemon, secuboxctl CLI, and c3box dashboard. Package: secubox-daemon-c3box Source: secubox-daemon Version: 0.1.0-1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 6124 Depends: libc6 (>= 2.34), secubox-daemon Conflicts: secubox-c3box (<< 1.1~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-daemon/secubox-daemon-c3box_0.1.0-1_amd64.deb Size: 2233070 SHA256: 1b1d3f03e270cca9415fedaf132b30dc9ba676f5049023689190c7228d91a23b SHA1: 493bd6e3d419b57568b8d1214e3e8cc2f488bdff MD5sum: 27eb93dea6cb0c3150636ebc12ca317f Description: SecuBox C3BOX - Situational Awareness Dashboard (Go variant) Web-based situational awareness dashboard for SecuBox mesh networks. Visualizes mesh topology, node status, and ZKP credentials. Connects to secuboxd via Unix socket. . This is the Go-built variant shipped alongside secubox-daemon. It conflicts with the older Python secubox-c3box package; install only one of the two on a given host. Package: secubox-defaults Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 15 Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-defaults/secubox-defaults_1.0.0-1~bookworm1_all.deb Size: 2360 SHA256: 41d2bb07dc1f75a9167cf705bebc572f4794ac84f3b52b2bbed7a3ba2344d60c SHA1: 825ebf511149db46f3d47a02d231e11d69082320 MD5sum: 6b534bcf7834a54950d36314e8fc864b Description: SecuBox board identity defaults Ships /etc/default/secubox, the single source of truth for SECUBOX_HOSTNAME and SECUBOX_DOMAIN_SUFFIX. Other SecuBox packages depend on this for the canonical admin URL pattern admin... Package: secubox-device-intel Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-device-intel/secubox-device-intel_1.2.2-1~bookworm1_all.deb Size: 17952 SHA256: 9e12db8a03de7ab5ad55dcfcf8929893bd2954b372660a4802027533f97d4c19 SHA1: 6543a4d7bab1cd6079b88f64b71deea8779e33e2 MD5sum: 60fba81ca7d818ecedf53fda38ed969a Description: SecuBox Device Intel — network asset discovery + fingerprinting Scans the LAN for connected devices, fingerprints them (OS, vendor, SecuBox/OpenWrt theme markers, LuCI version), and tracks asset inventory over time. Distinct from secubox-watchdog (which monitors *known* services for health, not unknown devices). . Distinct from sibling packages in the monitoring cluster: - secubox-watchdog — LXC + service + HTTP health monitor. - secubox-health-doctor — vital-services check. - secubox-netdata, secubox-glances, secubox-metrics — system metrics dashboards. Package: secubox-dns Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 83 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-dns/secubox-dns_1.0.1-1~bookworm1_all.deb Size: 13708 SHA256: f599a961ab119f4fb4891a0a204c7e74aaf4b86655e2e07fc8ccc1d286c11e11 SHA1: 512358bf69ad590e898147ff02e3ca4d44223ba0 MD5sum: 885c1aaeff14eba17f7db5afe57f2a2b Description: SecuBox DNS — authoritative BIND zone manager BIND zone management dashboard for SecuBox: create, edit, and serve authoritative DNS records you own. . Distinct from sibling packages in the DNS cluster: - secubox-dns-provider — external registrar API (OVH, Cloudflare, Gandi, Route53). Install if you publish records *at a registrar*. - secubox-vortex-dns — recursive DNS firewall with RPZ + threat feeds (unbound-backed). - secubox-dns-guard — DNS anomaly detection (dnsmasq-backed). - secubox-ad-guard — ad/tracker DNS blocking with per-device stats. Package: secubox-dns-guard Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 60 Depends: secubox-core (>= 1.0.0) Recommends: dnsmasq Priority: optional Section: admin Filename: pool/main/s/secubox-dns-guard/secubox-dns-guard_1.0.1-1~bookworm1_all.deb Size: 11572 SHA256: 024844a3ad3593cc1444930804c11f9eec4d3826bfccec57f10e2d22e931c8d3 SHA1: 47bef274465b90d7078332d6244a7d0ba7b89acd MD5sum: fc5110a96ba6179294279e611f0bb5e8 Description: SecuBox DNS Guard — anomaly detection + dnsmasq blocking Watches recursive DNS resolution for anomalous patterns and pushes blocklists to dnsmasq via /etc/dnsmasq.d/secubox-blocklist.conf. . Distinct from sibling packages in the DNS cluster: - secubox-vortex-dns — full recursive DNS firewall with RPZ (unbound-backed; inline blocking before resolution). - secubox-ad-guard — ad/tracker-specific blocking with per-device stats. - secubox-dns — authoritative BIND zone manager (publishing). - secubox-dns-provider — external registrar API. Package: secubox-dns-provider Version: 1.0.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 125 Depends: secubox-core (>= 1.0.0), python3-httpx | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-dns-provider/secubox-dns-provider_1.0.3-1~bookworm1_all.deb Size: 21866 SHA256: 20d51bb8cc92a7e9fc949c5e8c404a9f8694b8f6fe210c6356f020532145537e SHA1: cbf388c905887999d447fe44be576c3154d2a4f8 MD5sum: 0526c0a5bb46f66e18e5126647c7f578 Description: SecuBox DNS Provider Module Multi-provider DNS API management for SecuBox. Supports OVH, Gandi, Cloudflare, and AWS Route53. Features ACME DNS-01 challenge support, Dynamic DNS, zone import/export, and comprehensive audit logging. Package: secubox-domoticz Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 102 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip Priority: optional Section: net Filename: pool/main/s/secubox-domoticz/secubox-domoticz_1.0.0-1~bookworm1_all.deb Size: 16140 SHA256: 798bbd1f8b4f18d1cecb7682e96a029512bb996d767d1feccbfb9131d55d1361 SHA1: fe81e5cea7ef98b18752f9de8b392cb15a1844fe MD5sum: ef4c8a6dd93f0cb9b39fa45552edba25 Description: Domoticz Home Automation for SecuBox Debian bookworm port providing Domoticz home automation management. Provides FastAPI backend on /api/v1/domoticz/ via Unix socket. . Features: - Docker/Podman container management for Domoticz - Device management (switches, sensors, lights) - Room/scene organization - Hardware protocol support (Z-Wave, Zigbee, 433MHz) - Event logging and graphs - Notification configuration - CRT-light P31 phosphor theme with cyan accents Package: secubox-dpi Version: 1.0.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core (>= 1.0), iproute2 Recommends: netifyd, secubox-netifyd Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-dpi/secubox-dpi_1.0.5-1~bookworm1_all.deb Size: 16578 SHA256: 0bd264ebba3e311fbae1af8c1aa79b9c4d04b762dcacf8669e91be1ee24627e2 SHA1: 8994b4652eacaad0212357458f569a23028ee150 MD5sum: 4b7f3ae52b052e0f95eb10c14ef126ae Description: SecuBox DPI Analytics — netifyd-backed app/protocol classification Analytics layer on top of netifyd: top applications, top protocols, bandwidth-by-app, bandwidth-by-device, talkers, and risk visualization. Configures tc mirred to ifb0 for inline inspection. . Complements secubox-netifyd, which manages the netifyd daemon lifecycle (start/stop/config/alerts). Install both for the full daemon-control + analytics experience. For TLS fingerprinting and nDPId-engine analysis, install secubox-ndpid instead — it covers a different DPI engine and is not provided by this package despite historical "dual-stream" framing. . Port Debian bookworm de luci-app-netifyd-dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-droplet Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 115 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-aiofiles, secubox-metablogizer (>= 1.2), rsync, unzip, python3 Priority: optional Section: net Filename: pool/main/s/secubox-droplet/secubox-droplet_1.1.1-1~bookworm1_all.deb Size: 22088 SHA256: 02ab31206ff80b9e1a1d8a331b8fe4319a64486d5c952d178d39e751a0f78935 SHA1: d2b0b6d38685fd2e3be5da483f5ba6759618c411 MD5sum: 5b95e16f0014339b83b6c98712d1a56f Description: SecuBox Droplet File Publisher Dashboard pour la publication de fichiers et sites statiques. Port Debian bookworm de luci-app-droplet (SecuBox OpenWrt). Package: secubox-exposure Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 87 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: tor Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-exposure/secubox-exposure_1.0.0-1~bookworm1_all.deb Size: 15010 SHA256: 6f59d6f14b182435063232b5f796d12b6eb3f8bd1d2325783b9108dc2f1d80b3 SHA1: 7a5d5716d8e6f44f71c3d8cf9245826c18994ba3 MD5sum: 87f4f7180f1a029b4f2a3e60d5480548 Description: SecuBox Exposure Manager Service exposure management for SecuBox. Provides Tor hidden services, SSL backends, DNS registration, and mesh network exposure capabilities. Package: secubox-eye-remote Version: 1.0.0-1 Architecture: all Maintainer: Gérald Kerma Installed-Size: 286 Depends: dnsmasq-base, secubox-core, python3-fastapi, python3-uvicorn, udev Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-eye-remote/secubox-eye-remote_1.0.0-1_all.deb Size: 52216 SHA256: 131507e8770fb3e0e22353282de1e639748a8de3eadbc9bf068978e5c05063be SHA1: b2bbea417f7b55e7e5cffc87ebd9c09b7b279802 MD5sum: 9e8c2ca903012f0d47e88b96c7e163e5 Description: SecuBox Eye Remote USB Gadget Integration Host-side integration for SecuBox Eye Remote (Pi Zero W with HyperPixel 2.1 Round Touch display). . Features: - Auto-detection via udev when Eye Remote is connected - Network configuration (10.55.0.1/30) - FastAPI endpoint for metrics relay - WebUI control panel integration - Serial console passthrough . The Eye Remote provides: - Real-time dashboard display (480x480 circular) - USB gadget modes: OTG, Flash, Debug, TTY, Auth - Touch-based menu navigation - Serial console access to SecuBox Package: secubox-eye-square Version: 1.0.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 119 Depends: secubox-core, secubox-eye-remote, python3-pil, python3-evdev, python3-fastapi, python3-uvicorn, python3-websockets, python3-httpx, apparmor-utils Priority: optional Section: admin Filename: pool/main/s/secubox-eye-square/secubox-eye-square_1.0.3-1~bookworm1_all.deb Size: 25264 SHA256: ea40ef8a6bbb0c162c260b08e0d66dd3db1481a8f0bcfcaaabc174ddaa409fb5 SHA1: 95977dea8a42a05e704ac929014e361fa7843af3 MD5sum: 50604c0aaeca834d23d9f88f5b0fe9c6 Description: SecuBox Eye Remote — Square variant (Pi 4B / Pi 400 + 7" 800x480) Pillow-on-framebuffer single-process kiosk. Renders the SecuBox dashboard directly to /dev/fb0 — no X server, no Qt, no Chromium. Companion to the round/ Pi Zero W variant (also Pillow+fb). . Includes a privileged Helper FastAPI on a Unix socket (SO_PEERCRED) for USB gadget mode switching, service restart, lockdown (nftables atomic swap), and console streaming. Package: secubox-fmrelay Version: 0.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 86 Depends: secubox-core (>= 1.0), python3-uvicorn, python3-fastapi, rtl-sdr, ffmpeg, icecast2, curl Recommends: secubox-sentinelle-gsm (>= 0.4) Homepage: https://cybermind.fr/secubox Priority: optional Section: sound Filename: pool/main/s/secubox-fmrelay/secubox-fmrelay_0.1.0-1~bookworm1_all.deb Size: 19292 SHA256: de03a4aa23b2c62b8aff89ae34f95a4bf9e3225b571b7a4b461770d10a8022c1 SHA1: 03c5e416f8d656c896f56e8aab9a03db1f84e42a MD5sum: a8b9be9189c92176bd44f9de415790e5 Description: SecuBox FM Relay — rtl_fm to Icecast MP3 mount with live RDS metadata Captures FM broadcast audio with rtl_fm, encodes it to MP3 with ffmpeg (libmp3lame), and feeds an Icecast2 mount that the SecuBox webradio module serves and that Lyrion can ingest as a Favourite remote URL. . A parallel rtl_fm | redsea pipeline decodes the 57 kHz RDS subcarrier (PI / PS / RT) and POSTs each RadioText update to Icecast2's admin metadata endpoint so HTTP listeners see "Artist - Title" change live in their player. . Shares the RTL-SDR with secubox-sentinelle-gsm. Don't run a GSM scan or RDS sweep while a relay is active — the bus contention will crash both. Cross-package device-claim coordination is a planned v0.2 follow-up. Package: secubox-full Version: 1.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-core (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-system (>= 1.0), secubox-crowdsec (>= 1.0), secubox-waf (>= 1.0), secubox-vortex-firewall (>= 1.0), secubox-auth (>= 1.0), secubox-nac (>= 1.0), secubox-wireguard (>= 1.0), secubox-mesh (>= 1.0), secubox-p2p (>= 1.0), secubox-netmodes (>= 1.0), secubox-dpi (>= 1.0), secubox-qos (>= 1.0), secubox-traffic (>= 1.0), secubox-vhost (>= 1.0), secubox-haproxy (>= 1.0), secubox-cdn (>= 1.0), secubox-dns (>= 1.0), secubox-vortex-dns (>= 1.0), secubox-meshname (>= 1.0), secubox-netdata (>= 1.0), secubox-mediaflow (>= 1.0), secubox-device-intel (>= 1.0), secubox-watchdog (>= 1.0), secubox-metrics (>= 1.0), secubox-soc (>= 1.0), secubox-roadmap (>= 1.0), secubox-mail (>= 1.0), secubox-mail-lxc (>= 1.0), secubox-webmail (>= 1.0), secubox-webmail-lxc (>= 1.0), secubox-users (>= 1.0), secubox-gitea (>= 1.0), secubox-nextcloud (>= 1.0), secubox-droplet (>= 1.0), secubox-streamlit (>= 1.0), secubox-streamforge (>= 1.0), secubox-metablogizer (>= 1.0), secubox-publish (>= 1.0), secubox-c3box (>= 1.0), secubox-backup (>= 1.0), secubox-tor (>= 1.0), secubox-exposure (>= 1.0), secubox-zkp (>= 1.0), secubox-mitmproxy (>= 1.0), secubox-repo (>= 1.0), secubox-hardening (>= 1.0) Recommends: crowdsec, netdata, wireguard-tools, netifyd, tor, mitmproxy, yggdrasil Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-full/secubox-full_1.2.0-1~bookworm1_all.deb Size: 2142 SHA256: acf463a5674efb4d633cce385de4bc1e69f012f5fb74648e2769493ab29aef80 SHA1: 91ad950af46fec8cd2e6671b379434254568881d MD5sum: 4e014c396c5ffb5b491fa6ad031ff064 Description: SecuBox Full — All 49 modules Metapackage installing all SecuBox modules for full functionality. Recommended for MOCHAbin and other devices with 4GB+ RAM. . Core: hub, portal, system Security: crowdsec, waf, vortex-firewall, auth, nac, hardening, mitmproxy Network: wireguard, mesh, p2p, netmodes, dpi, qos, traffic, vhost, haproxy, cdn DNS: dns, vortex-dns, meshname Monitoring: netdata, mediaflow, device-intel, watchdog, metrics Dashboard: soc, roadmap Privacy: tor, exposure, zkp Services: mail, webmail, users, gitea, nextcloud Publishing: droplet, streamlit, streamforge, metablogizer, publish, c3box Infrastructure: backup, repo Package: secubox-gitea Version: 1.4.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 170 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-gitea/secubox-gitea_1.4.3-1~bookworm1_all.deb Size: 33650 SHA256: 40a19d09942e85ec67ee3ccdfaff908fa8099cc64581367ce06b5a299a063cac SHA1: 902c735eefbae90428bea45a7f0f22d20754502e MD5sum: 0b39fb9f2f5cdc63961fe4529ee13a4b Description: SecuBox Gitea — self-hosted Git server (LXC) Manages a Gitea Git server (private repositories, issues, PRs) running in its own LXC container. SecuBox wires up nginx vhost, ACME TLS, backup integration, and a web management dashboard around the upstream Gitea install. Package: secubox-glances Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 91 Depends: secubox-core (>= 1.0), glances, python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-glances/secubox-glances_1.0.0-1~bookworm1_all.deb Size: 15880 SHA256: e8e4b25799a442643c9d73c7cac96f4d8f430f8240cdd6040034f71cdea518d1 SHA1: fa7d9d33a74de394d1ebd4dcf1951d03705dac27 MD5sum: cf50d5e6321d13fd30e7e1bd28415084 Description: SecuBox Glances Dashboard System monitoring module wrapping the Glances monitoring tool. Provides real-time CPU, memory, disk, network stats with P31 Phosphor theme. . Features: hardware sensors, process list, historical data, service control. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-gotosocial Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 104 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-gotosocial/secubox-gotosocial_1.0.0-1~bookworm1_all.deb Size: 16482 SHA256: 981b25990d804e79043d6ec889a42e0160fdbba082904877ad1ab82742970aa4 SHA1: 78356fc0108e920c3472a47ff8b6e40c280ac626 MD5sum: 3dbcd64d2fa5052be40bc8a2de441f9e Description: GoToSocial Fediverse server management SecuBox module for managing GoToSocial ActivityPub server via Docker/Podman. Provides container management, account management, federation controls, media storage, moderation tools, and emoji management. . GoToSocial is a fast, lightweight ActivityPub social network server, compatible with Mastodon and the wider Fediverse. . Provides FastAPI backend on /api/v1/gotosocial/ via Unix socket. Package: secubox-grafana Version: 1.0.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 80 Depends: secubox-core (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq Recommends: secubox-mitmproxy, secubox-metrics Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-grafana/secubox-grafana_1.0.7-1~bookworm1_all.deb Size: 16496 SHA256: 81811e553fabf470e602de401c0fc4f030c4d7575ed3f19d74294c82dfddb45d SHA1: 36161ca3b8e37abb67ae336374ffb0c2c014b18b MD5sum: 6479103e553e1e7f21e14408a76483a0 Description: SecuBox Grafana — security metrics dashboards Hosts Grafana OSS in a Debian LXC at 10.100.0.70 on br-lxc, with pre-provisioned dashboards for the SecuBox security stack: nftables, crowdsec, suricata, cookie-audit, mitmproxy WAF and per-service systemd health. . The host-side FastAPI control plane runs on /run/secubox/grafana.sock and is exposed by nginx at /api/v1/grafana/. The native Grafana UI is iframe- embedded under /grafana/ (proxy_pass to the LXC). . grafanactl exposes the canonical SecuBox three-fold introspection (components/status/access) plus dashboard/datasource/alert/user/api-key nouns matching the OPS MONITORING layer of the CTL grammar. Package: secubox-haproxy Version: 1.3.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 230 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, secubox-defaults Recommends: haproxy, secubox-waf Priority: optional Section: net Filename: pool/main/s/secubox-haproxy/secubox-haproxy_1.3.0-1~bookworm1_all.deb Size: 39582 SHA256: 01c24fa0db92a9628fefd3818b8876e66cc23178b85149b6451b708918e32afd SHA1: 9dbd1ecca4f9aef5424bc164f40501780be98ad4 MD5sum: 744ec72cb1601da62d1adadad4ee4d29 Description: SecuBox HAProxy Dashboard Dashboard HAProxy avec gestion des vhosts et backends. Port Debian bookworm de luci-app-haproxy (SecuBox OpenWrt). . Features: - WAF integration for MITM traffic inspection - Per-vhost WAF bypass controls - CrowdSec ban synchronization - Dynamic route syncing with WAF module Package: secubox-hardening Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 85 Depends: secubox-core, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Recommends: auditd Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-hardening/secubox-hardening_1.0.2-1~bookworm1_all.deb Size: 15624 SHA256: 0d3ef04eeb54fb81cdeee953aab345c63b00b7b4a9552e175cf58f3ecde3234d SHA1: f024dc72f5eb780f4194405fa6cd44ddd4fb0b17 MD5sum: d720aae124266c07e960fd441348c81f Description: SecuBox Kernel and System Hardening Kernel and system hardening for SecuBox appliances. . Features: - Kernel sysctl hardening (ASLR, kptr_restrict, etc.) - Network hardening (SYN cookies, reverse path filter) - Module blacklist (uncommon protocols, filesystems) - Security benchmark tool . Based on ANSSI/CIS benchmark recommendations. Package: secubox-health-doctor Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 42 Depends: python3:any, secubox-core (>= 1.1), python3-uvicorn, python3-fastapi, lxc, systemd Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-health-doctor/secubox-health-doctor_1.0.1-1~bookworm1_all.deb Size: 9198 SHA256: a79560e9d0902b2747810312dd0ac109017d32c5d6cc04c100460a56d104de0f SHA1: 961cfaf6da74722ad1d136584d38fa0dc33d4223 MD5sum: db8064f53032096eca3c6739abb12c57 Description: SecuBox vital-services health monitor Daemon + CLI (healthctl) + FastAPI that runs periodic checks against the vital services on a SecuBox board (haproxy, mitmproxy LXC, gitea LXC, nginx, mail LXC, metrics socket, cookie-audit ledger freshness, crowdsec, filesystems, act-runner). State transitions emit CSPN-compatible journal events. Read-only API consumed by the portal banner. Package: secubox-hexo Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 116 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: web Filename: pool/main/s/secubox-hexo/secubox-hexo_1.0.0-1~bookworm1_all.deb Size: 17580 SHA256: 876fb15ca6e1c96e72e83a9df75b55769902faba630258139fca8ee1f53323af SHA1: ac1b26632a2947042d49b07a0038941fa5c8970a MD5sum: f3c9f5007ec5ec85e0c22597560f3c06 Description: Hexo static blog generator management SecuBox module for managing Hexo static site generator via Docker. Provides blog creation, theme/plugin management, post editing, and deployment to various targets. . Features: - Multiple blog management - Theme gallery and installation - Plugin management (sitemap, RSS, etc.) - Post editor with markdown preview - Preview server with live reload - Deploy to Git, rsync, SFTP . Provides FastAPI backend on /api/v1/hexo/ via Unix socket. Package: secubox-homeassistant Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 107 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip Recommends: docker.io | podman, lxc Priority: optional Section: net Filename: pool/main/s/secubox-homeassistant/secubox-homeassistant_1.0.0-1~bookworm1_all.deb Size: 16332 SHA256: 07e25a8650951b4b6a0439780773613624efdb20c620ee7bb5a6eefc8ce19951 SHA1: 0351948886366848f5e079bf2fcca81443895c28 MD5sum: 268b01aa474a67098f3ae0c108c02ad6 Description: Home Assistant IoT Hub for SecuBox Debian bookworm port of Home Assistant integration module. Provides FastAPI backend on /api/v1/homeassistant/ via Unix socket. . Features: - Docker/Podman/LXC container management for Home Assistant - Entity and device browser with controls - Automation management with enable/disable toggles - Scene management and activation - HACS (Home Assistant Community Store) integration - Backup and restore functionality - CRT-light P31 phosphor theme with HA blue accents Package: secubox-hub Version: 1.4.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 974 Depends: secubox-core (>= 1.0), fonts-noto-color-emoji Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-hub/secubox-hub_1.4.3-1~bookworm1_all.deb Size: 158530 SHA256: 362b1620f9afffffce503ddf0ab6e2c616d3355ed52e80985db8c1332d123d87 SHA1: b42edfae84e759459c4964918adcefbce2a4097d MD5sum: deb33cd4494a198f4e3a95236673e4eb Description: SecuBox Hub — Tableau de bord central Hub central SecuBox : lanceur de modules, état des services, alertes consolidées. . Port Debian bookworm de luci-app-secubox (SecuBox OpenWrt / CyberMind.fr). Package: secubox-identity Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-identity/secubox-identity_1.0.1-1~bookworm1_all.deb Size: 12832 SHA256: 216ee6ace949cbcd3a13256d348bc2bad2ba9dd208c35a7f4c3e7cf3d9051b1d SHA1: e4b1ea0d100723569a35cd4e308425afa58ed1cc MD5sum: aa4e1b8818fe5ff88d1b0cb69381e333 Description: SecuBox Identity — decentralized identity management Decentralized identity (DID) management for SecuBox: identity issuance, verification, and lifecycle. Distinct from user-account management (which is secubox-users' job). . Distinct from sibling packages in the identity stack: - secubox-users — local user accounts (Argon2id hashes, TOTP, RBAC). - secubox-auth — JWT auth guardian / session middleware. - secubox-portal — web login portal. - secubox-authelia — Authelia SSO IdP (LXC). - secubox-avatar — profile image + display-name manager. Package: secubox-interceptor Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 93 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: secubox-mitmproxy, secubox-waf, openssl Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-interceptor/secubox-interceptor_1.0.0-1~bookworm1_all.deb Size: 14592 SHA256: 220f40ec8a0983d9b2e97caf0f1b77789dfc6db8838fa1d93177eac0718e66b5 SHA1: f07ac0477ffd8d57b8c2a0df64b6dc1a04cd1e54 MD5sum: 9e147bcf671a033073cd05e03b519022 Description: SecuBox Traffic Interceptor HTTP/HTTPS traffic interception and analysis module. Provides SSL/TLS inspection, request/response modification, traffic recording, protocol analysis, content filtering, and WAF integration. Package: secubox-iot-guard Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-iot-guard/secubox-iot-guard_1.0.1-1~bookworm1_all.deb Size: 18112 SHA256: b31a4d1219def557ab95f8621a266694e1e4f25890b6b764caa8f4c5dd01686f SHA1: b1dbe49e44b83d055f8f2f068ac566d5b487c9e5 MD5sum: 847e029537697cbbdc8e94fac434b585 Description: SecuBox IoT Guard — IoT device discovery + segmentation Inventories IoT devices on the LAN (vendor MAC OUI, mDNS/SSDP/MQTT fingerprints), classifies them by type, and applies nftables micro-segmentation policies to keep IoT traffic isolated from trusted hosts. Package: secubox-ipblock Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 86 Depends: secubox-core (>= 1.0.0), nftables, curl Priority: optional Section: admin Filename: pool/main/s/secubox-ipblock/secubox-ipblock_1.0.0-1~bookworm1_all.deb Size: 14808 SHA256: 47975fe7348417b062953c5e4782bee9566e33578bdb6e329c6ae89ce8c471be SHA1: 1cb58b1ec36e47c58cf3b16a0052114967e56a5f MD5sum: f16c8116f586328fda87c51a3720dc02 Description: SecuBox IP Blocklist Manager IP blocklist management module for SecuBox. Features include: - Multiple blocklist sources (Spamhaus, AbuseIPDB, FireHOL, etc.) - Custom blocklist rules - nftables set integration - Whitelist management - Auto-update scheduling - Block statistics and history - Import/export lists Package: secubox-jabber Version: 1.0.0-1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 54 Depends: secubox-core, python3, python3-uvicorn | python3-pip, python3-fastapi | python3-pip, nginx Recommends: prosody Priority: optional Section: net Filename: pool/main/s/secubox-jabber/secubox-jabber_1.0.0-1_all.deb Size: 8692 SHA256: 13bf5ea16edc349b5e247a09a1c5e3ac0398d380148e04e0e877c76bf098a4e1 SHA1: 3ffbdaf32b9951cb029101f94d95c51af78f7b4d MD5sum: 045df22ff549f53bfd4859f1642b8b95 Description: SecuBox Jabber XMPP Server Prosody XMPP server management for SecuBox. User accounts, virtual hosts, and federation. Package: secubox-jellyfin Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 81 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-jellyfin/secubox-jellyfin_1.0.0-1~bookworm1_all.deb Size: 12996 SHA256: dd85fb37c9ec5562bb9df864b0a73ec70dad81089365c8321eaeb9b4d0932b55 SHA1: 917892fad9c9499b1b43586e10e31ab096fc1b51 MD5sum: 98a08183abe86dd52635786f304a09ab Description: Jellyfin media server management SecuBox module for managing Jellyfin media server via Docker. Provides container management, library configuration, backup/restore, and hardware acceleration support. . Ported from OpenWRT luci-app-jellyfin. Provides FastAPI backend on /api/v1/jellyfin/ via Unix socket. Package: secubox-jitsi Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 99 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman, docker-compose | podman-compose, nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-jitsi/secubox-jitsi_1.0.0-1~bookworm1_all.deb Size: 17594 SHA256: 37efd9730cef3741b5d47c843611940a81872e2eb8809b2a3868474e60b746bb SHA1: 3847c884ca946de093a7dfbcf4463ce309f59b0c MD5sum: 03f7f85f620833d6217a62b55ee0baa0 Description: SecuBox Jitsi Meet - Video Conferencing Docker-based Jitsi Meet video conferencing for SecuBox. Provides secure, scalable video meetings with screen sharing. . Features: - Full Jitsi Meet Docker stack (Web, Prosody, Jicofo, JVB) - JWT, LDAP, or internal authentication - Jibri recording and streaming support - SRTP/SRTCP encryption - Breakout rooms and lobby - CRT-light P31 phosphor theme dashboard . Ported from OpenWRT luci-app-jitsi concept. Provides FastAPI backend on /api/v1/jitsi/ via Unix socket. Package: secubox-ksm Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 62 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-ksm/secubox-ksm_1.0.0-1~bookworm1_all.deb Size: 10726 SHA256: 1dc07101f762b608c077ec0076e5a8726d52d1999dbe4dc68767d51656647c6a SHA1: 492026b20c5d488598d22435e370c1c1c7e523af MD5sum: d63ca2abcabd0e6ae1f8f4be9f69bfb5 Description: SecuBox KSM Memory Optimization Dashboard Kernel Same-page Merging (KSM) management module. Provides web UI and API for KSM controls to optimize memory in VMs and containers. . Features: enable/disable KSM, configure pages_to_scan and sleep_millisecs, view memory savings statistics. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-led-heartbeat Version: 2.1.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 87 Depends: python3, secubox-core, device-tree-compiler, i2c-tools Recommends: secubox-heartbeat Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-led-heartbeat/secubox-led-heartbeat_2.1.2-1~bookworm1_all.deb Size: 17616 SHA256: a1c1c71a598567785da89585a1d78606b0524b50713fa07e5c4420dea315f7d0 SHA1: f199859a1ef51b04eda65b3b50d133f66b03c611 MD5sum: b7998f74f88c8da82830f3819543a214 Description: SecuBox LED heartbeat status indicator Visual system health indicator using MOCHAbin RGB LEDs. . Displays system health, security status, and resource usage via the IS31FL3199 I2C LED controller (3 RGB LEDs). . LED mapping: - LED 1: Health status (pulsing green/yellow/red) - LED 2: Security status (steady, flashing on threat) - LED 3: Capacity (CPU/memory load) Package: secubox-lite Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-core (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-crowdsec (>= 1.0), secubox-wireguard (>= 1.0), secubox-netmodes (>= 1.0), secubox-nac (>= 1.0), secubox-system (>= 1.0), secubox-hardening (>= 1.0) Recommends: crowdsec, wireguard-tools Suggests: secubox-netdata, secubox-qos, secubox-auth, secubox-watchdog, secubox-backup Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-lite/secubox-lite_1.1.0-1~bookworm1_all.deb Size: 1560 SHA256: 6c7ce732bb789243492cacdca4530da6e8b92926e0fc3d22f300b1b658136cc0 SHA1: acf2174312ece40205850f8ec8fcd2e4f4f1ff60 MD5sum: 9a6509ccaba23d141e7f88200905bb38 Description: SecuBox Lite — Essential modules for low-RAM devices Metapackage installing essential SecuBox modules for ESPRESSObin and other devices with 1-2GB RAM. . Includes: Hub, CrowdSec, WireGuard, Network Modes, NAC, and System. DPI, QoS, CDN and other heavy modules are excluded. Package: secubox-localai Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 73 Depends: secubox-core, python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-httpx | python3-pip, nginx, lxc, lxc-templates Priority: optional Section: admin Filename: pool/main/s/secubox-localai/secubox-localai_1.0.0-1~bookworm1_all.deb Size: 12706 SHA256: f72178ba1afb2d762a10f5f3b2bbb58ce634fe83129fc6d082ca33b16685b3ae SHA1: c7137584b227471196f70ed83cbf58604a260a3c MD5sum: a2c56c11bc7957f07439c6779c1e57c2 Description: SecuBox LocalAI - Self-hosted LLM inference Alternative to Ollama with OpenAI-compatible API. Features container management, model gallery, and chat interface. Package: secubox-localrecall Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 58 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-localrecall/secubox-localrecall_1.0.1-1~bookworm1_all.deb Size: 10846 SHA256: f7e5cfa8d914c69ee8802b45cd4dd8576a4920f2d5822a1f3b8033da57d39b50 SHA1: da2830955f7d6b133eeb62afe7b421d3214d3d3c MD5sum: c7e6675fca49488620794101ed149c07 Description: SecuBox LocalRecall — on-box AI memory store Long-term, on-box memory store for AI assistants: conversation history, learned operator preferences, project context. Local storage only — nothing leaves the box. Pairs with secubox-mcp-server if exposing memory contents to MCP-compatible AI clients. Package: secubox-lyrion Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 88 Depends: secubox-core (>= 1.0), secubox-users (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, python3-yaml, openssl, curl, jq Recommends: secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-lyrion/secubox-lyrion_1.1.0-1~bookworm1_all.deb Size: 23088 SHA256: 7f1f764ea46321c560cd60951c73b978f2f0c998a9b3c5761c1fbc310e41d5ae SHA1: ed39a09929f7c584e0989bc384a1a8629678e6a6 MD5sum: 03c0f24573939ed51e4c486e6fe313ea Description: SecuBox Lyrion — Music server (HOSTING layer) Hosts Lyrion in a Debian bookworm LXC at 10.100.0.100 on br-lxc. File-backend identity provider reading /etc/secubox/users.json (the same argon2-hashed user store already managed by secubox-users) so the canonical SecuBox identity is the single source of truth for SSO. . OIDC clients pre-provisioned for the three native admin UIs that already support OIDC: Grafana, Gitea, Nextcloud. YaCy/RustDesk-web/mitmproxy-web (no native OIDC) get nginx `auth_request` integration to the same Lyrion. . Health-banner injected on the Lyrion login page via nginx sub_filter so the operator sees the SecuBox system health bar even on the SSO screen. Package: secubox-mac-guard Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 95 Depends: secubox-core (>= 1.0), nftables, nginx, ieee-data Recommends: nmap, arp-scan Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mac-guard/secubox-mac-guard_1.0.0-1~bookworm1_all.deb Size: 15972 SHA256: 973b382a1a671bc0ac7d5a8cfb73b93f8f5a378f17caf32a8c985c7501fec73d SHA1: d1fd6950f77cb064c265c2d5afdf92d8de3c30b6 MD5sum: 8d99196e6e129ac868df96b7d1c306af Description: SecuBox MAC Guard - MAC Address Control MAC-based network access control with device discovery, vendor lookup, whitelist/blacklist management, and nftables integration. . Features: - MAC address whitelist/blacklist management - Device discovery and tracking via ARP/DHCP - OUI vendor lookup (ieee-data) - Device naming and tagging - Alert on unknown devices - nftables MAC filtering integration - Real-time device monitoring . Port Debian bookworm SecuBox module (CyberMind.fr). Package: secubox-magicmirror Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 66 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: nodejs, npm, xserver-xorg, chromium, git Breaks: secubox-mmpm (<< 1.1) Replaces: secubox-mmpm (<< 1.1) Priority: optional Section: web Filename: pool/main/s/secubox-magicmirror/secubox-magicmirror_1.1.1-1~bookworm1_all.deb Size: 11714 SHA256: 0129e54494e39565b3cc1f611aa722a18ccd4e438694ac1367785e022cf22c8d SHA1: 0f4d29d452ad5dbe6c699aa319ffebe697d0034e MD5sum: 010f010199a8f20ca2fecb087c3016f2 Description: SecuBox MagicMirror management Smart display platform management for SecuBox. Provides API and web UI for MagicMirror² configuration, module management, and display controls. . As of 1.1, the MagicMirror Package Manager (MMPM) frontend and endpoints are folded into this package and reachable at /magicmirror/mmpm/ and /api/v1/magicmirror/mmpm/* respectively. The standalone secubox-mmpm package is now a transitional shell and can be removed via apt autoremove after upgrade. Package: secubox-mail Version: 2.3.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 243 Depends: secubox-core (>= 1.0.0), lxc, debootstrap, openssl, python3-httpx Suggests: acme.sh Breaks: secubox-mail-lxc (<< 2.2), secubox-webmail (<< 2.2), secubox-webmail-lxc (<< 2.2) Replaces: secubox-mail-lxc (<< 2.2), secubox-webmail (<< 2.2), secubox-webmail-lxc (<< 2.2) Priority: optional Section: admin Filename: pool/main/s/secubox-mail/secubox-mail_2.3.2-1~bookworm1_all.deb Size: 47182 SHA256: 0867e75a063f62328789ff0cb682f0012ea74a43e0522550ee8aa4e1010e18d7 SHA1: 398fd25a6173f77e92ed67a5f0c1fd6ec5deee85 MD5sum: 462e7f7bbef674c386755ad5a45be910 Description: SecuBox Mail Module Complete email server management API and dashboard. Postfix/Dovecot mail server and Roundcube webmail in Debian LXC containers. . Features: - User/alias management via mailctl - DKIM/SPF/DMARC configuration - ACME certificate automation (Let's Encrypt) - Service monitoring - Webmail integration (Roundcube in LXC) - Three-fold architecture (components, status, access) . For Let's Encrypt certificates, install acme.sh: curl https://get.acme.sh | sh Package: secubox-mail-lxc Version: 2.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 10 Depends: secubox-mail (>= 2.2) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-mail-lxc/secubox-mail-lxc_2.2.1-1~bookworm1_all.deb Size: 1986 SHA256: e48312fe703bb710233501f97a7a98fa36dff2f9667d8d028ed214450dfb20bd SHA1: 0a591f4bf58bc8d2de11501c8f1d8d6f7378ffc6 MD5sum: 9a18c592878a4f107c6901559fc0fcf1 Description: Transitional package — mail LXC functionality moved to secubox-mail The single consolidated mail LXC is now installed and driven by secubox-mail (>= 2.2). This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-master-link Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 10 Depends: secubox-p2p (>= 1.7) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-master-link/secubox-master-link_1.1.0-1~bookworm1_all.deb Size: 2178 SHA256: 34f15d6543d4a8a76a4ee9987d41e2fe8dbe76d51c267577859dad263331a1d1 SHA1: 69df6faddb8e9314ebb7c69cb271c7c42b939dbd MD5sum: 384e3b9d87a469e74a7cf9ad6b2c4149 Description: Transitional package — master-link folded into secubox-p2p Mesh node enrollment lives inside secubox-p2p (>= 1.7), reachable at /master-link/ and /api/v1/p2p/master-link/*. This package ships no files. Safe to apt-get autoremove after upgrade. . Pre-1.1 secubox-master-link installs were never reachable via nginx — the standalone service ran on /run/secubox/master-link.sock but no nginx config routed to it. Operators saw secubox-p2p's master-link UI all along. . The pre-1.1 state directory at /var/lib/secubox/master-link/ is preserved on upgrade so any direct-socket clients can retrieve their token/peer data manually. Delete it after migration. Package: secubox-matrix Version: 1.0.0-1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 114 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, lxc, lxc-templates Recommends: nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-matrix/secubox-matrix_1.0.0-1_all.deb Size: 18286 SHA256: 7791b8d57dff9378c8fc047d08ea2e9dff9680dafc2fe81b0adab4a20ea7c3a1 SHA1: 233ded3ce090a31c50ba6c47d515860fe59a7a86 MD5sum: c9f96912ca41e4c54a984a59b926d807 Description: SecuBox Matrix Synapse - Federated Chat Server LXC-based Matrix Synapse homeserver for SecuBox. Provides federated, encrypted messaging with Element web client support. . Features: - Full Matrix Synapse homeserver in LXC container - User and room management via web UI - Bridge support (Telegram, Discord, Signal, etc.) - Element web client installation - Federation support - Backup/restore functionality Package: secubox-mcp-server Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 73 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-mcp-server/secubox-mcp-server_1.0.1-1~bookworm1_all.deb Size: 13548 SHA256: 7ca790c05ad63ab268b901b46406ab39142d9a56e14df2ba3ad1c5f45677b9a5 SHA1: a968d1da2162ce836416ab477e9066a859857661 MD5sum: 0a3a8a3b66c7e704cb1efc1d136c0a09 Description: SecuBox MCP Server — Model Context Protocol server for AI tools Hosts a Model Context Protocol (MCP) server exposing SecuBox telemetry, config, and operations to MCP-compatible AI clients (Claude Desktop, Cursor, etc.). Operator-controlled tool surface with per-client authentication. . Distinct from sibling packages in the AI cluster: - secubox-ai-gateway — request router with sovereignty policy. - secubox-ai-insights — ML-based threat detection. - secubox-localai — self-hosted LocalAI LLM runtime. - secubox-ollama — Ollama LLM runtime wrapper. Package: secubox-mediaflow Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 142 Depends: secubox-core (>= 1.0), secubox-dpi Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mediaflow/secubox-mediaflow_1.0.4-1~bookworm1_all.deb Size: 25168 SHA256: ce16b501d3f196866f2cb6cd346cb6563177829e79a3d3878a29c0a3c2bb8c49 SHA1: 736ae646b3fa292e7dba35acfe77fac9f3bd987e MD5sum: 842305eca65b45222746e407479cd713 Description: SecuBox Media Flow Détection trafic streaming et VoIP : Netflix, YouTube, Zoom, Spotify, qualité d'expérience. . Port Debian bookworm de luci-app-media-flow (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mesh Version: 2.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 78 Depends: secubox-core (>= 1.0), python3 (>= 3.11), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jinja2, python3-pydantic, iw, hostapd, wpasupplicant, wireless-regdb, adduser Breaks: secubox-mesh (<< 2.0.0~) Replaces: secubox-mesh (<< 2.0.0~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mesh/secubox-mesh_2.0.4-1~bookworm1_all.deb Size: 18060 SHA256: 90b5d996d78bcfa70b053bba015727ea5ffafabb9e3975d737444759f3e3363b SHA1: 9b815e411b3212c37ed904cae03dcb1a5e8d17ff MD5sum: 7e874c0af12694ffbe382605be210ae2 Description: SecuBox-DEB MESH module (802.11s + Passpoint AP, OPAD) Plan de contrôle FastAPI pour le module mesh : 802.11s/HWMP backhaul (ath10k_pci QCA9880 par défaut), AP Passpoint HS2.0 via hostapd, et client mesh USB (mt76x2u / ath9k_htc). Verrou régulatoire FR au postinst, posture OPAD passive par défaut. . Référence spec : CM-MESH-MPCIE-2026-06 v0.2.1. Package: secubox-meshname Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 62 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-meshname/secubox-meshname_1.0.1-1~bookworm1_all.deb Size: 10818 SHA256: d5d664eda71ce0a326d7668a72dfe8356b96e29566f9979ff1a760493eb96024 SHA1: 7639ce401b2726e37cf030e25e0032c2310e7192 MD5sum: 14eef4007a80ae2821df4f667e75e3b9 Description: SecuBox Meshname — Yggdrasil-overlay DNS resolver Meshname DNS resolver: maps RFC-compliant `.ygg` domains to Yggdrasil IPv6 addresses for mesh-internal name resolution. Provides node and mapping CRUD via the web dashboard. . Distinct from sibling packages in the mesh cluster: - secubox-mesh — Yggdrasil mesh daemon control (peers, sessions, services). Different layer: meshname is the DNS overlay on top of mesh's daemon control. - secubox-p2p — P2P hub + master-link enrollment (canonical after #384). - secubox-daemon — Go-built mesh daemon (different runtime). Package: secubox-metablogizer Version: 1.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 159 Depends: secubox-core, python3, nginx, python3-jsonschema Priority: optional Section: admin Filename: pool/main/s/secubox-metablogizer/secubox-metablogizer_1.2.1-1~bookworm1_all.deb Size: 33566 SHA256: 01442952e9aa442558e6efad201ad72a5bae2e328fdeb9498b005935c3129046 SHA1: 51ae3080712389d6d8bd488be0c8c737e7459cfa MD5sum: 4adabf186aeb9e5c9b92b3b25d84aff9 Description: SecuBox MetaBlogizer - Static Site Publisher Static site publishing and management for SecuBox. Package: secubox-metabolizer Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 93 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-metabolizer/secubox-metabolizer_1.0.0-1~bookworm1_all.deb Size: 16176 SHA256: 3438cf4ca33142dae9974500bdec42fc442b7bd195edfb2ad45e2f051ba470c3 SHA1: 9a93120b45b5bf1601d436435fbe5db3dac5a707 MD5sum: 6d4936a4f112e67f093908e06535dfa4 Description: SecuBox Metabolizer - Log processor and analyzer Log processing module that analyzes journalctl logs, extracts patterns, calculates statistics, and monitors log rotation for SecuBox. Features include pattern detection, error trend analysis, and service log aggregation. . Port Debian bookworm de SecuBox (CyberMind.fr). Package: secubox-metacatalog Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 95 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-metacatalog/secubox-metacatalog_1.0.0-1~bookworm1_all.deb Size: 15524 SHA256: 10bf107423f9d40236ad0f207f6cf7a1bafdefb0179380ad453bf757782be9b9 SHA1: 5e81e14d34463093467c5637ecd145ed1710c1ac MD5sum: 0aaa4ad78173dd19be44edaadb8ea01e Description: SecuBox Metacatalog - Service catalog and registry SecuBox module for discovering and monitoring installed SecuBox services. Provides a centralized view of all services, their health status, dependencies, and API endpoints. . Features: - Catalog of installed SecuBox services - Service health status tracking - Dependency mapping between services - API endpoint documentation - Service metadata (version, ports, sockets) - P31 Phosphor light theme frontend . Part of the SecuBox security appliance suite. Package: secubox-metoblizer Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 15 Depends: python3, python3-fastapi, python3-uvicorn, python3-httpx, secubox-core Priority: optional Section: admin Filename: pool/main/s/secubox-metoblizer/secubox-metoblizer_1.0.0-1~bookworm1_all.deb Size: 2150 SHA256: aa0624fc4d395507efef8a49af4d2d3436daa337f34b12a3a423f084fee6d2b6 SHA1: 37123c170fef2a763457652c561cb79f53a9faa3 MD5sum: e36843ecc41017445bf257f61d807579 Description: SecuBox centralized log aggregator Metoblizer aggregates logs and events from SecuBox modules (netdata, glances, streamlit, etc.) and provides unified querying, presence events, and banner injection. Package: secubox-metrics Version: 1.0.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 121 Depends: secubox-core, python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-maxminddb | python3-pip, python3-cryptography, nftables Recommends: geoipupdate Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-metrics/secubox-metrics_1.0.3-1~bookworm1_all.deb Size: 23050 SHA256: 4f67df78a9d4dbf3978dfdfb410baac6386e0f702cffddba1e9b225634684770 SHA1: bf69269f972c2d59829ae049fe22a8bb97faa347 MD5sum: 0ccd86eaad3b6f9352f4b7a200e3faeb Description: SecuBox Metrics Dashboard Real-time system metrics dashboard with caching. Provides overview stats, WAF metrics, connection counts, and service status monitoring. Package: secubox-mirror Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 75 Depends: secubox-core (>= 1.0), nginx, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, curl Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mirror/secubox-mirror_1.0.0-1~bookworm1_all.deb Size: 12742 SHA256: 5d563afd84f9589a8e073b34eb7f30ee50879d7579b70ef454413f323743c4bc SHA1: bcf11f71e4d19f2d3f6ed62d3b45dbb9bc251a1c MD5sum: 7de0cc47f3980b91b7774e1063ecd5df Description: SecuBox Mirror/CDN Cache Local mirror and CDN caching service for APT repositories and other content. Features nginx caching proxy, mirror sync status, cache statistics, and bandwidth optimization through edge caching. . Part of SecuBox-DEB security appliance (CyberMind.fr). Package: secubox-mitmproxy Version: 1.0.8-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 268 Depends: secubox-core (>= 1.0), secubox-haproxy, lxc, lxc-templates, xz-utils, python3-uvicorn, python3-toml Recommends: secubox-crowdsec Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mitmproxy/secubox-mitmproxy_1.0.8-1~bookworm1_all.deb Size: 52210 SHA256: 0865a3c74bcbf3d03af0a58450cb6d6de884abebb5131ed120d1b84e57924388 SHA1: e00304a5c42182c1abb50a795bc08cef17183f14 MD5sum: 171d98b6c01ece08c98c0025583477e6 Description: SecuBox Mitmproxy WAF — Web Application Firewall HTTP traffic inspection for HAProxy-hosted services with threat detection and CrowdSec integration for automatic IP banning. . Features: - LXC-isolated mitmproxy instance - 90+ threat detection patterns (SQLi, XSS, RCE, etc.) - HAProxy integration for vhost inspection - CrowdSec JSONL output for auto-banning - WebUI dashboard with real-time stats . Port Debian bookworm de luci-app-mitmproxy (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mmpm Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-magicmirror (>= 1.1) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-mmpm/secubox-mmpm_1.1.0-1~bookworm1_all.deb Size: 1592 SHA256: ac0e68bbad27897bb178188e5d08752440f64537cf18fe3fcec2507ec59f2f06 SHA1: b854a9f1ad52b89d37799ee42f8c333055ae4f21 MD5sum: da98087a95b0c04684bffc678c660ddb Description: Transitional package — mmpm folded into secubox-magicmirror The MagicMirror Package Manager API and frontend now live inside secubox-magicmirror (>= 1.1), reachable at /magicmirror/mmpm/ and /api/v1/magicmirror/mmpm/* respectively. This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-modem Version: 1.0.0-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 169 Depends: secubox-core (>= 1.0), modemmanager, libqmi-utils, libmbim-utils, picocom, python3-serial Recommends: usb-modeswitch, usb-modeswitch-data Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-modem/secubox-modem_1.0.0-1_all.deb Size: 29412 SHA256: 4a91cd4beb16c42dcdacf8d9a69c72bf114d2c557c43ae5d54fe8956d35119a8 SHA1: 56a5664f37e7f6fa15d72cd2cd5b3f61aa5277b4 MD5sum: cc8e218186d6c44505d5589242fe6770 Description: SecuBox LTE/5G Modem Management Quectel LTE/5G modem management interface for SecuBox. . Features: - Auto-detect any plugged Quectel modem (EC25, RM500Q, etc.) - Data connection management (APN, connect/disconnect) - SMS send/receive via WebUI - AT command console (interactive WebSocket terminal) - Signal strength monitoring with real-time graphs - Firmware/device info display - Hybrid approach: ModemManager + qmicli . Port Debian bookworm de luci-app-modem (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mqtt Version: 2.4.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 74 Depends: secubox-core (>= 1.0), lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mqtt/secubox-mqtt_2.4.0-1~bookworm1_all.deb Size: 16658 SHA256: 2a4f587935cb782a9089f7c2225f474e96828dcf29cf79f8b0312b422ba9700f SHA1: e4393f04154b2b8216fcaff1a82949079212d69b MD5sum: 2dc65376ee80639c1ee97a795b1cc2e3 Description: SecuBox MQTT — Mosquitto broker (WALL layer) Hosts a hardened Mosquitto 2.x broker in a Debian bookworm LXC at 10.100.0.110 on br-lxc. . No anonymous access (allow_anonymous false). Per-service authentication via mosquitto_passwd-managed credentials and per-topic ACL — z2m, sentinelle, domoticz and the SecuBox internal API each get their own user with a randomly-generated password stored under /etc/secubox/secrets/mqtt-* (mode 0600, owner root:secubox). . Host-side control plane: FastAPI on Unix socket /run/secubox/mqtt.sock + nginx route /api/v1/mqtt/ on the canonical hub vhost. CTL grammar: mqttctl components / status / access + install / reload + topic / client / acl / user nouns. Package: secubox-nac Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 203 Depends: secubox-core (>= 1.0), dnsmasq, nftables, nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-nac/secubox-nac_1.0.4-1~bookworm1_all.deb Size: 35242 SHA256: d6954c3b7e89e647c07a2f1fd415c9e3f232553110a2954179fffa52cda163a9 SHA1: cc56945cc70bd76c1b4b8b93d1c9a9a6ec3416e7 MD5sum: b5d9556347703704ecbabccec762f32a Description: SecuBox NAC / Client Guardian Contrôle d'accès réseau : zones nftables, portail captif, contrôle parental, quarantaine. . Port Debian bookworm de luci-app-client-guardian (SecuBox OpenWrt / CyberMind.fr). Package: secubox-ndpid Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 91 Depends: secubox-core (>= 1.0.0), ndpid | ndpi-reader, python3-zmq Recommends: secubox-dpi Priority: optional Section: admin Filename: pool/main/s/secubox-ndpid/secubox-ndpid_1.0.1-1~bookworm1_all.deb Size: 15684 SHA256: ca62a5623e3566a9673a85369c5ede39a083135a89f047257d7f831bae658fa5 SHA1: 7fb671bdc1c502a70edfd7ef86c7ce58096ac93f MD5sum: 8df37971c863e1f9ea045303f83fcae3 Description: SecuBox nDPId — DPI dashboard with JA3/JA4 TLS fingerprinting nDPId-backed deep packet inspection dashboard: JA3/JA3S/JA4 TLS fingerprinting, protocol detection, application classification, risk scoring, and SQLite flow database. . Distinct from sibling packages in the DPI cluster: - secubox-netifyd — netifyd daemon lifecycle dashboard (different DPI engine). - secubox-dpi — netifyd-backed analytics layer (top apps, bandwidth, mirred setup) — see #382 for the layered model. - secubox-mediaflow — streaming/VoIP classifier consuming DPI. Package: secubox-netdata Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 169 Depends: secubox-core (>= 1.0), netdata Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netdata/secubox-netdata_1.0.4-1~bookworm1_all.deb Size: 28148 SHA256: 99beb9ba20abcc651ee770a9c1eec370295e591ffee0d72b3b2d78eae9adc265 SHA1: 24458921f5daf47243e3df7fa0316a7c61f0a727 MD5sum: 7c241a86148c4feadf56b91c74c0cc5e Description: SecuBox Netdata Dashboard Monitoring temps réel via Netdata REST v2 : CPU, RAM, réseau, température, processus. . Port Debian bookworm de luci-app-netdata-dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-netdiag Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 100 Depends: secubox-core (>= 1.0), iputils-ping, traceroute, dnsutils, whois, mtr-tiny, nmap, net-tools, iproute2 Recommends: iperf3 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netdiag/secubox-netdiag_1.0.0-1~bookworm1_all.deb Size: 15990 SHA256: d12fd246f18f0cc48a608d5357a5bd7fed4a6ea30fc55d0b4a5b09f465f2ce29 SHA1: 2c1b0e480b4952e4e4e043e12374201bd6d00290 MD5sum: 599921950a98529daf3caa791e2eec6a Description: SecuBox Network Diagnostics — Troubleshooting Tools Network diagnostics module for SecuBox providing various troubleshooting tools including ping, traceroute, DNS lookup, WHOIS, MTR, port scanning, and network interface analysis. . Features: - Ping with RTT statistics - Traceroute with hop analysis - DNS lookup (A, AAAA, MX, NS, TXT, CNAME, SOA) - WHOIS domain/IP lookup - MTR (My Traceroute) - Port scanning (local network only) - Network interface listing - Routing table display - ARP table - Active connections (netstat-like) - Bandwidth testing (iperf3) . Part of SecuBox Debian edition. Package: secubox-netifyd Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 85 Depends: secubox-core (>= 1.0), netifyd Recommends: iproute2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netifyd/secubox-netifyd_1.0.0-1~bookworm1_all.deb Size: 13962 SHA256: 7cc2eae62dabda89602d7bdc51cfd7121bd526e23617b715cc709ec7f2e8d30c SHA1: adae2d9b5101b3482a9afb621df9ce1c92accff8 MD5sum: 007e672a6772523dc992cba637fe8538 Description: SecuBox Netifyd - Network Intelligence Daemon Dashboard Deep Packet Inspection daemon management for netifyd. Provides a web dashboard for network flow analysis, protocol detection, application classification, and device discovery. . Features: - Real-time network flow visualization - Protocol and application breakdown - Device/host discovery and tracking - Bandwidth monitoring per app/device - DPI alerts and notifications . Port Debian bookworm from SecuBox OpenWrt netifyd integration. Package: secubox-netmodes Version: 1.0.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 280 Depends: secubox-core (>= 1.0), netplan.io, iproute2, bridge-utils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netmodes/secubox-netmodes_1.0.5-1~bookworm1_all.deb Size: 46530 SHA256: d55f79ad8b54b49adfec6c24de646ecf0ad61d11a95f4376af6a9b7685494570 SHA1: 68365dc6b9361f5c4bdc269e717858ce4ea0b4a0 MD5sum: 9b7b74dc05544e5a3c80e343d42c45c7 Description: SecuBox Network Modes Commutation de modes réseau : router, sniffer-inline, sniffer-passif, AP, relay. Templates netplan par mode. . Port Debian bookworm de luci-app-network-modes (SecuBox OpenWrt / CyberMind.fr). Package: secubox-nettweak Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 86 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, procps Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-nettweak/secubox-nettweak_1.0.0-1~bookworm1_all.deb Size: 14350 SHA256: 94a2fc846bffd4a7c28c3a140dcdb325ac319dc5d44358491a9ecbd4659a2bb8 SHA1: 7a942d18baf5b873e3e2567edfb9aa2de692c598 MD5sum: 3693a9142df0f0c7e99decb60242210e Description: SecuBox Network Tuning Dashboard Network tuning module for sysctl and TCP/IP stack optimization. Provides web UI and API for managing kernel network parameters. . Features: tuning profiles (default, performance, low-latency, security), TCP settings, network stack settings, persistent configuration. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-network-anomaly Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 57 Depends: secubox-core (>= 1.0.0) Recommends: dnsmasq Priority: optional Section: admin Filename: pool/main/s/secubox-network-anomaly/secubox-network-anomaly_1.0.1-1~bookworm1_all.deb Size: 11112 SHA256: 1b6491a25f78b537c47a278ef9f2393ddf6e06ef93aeb3d277e186a94744476b SHA1: 05ead8c283f957f36d8af99d00beb435f65e6ea9 MD5sum: 2376a65ed0b795f59eb9b73a01cc4334 Description: SecuBox Network Anomaly — DNS-log anomaly detection Reads /var/log/dnsmasq.log and flags lookups that deviate from baseline patterns (volume, novelty, NXDOMAIN bursts, suspicious TLDs). . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella dashboard (CrowdSec + Suricata + WAF alerts). - secubox-threat-analyst — AI agent that writes CrowdSec scenarios. - secubox-cve-triage — CVE vulnerability triage. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables-driven IP blocklist enforcement. - secubox-openclaw — OSINT / reconnaissance. . For DNS-layer blocking (rather than detection only), see secubox-dns-guard or secubox-vortex-dns. Package: secubox-newsbin Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 107 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-newsbin/secubox-newsbin_1.0.0-1~bookworm1_all.deb Size: 16772 SHA256: 77de4c2fff74ba336106c06e47d03c19446b8e6e1a0da4105865c9006bc75863 SHA1: df8fcacf8d53b831a1f94c3d719beb0794aaecf1 MD5sum: 68c4cad68877ea38979806130be01da9 Description: Usenet downloader management for SecuBox SecuBox module for managing SABnzbd Usenet downloader via Docker. Provides NZB download management, queue control, Usenet server configuration, categories, and post-processing support. . Features: - SABnzbd container management (Docker/Podman) - NZB file/URL handling - Download queue with pause/resume - Usenet server configuration - Category organization - Download history and statistics . Provides FastAPI backend on /api/v1/newsbin/ via Unix socket. Package: secubox-nextcloud Version: 1.4.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 110 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-nextcloud/secubox-nextcloud_1.4.1-1~bookworm1_all.deb Size: 23682 SHA256: e200b568a80d5342903bd4d0d4c90df6ea2f96f8d12260cc0fa05744dd92bbc6 SHA1: a1a5f79737fa33ead314af7bba206b612cb0a527 MD5sum: ebe5263610bd3c1709abe47d85587029 Description: SecuBox Nextcloud — self-hosted file sync + collaboration (LXC) Manages a Nextcloud server (file sync, calendar, contacts, collaborative editing) running in its own LXC container. SecuBox wires up nginx vhost, ACME TLS, SSO via secubox-authelia (SSO cookie scope per #272), backup integration, and a web management dashboard around the upstream Nextcloud install. Package: secubox-ollama Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 79 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-ollama/secubox-ollama_1.0.0-1~bookworm1_all.deb Size: 13180 SHA256: 8570bd7f099e21b14af6e121eac98547ec0c7c0fb79bc504450ba47bdffc1d86 SHA1: 0a059e5b34f84b5ebc755b56f53db23796a17efe MD5sum: 8c94aa22eadd52d9d32898a914a0f6c2 Description: Local AI inference with Ollama SecuBox module for managing local LLM inference via Ollama. Provides container management (Docker/Podman), model pulling, chat completion, and text generation APIs. . Ported from OpenWRT luci-app-ollama. Provides FastAPI backend on /api/v1/ollama/ via Unix socket. Package: secubox-openclaw Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 98 Depends: secubox-core (>= 1.0.0), dnsutils, whois, curl Recommends: nmap Priority: optional Section: admin Filename: pool/main/s/secubox-openclaw/secubox-openclaw_1.0.1-1~bookworm1_all.deb Size: 17358 SHA256: 70c1fa903ab8763161acd71352147aa9c7aeddfe5c0faa92df083a7d2d116b78 SHA1: 65313cf2d6aa9649349bce32b269cdb44773b483 MD5sum: d33a9ad860c248a9e25a390ae04a2a75 Description: SecuBox OpenClaw OSINT Module Open Source Intelligence (OSINT) tool for reconnaissance and information gathering. Features include: - Domain reconnaissance with DNS enumeration - IP intelligence and port scanning - Email harvesting detection - Subdomain discovery - Certificate transparency lookups - WHOIS information gathering - Shodan/Censys/VirusTotal integration Package: secubox-ossec Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 61 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: ossec-hids | ossec-hids-agent Priority: optional Section: admin Filename: pool/main/s/secubox-ossec/secubox-ossec_1.0.0-1_all.deb Size: 9490 SHA256: b28131489bcd7fdf81f54cd1cb4cac8fc02b1b12353be327c4ab3017ec52f21f SHA1: e58216d85ffb3827627e9506bb648135ffc2daa5 MD5sum: 2ef4da99173939ab89ed9dc71b662c3f Description: SecuBox OSSEC HIDS integration OSSEC Host-based Intrusion Detection System integration. Provides management interface for OSSEC services, alert viewing, file integrity, and rootkit detection. Package: secubox-p2p Version: 1.7.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 184 Depends: secubox-core (>= 1.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, avahi-daemon, avahi-utils Breaks: secubox-master-link (<< 1.1) Replaces: secubox-master-link (<< 1.1) Priority: optional Section: admin Filename: pool/main/s/secubox-p2p/secubox-p2p_1.7.0-1~bookworm1_all.deb Size: 32800 SHA256: be9ca814c9d7a9b72d732067806829bf611bfdc6d6103effb28e0f4e095b505b SHA1: c04da2dfa9fa5ce79f5eef300dbb01120441e1f1 MD5sum: 7510a1ffd23958a7e07e1d0942eed589 Description: SecuBox P2P - Peer-to-Peer Network Hub P2P network management with peers, services, mesh visualization, and threat intel. Includes master-link enrollment (token issuance, peer approval, join workflow) served at /master-link/ and /api/v1/p2p/master-link/*. . As of 1.7, this package absorbs the master-link role that was previously shipped as a separate (but never nginx-reachable) secubox-master-link package. Operators who had secubox-master-link installed see it autoremoved on apt full-upgrade. Package: secubox-peertube Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 164 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl Priority: optional Section: net Filename: pool/main/s/secubox-peertube/secubox-peertube_1.1.0-1~bookworm1_all.deb Size: 32482 SHA256: 8b94141432f2f4cb938df69d8532b8a51a66a92f31b7b81efb925c42b6b898f0 SHA1: 8ec9463bdc7530681a25236fd7887fb12c6bfca8 MD5sum: 6ccb7bd404effe3469385d94d65a6d8c Description: SecuBox PeerTube — federated video platform (native LXC) Dashboard + FastAPI backend for a PeerTube video-hosting instance installed NATIVELY inside a dedicated Debian LXC (its own peertube.service: Node 22 + PostgreSQL 15 + Redis + ffmpeg). The API daemon on the host is lightweight (always reachable to serve the dashboard); `peertubectl install` provisions the LXC and the PeerTube stack on demand. . PeerTube runs native-in-LXC rather than Docker/Podman: an unprivileged LXC cannot reliably bring up a podman CNI bridge on the Marvell arm64 boards, so the native systemd-managed install is the supported path. . Features: - LXC lifecycle via peertubectl (install, status, start, stop, restart, logs) - Public nginx vhost (:9080 → LXC :9000) bypassing the WAF (gitea pattern) - Video and channel management - User creation and role assignment (admin/moderator/user) - Federation (ActivityPub) — follow/followers - Transcoding settings (HLS, WebTorrent, resolutions) - Plugin installation from NPM - Storage usage monitoring . Distinct from sibling federated/streaming/media SecuBox packages: - secubox-matrix — Matrix Synapse (chat federation, not video). - secubox-jitsi — Jitsi Meet (real-time conferencing, not VOD). - secubox-jellyfin — Jellyfin (local media library, not federated). - secubox-gotosocial — GoToSocial (microblog ActivityPub, not video). - secubox-simplex — SimpleX Chat (decentralized chat). . Reachable at /peertube/ (frontend) and /api/v1/peertube/* (API) via Unix socket /run/secubox/peertube.sock. Package: secubox-photoprism Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 129 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl Priority: optional Section: net Filename: pool/main/s/secubox-photoprism/secubox-photoprism_1.1.0-1~bookworm1_all.deb Size: 24946 SHA256: 2d52afa4383cec9e99f77afa0ee25a83948595784680c8ea2bdf6ea092904493 SHA1: 99f09b9c21733c704237b7cf8964d893e3e57a83 MD5sum: f8ca06f3cfdd7c737607c411bdfe0103 Description: PhotoPrism photo management for SecuBox (native LXC) SecuBox module for a PhotoPrism photo server running as a podman container inside a dedicated Debian LXC (--network=host). `photoprismctl install` provisions the LXC + container on demand; the host dashboard daemon stays lightweight and always reachable. . Photos live on /data/shared/photos, also mounted by Nextcloud as the "PhotoLibrary" external storage — phone → Nextcloud → /data/shared/photos → PhotoPrism originals (indexed by a 15-min timer, since PhotoPrism's built-in auto-index only fires for its own UI uploads). . Features: - LXC lifecycle via photoprismctl (install/status/start/stop/restart/index) - Public nginx vhost (:9080 → LXC :2342) bypassing the WAF (gitea pattern) - AI-powered face recognition, library indexing, album management - Import workflow + Nextcloud photo integration - CRT-light P31 phosphor theme . Provides FastAPI backend on /api/v1/photoprism/ via Unix socket. Package: secubox-picobrew Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 125 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Priority: optional Section: net Filename: pool/main/s/secubox-picobrew/secubox-picobrew_1.0.0-1~bookworm1_all.deb Size: 18768 SHA256: ab4ef6d29e9da312094a486a84ba2a92d8dde08b27f1685fa9129eaf27bf9765 SHA1: 366f02900f3ae1c899ce47085fcf5b3071134d09 MD5sum: ae71435962a0634fa619467a2f005a1e Description: Homebrew/Fermentation Controller for SecuBox SecuBox-DEB Phase 9 IoT module for homebrewing and fermentation. Provides FastAPI backend on /api/v1/picobrew/ via Unix socket. . Features: - Temperature monitoring via GPIO/I2C/USB sensors (DS18B20, DHT22, BME280) - Fermentation profile management with temperature schedules - Brew session logging with continuous temperature tracking - Recipe management and library - Temperature deviation alerts - Support for Tilt/iSpindel hydrometers - CRT-light P31 phosphor theme with amber accents frontend Package: secubox-portal Version: 2.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 90 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-jwt Priority: optional Section: admin Filename: pool/main/s/secubox-portal/secubox-portal_2.2.0-1~bookworm1_all.deb Size: 18870 SHA256: 535a156a0788f6a15402461b328f171cd750637a8fadc51af6e33c120fcb49fc SHA1: 47db1ec494dbae722189a7f66686d31188c2ec9b MD5sum: ef3e3bb3bab94538f3ca6a2fdcd12cad Description: SecuBox Portal - Web Authentication Centralized web authentication for all SecuBox modules. . Features: - JWT token-based authentication - Session management - Login/logout endpoints - User management - Password recovery Package: secubox-publish Version: 2.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 159 Depends: secubox-core (>= 1.0.0), python3-httpx | python3-pip Recommends: secubox-streamlit, secubox-streamforge, secubox-droplet, secubox-metablogizer Priority: optional Section: admin Filename: pool/main/s/secubox-publish/secubox-publish_2.0.0-1~bookworm1_all.deb Size: 27906 SHA256: ea6763cbce28c1b641a4c95e49663ef894bf0b66d93931aa49f6bbb7a949574e SHA1: a9aa17f0a428cdb4f0f31c77ad3ea72741addad3 MD5sum: 0f42af72d686b3acdf70cf57a0f05128 Description: SecuBox Publishing Platform Unified Layer 2 dashboard for all publishing modules. . Aggregates and orchestrates: - Streamlit (data apps) - StreamForge (app templates) - Droplet (file publishing) - MetaBlogizer (static sites) . Provides quick-publish actions and unified overview. Package: secubox-qos Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 335 Depends: secubox-core (>= 1.0), iproute2, nftables Recommends: vnstat Suggests: python3-pyroute2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-qos/secubox-qos_1.1.0-1~bookworm1_all.deb Size: 51742 SHA256: 2a7fe174b837dced7c30e3a0d766b94cfcac131f7dcf8e8d5d203f7036945ea8 SHA1: 5f38959732e30e616a12bbb0ebe5de669f1121bf MD5sum: c901b1cba51b34a1547f7540bb1c3f54 Description: SecuBox QoS / Bandwidth Manager QoS avancé : classes HTB pyroute2, quotas par client, planification horaire, détection média. . Port Debian bookworm de luci-app-bandwidth-manager (SecuBox OpenWrt / CyberMind.fr). Package: secubox-rbs-sensor Version: 0.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.0), python3-uvicorn, python3-fastapi, python3-serial, python3-toml, usbutils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-rbs-sensor/secubox-rbs-sensor_0.1.0-1~bookworm1_all.deb Size: 15296 SHA256: 5b77b0ed8d442af74b3e06d5ace047f99d07c7cbf40f39ae08d179786dbaa342 SHA1: 89eb277f685269666c5efbce80368fa84ba3e8af MD5sum: c1aba38be2b000830094df9bb0682d54 Description: SecuBox RBS Sensor — Rogue Base Station sensor (WALL layer) Host-resident module that drives a Quectel EP06-E mPCIe LTE modem as a cellular telemetry sensor for false-base-station detection. Follows the SecuBox OPAD doctrine (Off-Path Active Defense, OODA loop): . OBSERVE — broadcast cell identifiers + own-modem RX measurements only. ORIENT — local verdict engine scores LIKELY_ROGUE / SUSPECT / OK. DECIDE — operator policy or auto-mitigation. ACT — local off-path mitigation: RAT lock (refuse 2G), RF detach. . The sensor NEVER captures third-party subscriber identifiers (IMSI/TMSI). The CellObservation / NeighbourObservation dataclasses have no fields that could carry such data — proof verifiable via `GET /api/v1/rbs-sensor/status` which returns `captures_subscriber_identifiers: false`. . v0.1.0 is a scaffold: framework + EP06 driver shape + AT command allowlist + service plumbing. The full LTE/GSM cell parser and verdict engine land in v0.2 once a real EP06 is connected. Package: secubox-redroid Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 53 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: docker.io, adb Priority: optional Section: web Filename: pool/main/s/secubox-redroid/secubox-redroid_1.0.0-1_all.deb Size: 8112 SHA256: 28dd2f43afe129cb7d510d9e911445f68500bd89aaef3355a93d40c66987d7e2 SHA1: bfe4e7c8b66a7fa86c8ed60ebbea7f99ffb7ddfd MD5sum: ea4f543a2a9f706bae263e823fc688a7 Description: SecuBox Redroid - Android in container Android container management for SecuBox. Run Android instances in Docker containers with ADB access for app installation and debugging. Package: secubox-repo Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-aiofiles, reprepro, gnupg, rsync Recommends: nginx, certbot Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-repo/secubox-repo_1.0.1-1~bookworm1_all.deb Size: 16458 SHA256: 33a85b2d3da0e9c424596567498ac955b67f72d2b005b260c18abd0ca1995840 SHA1: dd8f6d9ef983b6024335d88fb9a5bf4462195413 MD5sum: 82bd23a947fca4d1a5231170f82fbd22 Description: SecuBox APT Repository Manager Management interface for the SecuBox APT repository (apt.secubox.in). . Features: - Package management (add, remove, list) - GPG key generation and signing - Multiple distribution support (bookworm, trixie) - Remote sync via rsync - Web interface for repository status . This is the control plane for apt.secubox.in. Package: secubox-reporter Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: secubox-core (>= 1.0), python3-weasyprint | wkhtmltopdf Recommends: python3-weasyprint Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-reporter/secubox-reporter_1.0.0-1~bookworm1_all.deb Size: 15956 SHA256: 747344d65e400396e14041f6f1168b9db9787d79e1e9bbd415e68a3dfcff6ed8 SHA1: 60876b51e431ec7ba5e1d8e41877593197fa406c MD5sum: d1cdc8b096a675e8e54523ba6ed15224 Description: SecuBox Reporter - System report generation System reporting module that generates PDF/HTML reports for SecuBox. Supports daily, weekly, security, and network report types. Features scheduled report generation with cron expressions. . Port Debian bookworm de SecuBox (CyberMind.fr). Package: secubox-rezapp Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 75 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-psutil, secubox-core Recommends: docker.io | docker-ce, containerd Suggests: lxc Priority: optional Section: admin Filename: pool/main/s/secubox-rezapp/secubox-rezapp_1.0.0-1_all.deb Size: 12122 SHA256: aa4f56bf4f613b7d2ed2cef2e70bf7f4eeea8b48d23882d91c1418710b776991 SHA1: 147f1926e95c1571922f83ef618d7af1cb905b22 MD5sum: acf2bf9c1972275f61663eafd0529915 Description: SecuBox RezApp - Application deployment and management Application deployment and management module for SecuBox. Deploy and manage containerized applications using Docker or LXC. Features include application templates, resource management, log viewing, and health monitoring. Package: secubox-roadmap Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 69 Depends: secubox-core (>= 1.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-roadmap/secubox-roadmap_1.1.0-1~bookworm1_all.deb Size: 10570 SHA256: 187c2908384554c9bfdbf54872901b6cec5ed3fcb0444c193aed6f4dda75f454 SHA1: c2b8f353460743ea4caeb803edf2d5e6f8941f46 MD5sum: 4a09b30a988ac24dd56305ec7adad007 Description: SecuBox Roadmap - Migration tracking dashboard Tracks migration progress from OpenWRT LuCI apps to SecuBox Debian packages. Shows complete, in-progress, and planned modules with category breakdown. Package: secubox-routes Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 83 Depends: secubox-core (>= 1.0), iproute2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-routes/secubox-routes_1.0.0-1~bookworm1_all.deb Size: 12998 SHA256: 111835b881ce7b368521691eb81e5ce95cc8bbebb398d25d3a8e6889356330a1 SHA1: 9ac6ebe6a37f5c5bcb9d172a544efac047f2be93 MD5sum: 01c485a63899eaae63da55697452bf0c Description: SecuBox Routes - Routing table viewer and manager SecuBox module for viewing and managing routing tables, policy routing rules, and ARP/NDP neighbors. . Features: - View IPv4 and IPv6 routes - Add/delete routes dynamically - Policy routing rules management - ARP/NDP neighbor table viewer - Route cache flush capability . Part of the SecuBox security appliance suite. Package: secubox-rtty Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 93 Depends: secubox-core, rtty Priority: optional Section: net Filename: pool/main/s/secubox-rtty/secubox-rtty_1.0.0-1~bookworm1_all.deb Size: 14836 SHA256: 1fc731a87a266d28be10abaa939b512b86f451a5c52ee63e2d62b784d669ad3c SHA1: cd50049ebed7bc2f24e208521bfce118e0080b77 MD5sum: 98f97818744ca7bb286197bc924c0935 Description: SecuBox Remote Terminal Access (rtty) Web-based remote terminal access module for SecuBox. Features: - rtty service control (start/stop/restart) - Active terminal session monitoring - Access token generation and management - Configuration editor (port, SSL, auth) - Embedded terminal web interface - Three-fold architecture (Components/Status/Access) Package: secubox-rustdesk Version: 1.0.8-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 69 Depends: secubox-core (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq, iproute2, nftables Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-rustdesk/secubox-rustdesk_1.0.8-1~bookworm1_all.deb Size: 15238 SHA256: 4cf103b66e60ce961ec6fe1d6effac8b74eb2ed4b7255b5d4a9d3e120fcd5112 SHA1: 4ea453854aed044f791ee23bda9f4b02a7bf9e13 MD5sum: 174213922973b651de5dbd5e8ba9e769 Description: SecuBox RustDesk — self-hosted remote desktop relay Hosts RustDesk hbbs (signal) and hbbr (relay) servers in a Debian LXC at 10.100.0.90 on br-lxc. Two separate systemd units inside the LXC for the two daemons; rustdeskctl components surfaces both as independent. . Public exposure does not use mitmproxy (it cannot inspect the raw UDP NAT-traversal traffic on 21116/udp). HAProxy stream-mode handles 21115/tcp, 21116/tcp, 21117/tcp; nftables DNAT handles 21116/udp. . rustdeskctl exposes the canonical SecuBox three-fold introspection plus peer/relay/key/session nouns matching the REMOTE-ACCESS layer of the CTL grammar (sister to OPS MONITORING / SEARCH). Package: secubox-saas-relay Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 95 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-cryptography Priority: optional Section: net Filename: pool/main/s/secubox-saas-relay/secubox-saas-relay_1.0.0-1~bookworm1_all.deb Size: 16156 SHA256: a5292e418f6ca29f27649645d517af17a8afa9ac3fe785c91b998db3478ae5de SHA1: 50262d930b11577b83766fa6d623724a8edcf2c0 MD5sum: ba262af516c144c0529159786edcdbbc Description: SecuBox SaaS/API Proxy Relay Secure proxy relay for external SaaS APIs with encrypted key storage. Port Debian bookworm de SecuBox-DEB Phase 9. . Features: - Proxy configuration for external SaaS APIs - API key management (encrypted storage with Fernet) - Rate limiting and quota tracking per service - Request/response logging - Health checks for proxied services - P31 Phosphor light theme dashboard Package: secubox-simplex Version: 1.0.0-2 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 92 Depends: secubox-core, python3, python3-uvicorn | python3-pip, python3-fastapi | python3-pip, python3-pydantic, nginx, openssl Recommends: docker.io | podman Suggests: certbot Priority: optional Section: net Filename: pool/main/s/secubox-simplex/secubox-simplex_1.0.0-2_all.deb Size: 15082 SHA256: b363a28ce3b3bb69b1410cdf57d85937f2bb4e5597231753575cf664a47f93e7 SHA1: a9b599dca96f200ac9c3877f2438a321cd9c9f33 MD5sum: 9f1cdf18cd634ffd891465f860852820 Description: SecuBox SimpleX Chat Server Privacy-focused SimpleX SMP/XFTP server management for SecuBox. . Features: - SimpleX Chat SMP relay server - Zero-knowledge messaging infrastructure - No user identifiers or metadata - Docker/Podman container deployment - TLS certificate management - Backup and restore functionality - Connection statistics - Queue management . SimpleX is a decentralized messaging protocol that provides strong privacy guarantees without relying on user identifiers. Package: secubox-smtp-relay Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 75 Depends: secubox-core (>= 1.0), postfix | msmtp Recommends: libsasl2-modules, ca-certificates Homepage: https://cybermind.fr/secubox Priority: optional Section: mail Filename: pool/main/s/secubox-smtp-relay/secubox-smtp-relay_1.0.0-1~bookworm1_all.deb Size: 13134 SHA256: f343b6626f0a965d2920df447b7c37ade0b9432bedd1691fc9ee5582fa75d5a9 SHA1: 997c03da0a361b7f82bd1164467e9d6734d4884c MD5sum: 484a6e9e50a7e99f64c36bb0d67e88b1 Description: SecuBox SMTP Relay — Email forwarding through smarthost SMTP relay module for SecuBox that configures outbound email forwarding through a smarthost (upstream SMTP server). . Features: - Smarthost configuration with SASL authentication - TLS encryption support (mandatory TLS or opportunistic) - Mail queue management (view, flush, delete) - Delivery statistics and real-time log viewing - P31 Phosphor light theme web interface . Port Debian bookworm de luci-app-smtp-relay (SecuBox OpenWrt / CyberMind.fr). Package: secubox-soc Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 161 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-soc/secubox-soc_1.0.2-1~bookworm1_all.deb Size: 27518 SHA256: 156fb743453f63ea03f57446bda3a927e31ae647b3a563525e6820ebfe146dd4 SHA1: 968d1a8d683f0cb6e7fe88a5fd9c45662cd5c052 MD5sum: 63a939fff628b9e047253e8e3eafcb2d Description: SecuBox SOC — Security Operations Center aggregator Aggregates alerts, threat-map data, and P2P intel from Hub, WAF, and CrowdSec into a single Security Operations Center dashboard. Read-only consumer of the existing alert sources. . Distinct from sibling packages in the SOC cluster: - secubox-soc-agent — edge node agent reporting up to a gateway. - secubox-soc-gateway — central fleet-monitoring hub (multi-board aggregator). - secubox-soc-web — React-based browser dashboard frontend. Package: secubox-soc-agent Version: 1.0.0-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 72 Depends: python3 (>= 3.11), secubox-core (>= 1.1.0), python3-httpx | python3-pip, python3-fastapi | python3-pip, uvicorn Suggests: secubox-watchdog, crowdsec Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-soc-agent/secubox-soc-agent_1.0.0-1_all.deb Size: 12132 SHA256: b77cbdd77c943bc593bedf7879ed799a41943fc8dfddfe3781499e7239495d8e SHA1: 62eb13083f68a6afdddff4d70f555d1d2127c461 MD5sum: dfc7a226177a014396ac44b37cc69c06 Description: SecuBox SOC Agent — Edge Node Agent for SOC Integration Edge node agent that collects system metrics and security alerts, then pushes them to an upstream SOC gateway for centralized monitoring. . Features: - System metrics collection (CPU, memory, disk, network) - Security alert aggregation (CrowdSec, Suricata, WAF) - HMAC-SHA256 signed metric push to upstream SOC - Remote command execution with signature validation - Automatic enrollment with SOC gateway - Command audit logging . Part of the SecuBox hierarchical SOC architecture. Package: secubox-soc-gateway Version: 1.1.0-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 129 Depends: python3 (>= 3.11), secubox-core (>= 1.1.0), python3-httpx | python3-pip, python3-fastapi | python3-pip, python3-websockets, uvicorn Suggests: secubox-soc-agent, secubox-watchdog Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-soc-gateway/secubox-soc-gateway_1.1.0-1_all.deb Size: 20840 SHA256: 73c0ad27bffeec68df5d24942d7c6a15a8c92d49072ff0282b32dc1ae63c6ae2 SHA1: 2cd767f5971d351ce64c4d215b9d763530b14adb MD5sum: fc8b8e43b70f41a544a46c3dae67b541 Description: SecuBox SOC Gateway — Central Fleet Monitoring Hub Central SOC aggregation gateway that receives metrics from edge nodes, provides unified alert streams, correlates threats across the fleet, and enables remote node management. . Features: - Node registration with enrollment tokens - Fleet-wide metrics aggregation - Unified alert stream from all nodes - Cross-node threat correlation - Remote command execution - WebSocket real-time updates - Hierarchical deployment support (regional/central) . Part of the SecuBox hierarchical SOC architecture. Package: secubox-soc-web Version: 1.1.1-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 256 Depends: nginx Suggests: secubox-soc-gateway Homepage: https://cybermind.fr/secubox Priority: optional Section: web Filename: pool/main/s/secubox-soc-web/secubox-soc-web_1.1.1-1_all.deb Size: 67448 SHA256: aff163c397fc3eadcf16b502ed0ce0a2043bfadd484ee7c7a47b4f36cfa2d8c0 SHA1: d5b7a1ac87e9776c60ce55ee9994013f529aa92f MD5sum: 01e6c7ea4519b573d786898237c20aaa Description: SecuBox SOC Web Dashboard — Browser-based Fleet Monitoring React-based web dashboard for the SecuBox Security Operations Center. Provides real-time fleet monitoring, alert visualization, and remote node management through a modern web interface. . Features: - Fleet overview with node health grid - Real-time alert stream via WebSocket - Cross-node threat correlation visualization - Remote service management (start/stop/restart) - Threat intelligence map - Cyberpunk-themed responsive UI . Part of the SecuBox hierarchical SOC architecture. Package: secubox-streamforge Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 75 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-psutil Recommends: streamlit Priority: optional Section: net Filename: pool/main/s/secubox-streamforge/secubox-streamforge_1.0.2-1~bookworm1_all.deb Size: 14488 SHA256: f71b020625afe50f51f86834a5a8a5428b5e240a6ec57234b265cae730ffc6b4 SHA1: 0151a110cd18cce9b56eb1fcd7c7c65ca649aef8 MD5sum: fdabf966cc6b747cf4bd78de377122fa Description: SecuBox Streamlit Forge Gestionnaire d'applications Streamlit avec templates. Port Debian bookworm de luci-app-streamlit-forge (SecuBox OpenWrt). Package: secubox-streamlit Version: 1.2.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 150 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-psutil, lxc, debootstrap Recommends: streamlit Priority: optional Section: net Filename: pool/main/s/secubox-streamlit/secubox-streamlit_1.2.4-1~bookworm1_all.deb Size: 28350 SHA256: e25e1931dd902ce3570b8fd383069b76b72bac1fd4a30f621e85cd61dfe2d23e SHA1: ee1f068901ae341603c7e77d107a8fabfaddc3f3 MD5sum: 7ef8550576d276224e5a5eb163837b38 Description: SecuBox Streamlit Platform Plateforme d'applications Streamlit avec support LXC. Port Debian bookworm de luci-app-streamlit (SecuBox OpenWrt). Package: secubox-system Version: 1.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 498 Depends: secubox-core (>= 1.0), python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-system/secubox-system_1.2.0-1~bookworm1_all.deb Size: 85206 SHA256: 85ce1adf3498f4b5de41172d2dc73cdacfd324df33b620994fe0e8f1575aad48 SHA1: 8525bb90e3fe0c2d1098cebcc5944f6b2ac24b69 MD5sum: 33fdb192b526a7163f45bdae9c39b53c Description: SecuBox System Hub Centre de contrôle système : santé, services systemd, logs journald, diagnostics, backup. . Port Debian bookworm de luci-app-system-hub (SecuBox OpenWrt / CyberMind.fr). Package: secubox-system-hub Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 43 Depends: secubox-core (>= 1.0), python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-system-hub/secubox-system-hub_1.0.0-1~bookworm1_all.deb Size: 8046 SHA256: 5f271361c957bdcf8937ead91a87c715122bd4650ba9dc3607a570b33c1707fb SHA1: 69c4be313304cc8fde9b319c53e732599af5544f MD5sum: 1a1df4cf81ebb8b868106d0899f3674b Description: SecuBox System Hub Dashboard System control center: health, systemd services, journald logs, diagnostics. . Debian bookworm port of luci-app-system-hub (SecuBox OpenWrt / CyberMind.fr). Package: secubox-system-tuning Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 23 Depends: systemd, util-linux, python3 Recommends: lxc Priority: optional Section: admin Filename: pool/main/s/secubox-system-tuning/secubox-system-tuning_1.0.0-1~bookworm1_all.deb Size: 5758 SHA256: cb78dcee5ccb088cf6bf7e725eeb18056144c6b4b8788d62c6beed04480b1d35 SHA1: b46cf837f010fb584cc98a42709aa91661dbd565 MD5sum: bbaec3ee7caac99df414eacf7c21013d Description: SecuBox System Tuning — swap + cgroup MemoryHigh caps for LXC containers Per-board memory tuning for SecuBox: configures a swap file in /data (boards typically ship with 0 swap and exhaust real memory under LXC load), and applies per-LXC-container cgroup MemoryHigh soft caps to throttle (not OOM-kill) runaway containers. . Captures the by-hand fix applied on gk2 on 2026-05-27 (#391) so other boards inherit it automatically. Idempotent: re-running the tuning script after editing the TOML config only diffs the deltas. . Configuration lives at /etc/secubox/tuning/{config.toml, lxc-memory-high.toml}. Apply with secubox-tuning-apply or wait for the next package upgrade. . Distinct from secubox-hardening (kernel sysctl + AppArmor + module blacklist for *security*) — this package is *performance* tuning: swap and cgroup soft limits. Package: secubox-threat-analyst Version: 1.4.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 99 Depends: secubox-core (>= 1.0.0) Recommends: crowdsec Priority: optional Section: admin Filename: pool/main/s/secubox-threat-analyst/secubox-threat-analyst_1.4.6-1~bookworm1_all.deb Size: 24636 SHA256: 8234faf7df0c0f226399547d2bf7a29b40dc225c97efd064c3d42d819ff562ee SHA1: 03ab96126536e2b3ac45793d141170b920d37558 MD5sum: 9e0f2ca19aa5d9b86c589d5fe28dc791 Description: SecuBox Threat Analyst — AI agent that writes CrowdSec scenarios AI-assisted threat analysis: ingests recent alerts, proposes new CrowdSec scenarios, and writes them under /etc/crowdsec/scenarios/ for operator review and reload. . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella dashboard aggregating CrowdSec + Suricata + WAF alerts (read-only). - secubox-cve-triage — CVE vulnerability triage workflow. - secubox-network-anomaly — DNS-log anomaly detection. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables-driven IP blocklist enforcement. - secubox-openclaw — OSINT / domain reconnaissance. Package: secubox-threats Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 82 Depends: secubox-core (>= 1.0.0), python3-tomli Recommends: secubox-crowdsec, suricata Priority: optional Section: admin Filename: pool/main/s/secubox-threats/secubox-threats_1.1.0-1~bookworm1_all.deb Size: 14822 SHA256: 89d532523f16a98e83af217a3b1f5eb9a7204303b479ead3d869c738d114b2b0 SHA1: 07b724a5f1e5eda99b83f8d34e20501510089fb6 MD5sum: 51ff1785590e264c12876ced974aba82 Description: SecuBox Unified Threats Dashboard Unified security threats dashboard aggregating alerts from CrowdSec, Suricata, and WAF. Features threat intelligence, IOC management, risk scoring, incident tracking, and report generation. Package: secubox-toolbox Version: 2.6.37-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 1120 Depends: secubox-core (>= 1.0), python3 (>= 3.11), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jinja2, python3-pydantic, python3-httpx, python3-qrcode, python3-fpdf2 | python3-pip, nftables, iproute2, hostapd, dnsmasq, mitmproxy, openssl, adduser, fonts-dejavu-core, fonts-symbola, fonts-noto-color-emoji, python3-yaml, python3-geoip2 | geoipupdate, lxc, debian-archive-keyring Recommends: bridge-utils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-toolbox/secubox-toolbox_2.6.37-1~bookworm1_all.deb Size: 291462 SHA256: 98343562a2044abfe542c6a923c7ce931292f930dd71b4b02a2cae51aaa70d27 SHA1: 10216c1d7d6c5a86297476381c606d070e6a10eb MD5sum: 9c1d8be728c85922e4df7b7a1a37311c Description: SecuBox-DEB ToolBoX — Gondwana Cabine Numérique (captive AP + MITM analyzer) Phase 1 du parent #474 (ToolBoX Pipeline). Productionize le PoC captive portal en package dédié : splash + consent R2 + CA distribution iOS (mobileconfig) + nftables TPROXY → mitmproxy transparent + addons (cookies/dpi/avatar/ja4/soc-relay) → modules SecuBox existants. . Conforme CSPN (R2 opt-in explicite, MAC hashing avec sel rotatif daily, retention 24h défaut). Cible : borne publique cabine téléphonique numérique. Package: secubox-tor Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 76 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-tor/secubox-tor_1.0.1-1~bookworm1_all.deb Size: 13612 SHA256: b21ccb7a31b31b6729ce74d5185d254c7c0e795ce34dd98d39f8ede087a48f38 SHA1: 853522146ac36af9b008aaf36417138b401478dd MD5sum: a0d1f5735dd09992306569c492b5f23e Description: SecuBox Tor — Tor relay + hidden-services manager Manages a local Tor daemon: transparent-proxy + SOCKS modes, hidden-service publishing, circuit monitoring, identity rotation, DNS-over-Tor, and kill-switch enforcement. Pairs with secubox-exposure when publishing hidden services for SecuBox vhosts. Package: secubox-torrent Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 112 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-torrent/secubox-torrent_1.0.0-1~bookworm1_all.deb Size: 18096 SHA256: 94003c2b90c1d32621fe051846c1b4e7fa9d746a8d1e7da39e9dd24ccb1b837b SHA1: a68fbdd0db17d7d55f0f4eb9e81730f4ade5ce09 MD5sum: 43c9144c31139dd800393b29f4a93aab Description: BitTorrent client management for SecuBox SecuBox module for managing BitTorrent downloads via Transmission. Provides Docker container management, torrent lifecycle (add/remove/ pause/resume), RSS feed subscriptions, category management, and speed limiting. . Features: - Transmission daemon via Docker/Podman - Torrent add via magnet links, URLs, or .torrent files - Download/upload speed limiting with scheduling - RSS feed subscriptions for automatic downloads - Category/label management - P31 Phosphor light theme web UI . Provides FastAPI backend on /api/v1/torrent/ via Unix socket. Package: secubox-traffic Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 79 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core, iproute2 Recommends: linux-image-amd64 (>= 5.4) | linux-image-arm64 (>= 5.4) Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-traffic/secubox-traffic_1.0.0-1~bookworm1_all.deb Size: 13492 SHA256: 1e437bf71106a50ba753fc7cbf1ed879cd590097020dd7a607c954df710851af SHA1: 95a208ed1ae3f78cecb40eb316355ea471d52926 MD5sum: 7c0113542a9e453941a0e5ae89701a8b Description: SecuBox Traffic Shaper Advanced QoS traffic control with TC/CAKE. Provides traffic classification, bandwidth management, priority-based shaping, and preset configurations. Package: secubox-turn Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core, coturn Priority: optional Section: net Filename: pool/main/s/secubox-turn/secubox-turn_1.0.0-1~bookworm1_all.deb Size: 14300 SHA256: 611acc1565b4860fecaa371f830f1f45b30510944038d9f34882bbb70250fcfe SHA1: 81f88c7cc88139ca8c84a7c7eb7e51a779c5852f MD5sum: 2c45f757bb4c7cd6f4a70272292bc6e3 Description: SecuBox TURN/STUN Server Management TURN/STUN server management interface for SecuBox WebRTC. Features: - coturn service control (start/stop/restart) - User management with turnadmin integration - Temporary credential generation (HMAC) - Active session monitoring - Configuration editor - Three-fold architecture (Components/Status/Access) Package: secubox-ui-manager Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 126 Depends: python3 (>= 3.11), kbd, xinit, xserver-xorg-core, chromium | chromium-browser, unclutter, x11-xserver-utils Recommends: python3-textual, secubox-console Suggests: xserver-xorg-video-vmware, xserver-xorg-video-qxl Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-ui-manager/secubox-ui-manager_1.0.0-1~bookworm1_all.deb Size: 23712 SHA256: 9d4310e2216863da5f23c470ce61ede52ba5fe9a61877a7fb9f68b9f61e10b52 SHA1: 95008e4f5e0f1161f99f3a5291a71f19df6a5506 MD5sum: f1ed1d4eccd019541a009790105755b6 Description: SecuBox Unified UI Manager Manages the SecuBox user interface with automatic mode selection and graceful fallback support. . Features: - KUI: Kiosk UI mode (X11 + Chromium fullscreen) - TUI: Terminal UI mode (Textual-based console) - Console: Fallback to standard getty login - Automatic hypervisor detection (VirtualBox, QEMU/KVM, VMware) - Per-hypervisor graphics optimization - Modular debug system with 6 verbosity levels - Health monitoring with automatic fallback on failure . This package is part of the SecuBox security appliance. Package: secubox-users Version: 1.4.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 147 Depends: python3-fastapi, python3-uvicorn, python3-argon2, python3-pyotp, python3-qrcode, python3-jsonschema, python3-tomli | python3 (>= 3.11), secubox-core (>= 1.0), jq Priority: optional Section: admin Filename: pool/main/s/secubox-users/secubox-users_1.4.2-1~bookworm1_all.deb Size: 28484 SHA256: d6d2b9d32a8b9a5d6c998c7e936939a90c1bf7cb9653738246a55acb16c98268 SHA1: ff736486a33c7fac50d41418280a5dfe4d56bfd1 MD5sum: 82f22a4f7f26f6ade09b724d3f60ce5d Description: SecuBox Users — local account manager (Argon2id + TOTP + RBAC) Unified user-account management for SecuBox: account create/disable/ enable, password reset (Argon2id hashes), TOTP enrollment with backup codes, session management, and role-based access control. . Distinct from sibling packages in the identity stack: - secubox-identity — decentralized identity (DID) management. - secubox-auth — JWT auth guardian / session middleware (consumes secubox-users state). - secubox-portal — web login portal. - secubox-authelia — Authelia SSO IdP (LXC). - secubox-avatar — profile image + display-name manager. Package: secubox-vault Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 58 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-cryptography, secubox-core Recommends: vault Priority: optional Section: admin Filename: pool/main/s/secubox-vault/secubox-vault_1.0.0-1_all.deb Size: 9166 SHA256: 96465aa359ecab2ab1a99763bbf172de423b3e31466775658140479d9d6047ca SHA1: 3208090cfa27498b53e7d2c235a7f69c28431b76 MD5sum: 4b823ff48a4ee244e63754761880cb4a Description: SecuBox Vault - Secrets management Encrypted secrets storage for SecuBox. Provides secure storage for API keys, passwords, and credentials with audit logging and rotation support. Package: secubox-vhost Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 103 Depends: secubox-core (>= 1.0), nginx, python3-jinja2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-vhost/secubox-vhost_1.1.0-1~bookworm1_all.deb Size: 17884 SHA256: dacbe5370763cad8a3588d41247f4b8a8753d5b1b34c866066d2bfa37b01ac09 SHA1: a87815a2355d0232dd8c29fbb3abeb1ad2e174fe MD5sum: d9ccb0c406ca7b43a0a0ed1c073bc250 Description: SecuBox Virtual Host Manager Gestion des hôtes virtuels nginx et SSL : Let's Encrypt, autosigné, reverse proxy, redirections. . Port Debian bookworm de luci-app-vhost-manager (SecuBox OpenWrt / CyberMind.fr). Package: secubox-vm Version: 1.0.1-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 68 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: libvirt-daemon-system, qemu-system-x86, virtinst, lxc Priority: optional Section: admin Filename: pool/main/s/secubox-vm/secubox-vm_1.0.1-1_all.deb Size: 11194 SHA256: 8092419a5e14b2b28ec87a346c63518c8507a50e5d913a5ca9804fa25b2de0a1 SHA1: 482c5cd3ecf9c03ba05858a76bc10bd89427b883 MD5sum: f04012a2d7fd20c1517a074abd4e86e0 Description: SecuBox VM Manager - Virtualization management Virtual machine and container management for SecuBox. Supports KVM/QEMU virtual machines via libvirt and LXC containers. Package: secubox-voip Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 108 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-voip/secubox-voip_1.0.0-1~bookworm1_all.deb Size: 16726 SHA256: 8caff55ab5fce7ced05ceeb76ed2e9449902f628240d90ed590a54353c6e916d SHA1: d7c24d4a6d27ed45a70ece7dccffbeac8007cc19 MD5sum: fdee76bd8d924d8a868c6c64ade56475 Description: VoIP/PBX management module for SecuBox SecuBox module for managing Asterisk/FreePBX PBX system via Docker. Provides extension management, trunk configuration, call routing, IVR menus, voicemail, and call detail records. . Features: - Docker/Podman container management - Extension and voicemail management - SIP trunk configuration - Inbound/outbound route management - IVR menu builder - Call detail records (CDR) - SIP peer status monitoring . Ported from OpenWRT luci-app-voip pattern. Provides FastAPI backend on /api/v1/voip/ via Unix socket. Package: secubox-vortex-dns Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 58 Depends: secubox-core (>= 1.0.0) Recommends: unbound, dnsmasq Priority: optional Section: admin Filename: pool/main/s/secubox-vortex-dns/secubox-vortex-dns_1.0.1-1~bookworm1_all.deb Size: 10768 SHA256: 9ef536e5c25b3556bc7375f449b85f116bf334bff25e73040206d7d22c5c2b24 SHA1: 1fbaedd3e6e54087c82a507cf60bdf8ac63c8854 MD5sum: 3bf481d8e516b6529f12829d9602016b Description: SecuBox Vortex DNS — recursive firewall with RPZ + threat feeds Recursive DNS firewall: aggregates threat-feed blocklists into RPZ zones and pushes them to unbound (preferred) or dnsmasq. Inline blocking happens before resolution, so policy-violating lookups never leave the box. . Distinct from sibling packages in the DNS cluster: - secubox-dns-guard — post-resolution anomaly detection (dnsmasq-only). - secubox-ad-guard — ad/tracker-specific lookups with per-device stats. - secubox-dns — authoritative BIND zone manager (publishing). - secubox-dns-provider — external registrar API. Package: secubox-vortex-firewall Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 64 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-vortex-firewall/secubox-vortex-firewall_1.0.2-1~bookworm1_all.deb Size: 11878 SHA256: a29168fd1702d16059f6794a5071ba6c6dba8e85b3ffdcd44ad7b20ab93013fb SHA1: e9a9d30f9d270f3e4cfe7883689e7f407d638c7c MD5sum: 7d7e72468fb7275a6650d940607a6a21 Description: SecuBox Vortex Firewall — nftables threat-feed enforcer Subscribes to threat feeds (Spamhaus, AbuseIPDB, FireHOL, internal SecuBox blocklists) and compiles them into nftables sets for inline drop/log enforcement. Complements secubox-vortex-dns (which handles DNS-layer blocking via RPZ). Package: secubox-waf Version: 1.2.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7270 Depends: secubox-core (>= 1.0.0), lxc, jq, curl Recommends: crowdsec, secubox-crowdsec, secubox-haproxy Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-waf/secubox-waf_1.2.6-1~bookworm1_all.deb Size: 6646326 SHA256: 9d5093213546163f441128942aa85f4df7b110eb01e1164fcc7c081c94db38d3 SHA1: 85df25bff1b071d569a9bf46a96f632d3b5a6a86 MD5sum: e607a263a288f8303b2ce8e833f96d9a Description: SecuBox Web Application Firewall (mitmproxy LXC) LXC-contained mitmproxy WAF for HTTP/HTTPS traffic inspection. All HAProxy traffic routes through mitmproxy for deep inspection. . Features: - LXC container isolation (mitmproxy in 10.100.0.60) - Host-based routing via haproxy-routes.json - X-SecuBox-WAF header tagging for inspected traffic - 300+ threat detection rules across 14+ categories - SQL injection, XSS, RCE, LFI detection - wafctl control script (status/install/start/stop/routes) - CrowdSec integration for centralized banning - HAProxy reverse proxy integration Package: secubox-watchdog Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 77 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-watchdog/secubox-watchdog_1.0.1-1~bookworm1_all.deb Size: 13794 SHA256: 5be6774fd3cde20940bc05464eea41bfffd2bf6fafdddf31db4b7a1bddbb27ac SHA1: 75e77b34fc5248c7cef7239262699095eb5ce12d MD5sum: 98e33bb5aeb010ad9ed487468c046ab6 Description: SecuBox Watchdog — LXC + service + HTTP health monitor Health monitor for LXC containers, systemd services, and HTTP endpoints with auto-restart for failed targets. Real-time dashboard with 30-second auto-refresh. . Distinct from sibling packages in the monitoring cluster: - secubox-health-doctor — vital-services health check (different target set: focuses on SecuBox-internal critical services). - secubox-device-intel — asset discovery + device fingerprinting (network-side, not service-side). - secubox-netdata, secubox-glances, secubox-metrics — system metrics dashboards (different upstreams: Netdata vs Glances vs Prometheus). Package: secubox-wazuh Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 57 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: wazuh-agent | wazuh-manager Priority: optional Section: admin Filename: pool/main/s/secubox-wazuh/secubox-wazuh_1.0.0-1_all.deb Size: 9334 SHA256: 3f7bdb8fce65234c14b8336339d2f9598f2d9f12542fb74e61940111b796d929 SHA1: a464341c2974ffc5537894876f9eeba71d067bf8 MD5sum: 9c645b0b3f4e8954b466f9dc56c4de77 Description: SecuBox Wazuh SIEM integration Wazuh SIEM integration for SecuBox. Provides management interface for Wazuh agent/manager, alert viewing, and security monitoring. Package: secubox-webmail Version: 2.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-mail (>= 2.2) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-webmail/secubox-webmail_2.2.0-1~bookworm1_all.deb Size: 1386 SHA256: 5b81d2ab13933d33e245bc6fd796cbd5c6492bbffc6f13889d6e48d1f72da330 SHA1: 4832c42406ed15fb1dd1cd4909ba4f69acc4903e MD5sum: 95ed4d234e8a149ab6d7814869caf73a Description: Transitional package — webmail admin folded into secubox-mail The webmail admin API is now part of secubox-mail (>= 2.2). This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-webmail-lxc Version: 2.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-mail (>= 2.2) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-webmail-lxc/secubox-webmail-lxc_2.2.0-1~bookworm1_all.deb Size: 1520 SHA256: 7de2ed4ecf8abfad0577c281dc3eb601fbccfb26bf8290251d62631aa66ab46e SHA1: 1a8bc22aefb54e779f2311767fc261a851ccb038 MD5sum: cc421bd2b212693c708eb7ba8aadcb8e Description: Transitional package — webmail LXC functionality moved to secubox-mail Roundcube webmail now lives inside the single 'mail' LXC managed by secubox-mail (>= 2.2). This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-webos Version: 1.0.33-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 286 Depends: secubox-core, python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-pydantic | python3-pip Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-webos/secubox-webos_1.0.33-1~bookworm1_all.deb Size: 205842 SHA256: be10292dded7a26d07fe67c81e67617b89b78da6720e2b0424d37cec5ab5200c SHA1: 6ab97a77db222fbfb3812820433d3c3ee0ea03e1 MD5sum: 3f881a72d3b861671a1cf13de597b84a Description: SecuBox WebOS — normalized service registry (Hall P1) Aggregator-independent registry service exposing a normalized view of SecuBox services (catalogue + health + reach), served on its own socket. Package: secubox-webradio Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 104 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip Recommends: ffmpeg, podman | docker.io Priority: optional Section: sound Filename: pool/main/s/secubox-webradio/secubox-webradio_1.0.0-1~bookworm1_all.deb Size: 16480 SHA256: bcd050daaf4a2693c0e60102f85158d8cc11c171b9c7cd5b8675d255eeb7ae67 SHA1: 98e85c9855ce09fd2efa44ed0a00d75c8521b047 MD5sum: 01cfdaf4c3e62d173d1a8d93479d35d6 Description: Internet Radio Streaming for SecuBox Debian bookworm port of internet radio management module. Provides FastAPI backend on /api/v1/webradio/ via Unix socket. . Features: - Internet radio station management and favorites - Icecast/Liquidsoap streaming server via containers - Recording functionality (MP3, OGG, AAC) - Schedule programming for playback and recording - Docker/Podman container management - Audio visualizer in web player - CRT-light P31 phosphor theme frontend with violet accents Package: secubox-wireguard Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 344 Depends: secubox-core, wireguard-tools, qrencode Priority: optional Section: net Filename: pool/main/s/secubox-wireguard/secubox-wireguard_1.0.0-1~bookworm1_all.deb Size: 57454 SHA256: 7d61a26e7f538dbe92deca462072a48b0945fd4147398fc63cd16723eea15c9c SHA1: fc627d580c2809b4d24c1abc846082adc4ff1e0e MD5sum: a8994efcfa8f60fb4443d7313b7948b0 Description: SecuBox WireGuard VPN Dashboard WireGuard VPN management interface for SecuBox. Features: - Interface management (up/down/status) - Peer management with auto-config and QR codes - Traffic statistics and monitoring - Migration from OpenWrt - Three-fold architecture (Components/Status/Access) Package: secubox-yacy Version: 1.0.11-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq Recommends: secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-yacy/secubox-yacy_1.0.11-1~bookworm1_all.deb Size: 17134 SHA256: 98b07429c0aec36ca413e8083505918a74288014f81d7905c38e900c4bdbd520 SHA1: 26201addb98ae61f6c184da9f8e723358463d027 MD5sum: 35837e5c9da5af70cebcddea84666bd4 Description: SecuBox YaCy — peer-to-peer search engine Hosts YaCy in a Debian LXC at 10.100.0.80 on br-lxc with a sovereign, decentralised search index that does not depend on any third-party search provider. Peer-to-peer discovery, configurable crawl profiles, user-managed blacklist. . The host-side FastAPI control plane runs on /run/secubox/yacy.sock and is exposed by nginx at /api/v1/yacy/. The native YaCy admin UI is iframe-embedded under /yacy/ (proxy_pass to the LXC). . yacyctl exposes the canonical SecuBox three-fold introspection plus peer/index/query/blacklist/crawler nouns matching the SEARCH layer of the CTL grammar (sister to OPS MONITORING / healthctl / grafanactl). Package: secubox-yggdrasil Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 97 Depends: secubox-core (>= 1.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Conflicts: secubox-mesh (<= 1.999.0) Replaces: secubox-mesh (<= 1.999.0) Provides: secubox-mesh-yggdrasil Priority: optional Section: admin Filename: pool/main/s/secubox-yggdrasil/secubox-yggdrasil_1.1.0-1~bookworm1_all.deb Size: 16724 SHA256: af5cca7f92297bd43a4e515e3fc6bf6f2213aa8284a7357a9b625a521fa064ca SHA1: d7769ff6750a2a9510894b3e83d59f385b4b309d MD5sum: 9f876ea3956b2b9be68b5d9f9e51d076 Description: SecuBox Mesh DNS - Meshname DNS for mesh networks Meshname DNS management for Yggdrasil and mesh networks. Package: secubox-zigbee Version: 2.6.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 125 Depends: secubox-core (>= 1.0), secubox-mqtt (>= 2.4), lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, udev Recommends: secubox-iot-hub Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-zigbee/secubox-zigbee_2.6.0-1~bookworm1_all.deb Size: 33542 SHA256: d313348c8424e83ec079a7962e606353fe88999de3e074f12cbb9a71fd499647 SHA1: 91538ea6380e9f6e843fa1c55982b43cf38dc763 MD5sum: 5bbaf82a91ab630fe0621c3b53fd54ea Description: SecuBox Zigbee — Coordinator RF IoT (MIND layer) Hosts zigbee2mqtt 2.x in a Debian bookworm LXC at 10.100.0.111 on br-lxc. . Wraps the upstream zigbee2mqtt daemon (Apache-2.0) with a SecuBox host control plane: FastAPI on /run/secubox/zigbee.sock, reverse-proxied at /api/v1/zigbee/ on the canonical hub vhost. . The Sonoff Zigbee 3.0 USB Plus dongle (CC2652P, VID:PID 1a86:55d4) is detected by a shipped udev rule and exposed inside the LXC at /dev/secubox-zgb. ConBee II (1cf1:0030) and generic CP210x (10c4:ea60) are also recognized. . zigbee2mqtt is wired to the SecuBox broker (secubox-mqtt v2.4) as user z2m on topic zigbee2mqtt/# — credentials are read from /etc/secubox/secrets/mqtt-z2m at install time and rendered into configuration.yaml. network_key and pan_id are GENERATEd by zigbee2mqtt on first run; never hard-coded. . zigbeectl follows the SecuBox CTL grammar: components / status / access + install / reload + device / network / topology / permit-join nouns (list-only in v2.4.0). Package: secubox-zkp Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 65 Depends: secubox-core (>= 1.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-zkp/secubox-zkp_1.0.1-1~bookworm1_all.deb Size: 11604 SHA256: cc413b0a4ea5f925b68721400510eadcfcccc780394d7b67bedfc2ce8e480cca SHA1: f3e023de6bf0f5d7f6d74fe04460dd1f1449bc0f MD5sum: 3835d446a40420d52308ea888570e307 Description: SecuBox ZKP - Zero-Knowledge Proof Dashboard Zero-Knowledge Proof Hamiltonian management for SecuBox.