Package: gabriel-mood Source: sbxos-audio-mood Version: 0.10.3-1~bookworm1 Architecture: all Maintainer: Gerald Kerma Installed-Size: 24 Depends: sbxos-audio-mood Homepage: https://secubox.in Priority: optional Section: oldlibs Filename: pool/main/s/sbxos-audio-mood/gabriel-mood_0.10.3-1~bookworm1_all.deb Size: 15036 SHA256: 2c266e166ca1a15184fa205d5121ff47ec25d880581db1c6f47d1e0ad0e5a52e SHA1: a8e46caace92f4993429bacd86c8ba0f5966331a MD5sum: 58606a6aca66cb0e51c17bba0de87a63 Description: transitional package — renamed sbxos-audio-mood gabriel-mood s'appelle désormais sbxos-audio-mood (convention : secubox-* pour le système, sbxos-* pour l'interface). Ce paquet transitionnel n'installe rien ; il peut être retiré. Package: sbxos Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox, secubox-service-hall Recommends: secubox-service-assistant, secubox-fonction-correspondance, secubox-fonction-nuage, secubox-fonction-media, secubox-fonction-publication, secubox-fonction-veille, secubox-fonction-maison Suggests: secubox-fonction-ia, secubox-fonction-provision Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/sbxos_0.1.15-1~bookworm1_all.deb Size: 2616 SHA256: 832e860751593512672bb0ad84662fc557476004aec0d0e5db86e5215500de74 SHA1: 92b34f5370d8868fdf4bd302baac50eb2e8ad0d9 MD5sum: 43092e4be5b86b6cc33d74a2ee8cd1d2 Description: SecuBox — racine « SBX OS » Le Hall et tous ses composants, posés sur la box : l'environnement complet. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: sbxos-audio-mood Version: 0.10.5-1~bookworm1 Architecture: amd64 Maintainer: Gerald Kerma Installed-Size: 9754 Depends: adduser, secubox-core (>= 1.5.39~) Recommends: nginx Breaks: gabriel-mood (<< 0.10.0~) Replaces: gabriel-mood (<< 0.10.0~) Homepage: https://secubox.in Priority: optional Section: sound Filename: pool/main/s/sbxos-audio-mood/sbxos-audio-mood_0.10.5-1~bookworm1_amd64.deb Size: 3725454 SHA256: 94c4296197762c323107bd240ea748a65cccd883f18cf999be82529aba056313 SHA1: e47714d1d96f527b2e43ccf80c0bf7f0794ca778 MD5sum: e7d881310228c7f9ab18667c4886f50e Description: SecuBox — indices prosodiques de la voix, analyses localement Audio Mood mesure ce qu'une voix fait entendre : hauteur, energie, debit, irregularite de periode et d'amplitude, couleur spectrale. Il en tire des INDICES, presentes comme tels. . Il ne lit pas les emotions. La litterature etablit solidement que ces grandeurs suivent l'ACTIVATION — on parle plus haut, plus fort et plus vite quand on est active, quelle qu'en soit la cause — et n'etablit pas la valence : rien dans le signal ne distingue de facon fiable la joie de la colere. Le module le dit dans son interface, dans son API, et le tient dans son code : la confiance est plafonnee, et sans etalon personnel aucun etat n'est affirme. . Le micro est celui du navigateur. L'audio traverse le reseau local, est analyse sur la board, et disparait : aucun echantillon n'est ecrit sur le disque. Seuls des agregats par minute sont conservés, avec une purge automatique et un geste d'effacement. Package: secubox Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-fonction-socle, secubox-fonction-reseau, secubox-fonction-bouclier Recommends: secubox-fonction-supervision Suggests: secubox-fonction-mesh Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox_0.1.15-1~bookworm1_all.deb Size: 2570 SHA256: 0443b0b4c73ce9005bfec5f3150f268094ac7df3fe3ab22b93e7a69bc97a8552 SHA1: 624c78c5e0693e2ad22be3cf2f052388891e3257 MD5sum: 15a4478f724081a20d7ca6759e2681fe Description: SecuBox — racine « SecuBox » La box : socle, réseau d'opérateur et bouclier, sans interface grand public. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-acces Version: 1.7.0-1~bookworm1 Architecture: all Maintainer: Gérald Kerma Installed-Size: 18 Depends: secubox-sbxid (>= 0.2.0~) Homepage: https://cybermind.fr Priority: optional Section: oldlibs Filename: pool/main/s/secubox-acces/secubox-acces_1.7.0-1~bookworm1_all.deb Size: 12432 SHA256: 29c5620e247c47943384f502419e00c827c91eb0b464cbe089b7ee92d695191c SHA1: 9c9a59e2ca258a534438fe38a98b1901816bc31d MD5sum: 70c93ed923af169ffb83e8a9f67e729e Description: Transitional package — device admission moved to secubox-sbxid L'admission des appareils (demande, défi signé, session, porte d'accès) fait désormais partie du SBX Identity Manager (secubox-sbxid), aux mêmes chemins. Ce paquet peut être retiré sans effet. Package: secubox-ad-guard Version: 1.14.3-1~bookworm1 Architecture: all Maintainer: SecuBox Installed-Size: 564 Depends: secubox-core (>= 1.7.10), secubox-aggregator (>= 0.4.1), unbound, python3-httpx | python3-pip, dns-root-data Recommends: python3-maxminddb, secubox-toolbox Priority: optional Section: admin Filename: pool/main/s/secubox-ad-guard/secubox-ad-guard_1.14.3-1~bookworm1_all.deb Size: 133492 SHA256: f475d92af27d92f25d6f04faedaa06fc823a9045dd188bcf929ae9ff648cc995 SHA1: c4d45d60d9f1746f51f56e0be73c91d99866ff37 MD5sum: e9e6b20e251136421122666df145da8d Description: SecuBox Ad Guard Module Ad and tracker detection with per-device statistics. Features blocklist management, delayed blacklisting workflow, and device-type classification (IoT, phones, smart TVs, etc.). . Provides a board-wide DNS ad/tracker sinkhole (#740): compiles the modular filter-list resource (EasyList/EasyPrivacy/OISD/HaGeZi/NoScript) and renders it as Unbound always_nxdomain local-zones, refreshed weekly by timer. Package: secubox-admin Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 96 Depends: secubox-core (>= 1.4.0), python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-admin/secubox-admin_1.2.2-1~bookworm1_all.deb Size: 17574 SHA256: a4d657241f57d3554d4881c107dbac392585aec82172d14888f10d1f11307799 SHA1: 1f36e5463651fb0154a1f6b0f47c49298b620e76 MD5sum: 043af698bfedf94a2ed0021b839c465f Description: SecuBox System Administration Dashboard Advanced system administration module for SecuBox. Provides web UI and API for system management tasks. . Features: - System status overview (CPU, memory, disk, load) - Systemd service management (start, stop, restart) - System logs viewer (journalctl integration) - Disk usage monitoring - Process manager (top processes by CPU/memory) - APT updates management - System reboot/shutdown with confirmation . Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-aggregator Version: 0.4.2-1~bookworm1 Architecture: all Maintainer: CyberMind FR Installed-Size: 97 Depends: python3:any, python3-httpx, python3, python3-fastapi, python3-uvicorn, secubox-core Breaks: secubox-groupd (<< 0.3.1~) Replaces: secubox-groupd (<< 0.3.1~) Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: net Filename: pool/main/s/secubox-aggregator/secubox-aggregator_0.4.2-1~bookworm1_all.deb Size: 27118 SHA256: 6cbb9b776f1acd50406629af8a81df87053c01fa4d9d48a4267332d97fc5806c SHA1: 47cf69339b96025fcd59579acb9bbc3d524279eb MD5sum: 2a7c464616c8811a4bb34803fb37ee92 Description: SecuBox API gateway — master ASGI process Mounts SecuBox module FastAPIs as sub-apps under /api/v1/, eliminating the duplicated Python interpreter overhead of running each module as its own uvicorn process. . Pilot mounts (per /etc/secubox/aggregator.toml) save ~30 MB RAM per migrated module versus a per-module systemd unit. Full migration of the ~100 SecuBox modules would free ~3 GB on a typical install. Package: secubox-ai-gateway Version: 1.1.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-ai-gateway/secubox-ai-gateway_1.1.5-1~bookworm1_all.deb Size: 15264 SHA256: 7ce9aa30383156b79e0ca329da5a83ffbcfe59cd1470a4a9dc281513f6e3966e SHA1: b76b3712f9dc78354f67f8e8b88a21d5b6ce2f40 MD5sum: bf063eff4e1707b9a61ea784f72495a3 Description: SecuBox AI Gateway — data-sovereignty router for AI requests Routes AI inference requests across the available backends with per-request policy enforcement (sovereignty constraints, cost caps, data-class rules). Tracks egress + redirects sensitive prompts to local backends. . Distinct from sibling packages in the AI cluster: - secubox-ai-insights — ML-based threat detection. - secubox-mcp-server — Model Context Protocol server. Package: secubox-ai-insights Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 105 Depends: secubox-core (>= 1.4.0), python3 (>= 3.11) Recommends: suricata Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-ai-insights/secubox-ai-insights_1.2.2-1~bookworm1_all.deb Size: 19714 SHA256: 128dc312a8ec3d6ab3d3edfa0e4055bcdec6ad9250bc2591b7f6d47889815f37 SHA1: 2d734f059b7a6b7c7e803f78670412e88aae7418 MD5sum: a8d3a54bfa4375c8d0178378037d00d9 Description: SecuBox AI Insights - ML-based Threat Detection Machine learning powered threat detection and security insights module. . Features: - ML-based threat detection and classification - Anomaly detection in network traffic - Log analysis with trained models - Threat scoring and risk assessment - Suricata integration - Model management (train, deploy) - Alert correlation engine . Port Debian bookworm de SecuBox OpenWrt (CyberMind.fr). Package: secubox-annuaire Version: 0.14.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 645 Depends: secubox-core (>= 1.5.24), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-pydantic, python3-cryptography, python3-tomli-w, gnupg, gpg-agent, adduser, util-linux Breaks: secubox-openpgp (<< 0.3.1~) Replaces: secubox-openpgp (<< 0.3.1~) Priority: optional Section: admin Filename: pool/main/s/secubox-annuaire/secubox-annuaire_0.14.3-1~bookworm1_all.deb Size: 143354 SHA256: 71dcf2d6a90ae45e966bc6b9cda1215199e35706b26bec499b8edb3b291094af SHA1: e098c9f0f1d64ea26ec8b192d43f0d6fbebffa17 MD5sum: 9e61485ba54396ac6e73d276f82d8859 Description: SecuBox Annuaire-Miroir — federated self-certifying trust substrate The Annuaire-Miroir is the trust directory for SecuBox-DEB, providing a BLAKE2b-chained, CONIKS-style append-only audit journal with four protocols: AUTO-ADD (provisional discovery), INVITE (capability-based membership), PROPOSAL (anti-plutocratic governance), and EMANCIPATE (staged anchor removal). All objects are Ed25519-signed, RFC 3339-timestamped, and access-gated by the can() resolver. Served on /run/secubox/annuaire.sock, JWT-gated. Package: secubox-antirootkit Version: 0.1.6-1~bookworm1 Architecture: all Maintainer: Gérald Kerma Installed-Size: 128 Depends: secubox-core (>= 1.4.0), auditd, debsums, sudo, nftables, python3, python3-fastapi | python3-pip Recommends: aide, rkhunter, chkrootkit Priority: optional Section: admin Filename: pool/main/s/secubox-antirootkit/secubox-antirootkit_0.1.6-1~bookworm1_all.deb Size: 30988 SHA256: 023d0ce95b166c3ff82f6b9c297ef93fde4cff829facb52f37aa4b322c86bf20 SHA1: 155aa52c869240d18e0e00a7133fd75b376ee9ad MD5sum: 44a6dc2802149cdaa7d594bf398a7595 Description: SecuBox Anti-Rootkit - host-IDS anti-escape + exec scanner Host-based intrusion detection, v1 scope. LIVE: an auditd-fed exec-surveillance scanner that jails unknown/non-dpkg-backed executables into an egress-blocked cgroup (anti-escape), an append-only exec forensic log, a web panel, and an alert-only manual quarantine workflow (never auto-deletes or auto-chmods a suspect binary — it only emits an operator-reviewable plan). . Targeted auditd watches (low volume by design) cover the common unbacked exec surface: /usr/local/bin, /usr/local/sbin, /tmp, /dev/shm, /opt, /usr/lib/jvm and /home. . SCAFFOLDED (v1.1 follow-up, not yet scheduled): debsums/aide/rkhunter/ chkrootkit integrity scanning — the wrapper module (api/integrity.py) and the Recommends below exist, but no timer wires it up automatically yet. Package: secubox-appstore Version: 0.9.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 405 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, sudo Breaks: secubox-metacatalog (<< 1.2.5~) Replaces: secubox-metacatalog (<< 1.2.5~) Priority: optional Section: admin Filename: pool/main/s/secubox-appstore/secubox-appstore_0.9.0-1~bookworm1_all.deb Size: 72170 SHA256: 5b4dab4f6e79765c9e05fbf04e392e1ca895405ea6407de57254a5053555dc81 SHA1: f2d95a6f89e53c29a7771e043ddffdc443e55a66 MD5sum: c1371fa047a41c7d4759f801ce99671e Description: SecuBox App Store — module catalog & lifecycle (Phase A) Categorized, tiered, searchable catalog of SecuBox modules with live install/run state, served as a hub web UI. Phase A is read-only; install, enable/disable, preferences and profiles arrive in later phases via a privileged worker. Package: secubox-assist Version: 0.2.11-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 136 Depends: python3:any, python3-fastapi, python3-uvicorn, secubox-core (>= 1.4.0), secubox-annuaire (>= 0.10.11~), secubox-p2p, sudo, adduser Recommends: python3-websockets Priority: optional Section: net Filename: pool/main/s/secubox-assist/secubox-assist_0.2.11-1~bookworm1_all.deb Size: 32502 SHA256: c78f8e2049e6ca52ab1835f5238dc85d0c2184d79deda45bd3f5cc49916a1531 SHA1: 7baa477db3d41f2c0fed369189a5b865892a2cea MD5sum: e36698ef31bfc1d71cd39ac8f0e7a3d6 Description: SecuBox assistance request — real-time help sessions . python3-websockets is a Recommends, not a Depends: the WS daemon needs the websockets library, but on boards where a newer websockets is provided out of band (pip, to satisfy a uvicorn version skew) the apt package is deliberately absent — a hard Depends would then block dpkg install. apt still pulls it on a normal install; dpkg -i does not enforce it. Consent-gated, audited, revocable live assistance sessions between a box and a federated center, over the wg-mesh, with a bounded action catalog and double-consent console escalation. Package: secubox-auth Version: 1.8.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 918 Depends: python3-aiosqlite, python3-fastapi, python3-uvicorn, python3-argon2, python3-pyotp, python3-jwt, secubox-core (>= 1.5.47~), secubox-annuaire (>= 0.10.11~), python3-qrcode, python3-jsonschema, python3-tomli | python3 (>= 3.11), jq, python3, python3-cryptography, secubox-aggregator Recommends: secubox-webos (>= 1.0.338) Breaks: secubox-oidc (<< 0.1.3~), secubox-sbxid (<< 0.4.20~), secubox-users (<< 1.8.18~) Replaces: secubox-oidc (<< 0.1.3~), secubox-sbxid (<< 0.4.20~), secubox-users (<< 1.8.18~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-auth/secubox-auth_1.8.2-1~bookworm1_all.deb Size: 205192 SHA256: 4741c4d1b7627b108b55482c553d6b25db0f8bd956b91f8bf4f7bcc8910279ce SHA1: 66294086105f10ea61120944de398dcb64ef677a MD5sum: 30077b9e36804a9f4ed1af8491b7cad3 Description: SecuBox Auth Guardian Authentification avancée : OAuth2 (Google/GitHub), vouchers, sessions, portail splash. . Port Debian bookworm de luci-app-auth-guardian (SecuBox OpenWrt / CyberMind.fr). Package: secubox-autoload Version: 0.6.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 162 Depends: python3 (>= 3.11), secubox-core, wireguard-tools, nftables, adduser Recommends: apparmor Priority: optional Section: admin Filename: pool/main/s/secubox-autoload/secubox-autoload_0.6.1-1~bookworm1_all.deb Size: 39944 SHA256: 0d10b7f897d12c03cd4be3f1cbdf5b1893ac416858d3f6455c22515ec0d7449f SHA1: 96497414517f8ce84c8f84fd13bddbcad310e2e8 MD5sum: 8d1b08fbeb91cc7f1b9897b9ddf48232 Description: SecuBox — provisionnement réseau Auto-Load, côté infrastructure Jetons clients (un par box, à usage unique, stockés sous forme d'empreinte), statut d'abonnement avec échéance, révocation, préenregistrement par numéro de série, service d'enrôlement et panel, hub WireGuard (10.64.0.0/16, udp/51830). Parent #2182. Installé sur l'infrastructure (admin.gk2.secubox.in) seulement. Package: secubox-autoload-agent Version: 0.9.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: python3 (>= 3.11), wireguard-tools, gpgv, gnupg, secubox-premier-pas (>= 0.5.0), secubox-profiles Priority: optional Section: admin Filename: pool/main/s/secubox-autoload-agent/secubox-autoload-agent_0.9.0-1~bookworm1_all.deb Size: 22468 SHA256: f8640bed44d95167973f9eff32edbe73f0291e8140937137ca7377fe429e7a93 SHA1: c08c042574953d8eb81efa982883016a31a745e4 MD5sum: 03aa7956916d846e102274702d459018 Description: SecuBox — provisionnement réseau Auto-Load, côté box Agent de la box cliente : clé WireGuard générée sur la box, tunnel sortant vers l'infrastructure (admin.gk2.secubox.in), jamais de port entrant. Parent #2182. Package: secubox-avatar Version: 1.2.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 101 Depends: secubox-core (>= 1.4.0), python3-fastapi | python3-pip, python3-pil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-avatar/secubox-avatar_1.2.4-1~bookworm1_all.deb Size: 20470 SHA256: 14a566600403c15ef3986933cd80b48a4fdcde6328a342370954ba08093f0f77 SHA1: 4ea680f433af8fc3e537dfdb7b9fb3e577f046cf MD5sum: 59003046266116e8ae1438b3c6398df6 Description: SecuBox Identity and Avatar Manager Identity and avatar management module for SecuBox services. Provides unified identity management across Gitea, Nextcloud, Mail, Matrix. . Features: avatar upload, identity sync, service integration, P31 Phosphor theme. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-backup Version: 2.1.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 119 Depends: secubox-core (>= 1.4.0), age Priority: optional Section: admin Filename: pool/main/s/secubox-backup/secubox-backup_2.1.2-1~bookworm1_all.deb Size: 25142 SHA256: 5dce025e6f171d35d9cdf368e7eb9bee1c4fbec98f7a31eb86c25c3fc71620df SHA1: 9a35c7f87a707e4ce4b64070a8a4ff005dac4d6b MD5sum: dbe537de3a77c401daaff681efbc95cc Description: SecuBox Backup — config + LXC-container backup manager Backup manager covering SecuBox configs (/etc/secubox, nginx, wireguard, haproxy, nftables), service data (/var/lib/secubox, nextcloud, gitea), and LXC containers with automatic stop/start around snapshots. Web dashboard with stats and history. Package: secubox-bbs Version: 0.37.9-1~bookworm1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 25738 Depends: adduser, acl Recommends: nginx, qrencode, secubox-core, chromium, python3-httpx Suggests: secubox-billets Homepage: https://cybermind.fr/secubox Priority: optional Section: web Filename: pool/main/s/secubox-bbs/secubox-bbs_0.37.9-1~bookworm1_amd64.deb Size: 11433786 SHA256: 5f70a039c4c5c6d0d301f82888cd922f2daf847c45fd4fdb8ad00a3d868c3e59 SHA1: d15c0a707cee0f6afb4764a1f32b1b96ffd3f311 MD5sum: 9cb8c508c2ec53265c48a5ce8009c015 Description: SecuBox-Deb — BBS auto-heberge (forums, bibliotheque, publication) Un BBS moderne pour une SecuBox : salons, fils, bibliotheque de fichiers, messagerie interne, et publication d'un fil vers le module billets. . LE DISQUE FAIT FOI. Chaque message est un fichier Markdown sous content/ ; la base SQLite n'en est que l'index, entierement reconstructible. Le BBS tient donc dans un repertoire copiable a chaud par rsync, sans arreter le service, et reste lisible sans ce logiciel. . L'inscription se fait SUR INVITATION. Les mots de passe ne sont pas dans la base : ils vivent a part, hors de l'arborescence de contenu, pour qu'une archive de contenu ne les emporte jamais. Package: secubox-billets Version: 0.13.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 3894 Depends: secubox-core (>= 1.5.39~), python3 (>= 3.11), python3-venv, adduser, nginx Homepage: https://secubox.in Priority: optional Section: web Filename: pool/main/s/secubox-billets/secubox-billets_0.13.2-1~bookworm1_all.deb Size: 3489554 SHA256: 4f78b2d0704ecd760e389eb111e96dbe09d2f007e704d58842b0c16462932f03 SHA1: db38f8627e58903b474d3b2e89c5a0e76a10d844 MD5sum: 0293e94b2ae44f7516152e9df326dc59 Description: billets — micro-blog gateway inter-médias sociaux (SecuBox) Self-hosted micro-blog with an author admin, a public read feed with comments and emoji reactions, and inbound/outbound social-media gateway features: SSRF-guarded oEmbed ingestion (sanitized, iframe-allowlisted), OpenGraph link cards, Atom/JSON feeds, an outbound oEmbed endpoint and share intents. FastAPI + aiosqlite (WAL) + Jinja2, served on a Unix socket behind nginx. Every billet's content and style are versioned in a Gitea repo; every security decision is written to an append-only BLAKE2b-chained event log. Package: secubox-c3box Version: 1.2.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 75 Depends: secubox-core (>= 1.4.3) Priority: optional Section: admin Filename: pool/main/s/secubox-c3box/secubox-c3box_1.2.6-1~bookworm1_all.deb Size: 15642 SHA256: fffdfa12f8d84c335bb34c2d4ba8b4c4d050176147eacf67c55996daa9eb491a SHA1: dd8909f52949c6f929f85c14912cd10c280aa2a4 MD5sum: f664dc1178457cf18a0fab6ece4dc3a2 Description: SecuBox C3box Module C3Box Services Portal Package: secubox-cdn Version: 1.2.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 139 Depends: secubox-core (>= 1.4.3), nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-cdn/secubox-cdn_1.2.3-1~bookworm1_all.deb Size: 25100 SHA256: a41eb4d71254b66041b8802d48e2208b8a205ad88b39ce8162fb09cbcbfa0fe7 SHA1: 3228a2a54decdedcef780e7262d86e25fd725251 MD5sum: 3c2726efe45d9c640c566c3544bf611a Description: SecuBox CDN Cache Cache CDN local : économies bande passante, politiques par domaine/extension, stats hit ratio. . Port Debian bookworm de luci-app-cdn-cache (SecuBox OpenWrt / CyberMind.fr). Package: secubox-certs Version: 1.2.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 118 Depends: secubox-core (>= 1.5.30), python3, python3-fastapi, python3-uvicorn, python3-pydantic, certbot Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-certs/secubox-certs_1.2.7-1~bookworm1_all.deb Size: 26786 SHA256: c466cdeaed55fa95713b11af9a063233854c632fde9af0cedc114b57db94929a SHA1: f30cac0483a6e0443469030b80ea2dd43701f528 MD5sum: 882d5f1580b9fca8ddf669f1f67ad5a5 Description: SecuBox ACME / TLS certificate manager FastAPI control plane managing the HAProxy certificate bundle at /data/haproxy/certs/, certbot renewals, and the WebUI surface at /certs/ on the canonical hub vhost. Reconstructed from the running deployment on gk2 (closes #306 follow-up — the module existed but had no source-side package). Package: secubox-clamav Version: 0.1.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 42 Depends: lxc, python3, secubox-core (>= 1.4.0) Priority: optional Section: mail Filename: pool/main/s/secubox-clamav/secubox-clamav_0.1.2-1~bookworm1_all.deb Size: 9232 SHA256: b1ac0079ee860be2dded6d90d0b988f914c9f9ff5a6ef387b77abf45eb6631ba SHA1: 8f272efe54eec3fb80104c1887b63c83d7b2250a MD5sum: 021fb9bfd350b265d43085424d7beaac Description: SecuBox ClamAV — antivirus dans un LXC dédié, éveillé à la demande clamd (1,2-1,5 Go) ne tient pas dans le budget mémoire du conteneur mail. Il vit dans un LXC « clamav », endormi tant que personne n'en a besoin : un mandataire à activation par socket (10.100.0.1:3310) le réveille à la première connexion de Rspamd et le rendort après dix minutes d'inactivité ; la base est mise à jour chaque semaine. Outil : clamavctl. Package: secubox-cloner Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: SecuBox Team Installed-Size: 64 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Priority: optional Section: admin Filename: pool/main/s/secubox-cloner/secubox-cloner_1.1.1-1~bookworm1_all.deb Size: 11910 SHA256: 59bcbef5afd8081472bdbf598e64cb084f183842ebf146155409e8ecca68952d SHA1: 48095d646bec05c8dac37266081faa30a7c21b9a MD5sum: ddbea9edd511d75f594e8884f0a71b4f Description: SecuBox Cloner - System backup and restore System backup and restore for SecuBox. Create, manage, and restore compressed backups of system configuration and data. Package: secubox-config-advisor Version: 1.1.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-config-advisor/secubox-config-advisor_1.1.3-1~bookworm1_all.deb Size: 13620 SHA256: 709dfb0550359fdabcc318119cc85ffcf39a375e7c8b969358df592462c74156 SHA1: 699673bf14105def9c81e2ef524e8796eb528531 MD5sum: e1b2851c9f721f946fdb42bec2a1332b Description: SecuBox Config Advisor — security configuration audit + recommendations Scans installed SecuBox config (nftables rules, nginx vhosts, systemd unit hardening, AppArmor profiles, file permissions) and surfaces deviations from the CSPN-aligned baseline. Read-only; produces an actionable recommendations report rather than auto- applying fixes. Package: secubox-console Version: 1.2.0-2~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 149 Depends: python3 (>= 3.11), python3-httpx | python3-pip, python3-rich Recommends: secubox-core (>= 1.1.0), python3-pip Suggests: secubox-hub, secubox-watchdog, secubox-soc-gateway Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-console/secubox-console_1.2.0-2~bookworm1_all.deb Size: 25306 SHA256: 635873eaf8a15bf0e38307b1ed8c4103b050551d8759fe8f46d952c53b67328e SHA1: 56cbe710ef66213fff10441078ac09ff08ffbdb9 MD5sum: 571701ed252a8b3708307fe8406b2374 Description: SecuBox Console TUI — Terminal Dashboard Terminal-based dashboard for SecuBox appliances using Python Textual. Provides system monitoring, service management, and network status via a TUI that auto-starts on TTY1 when GUI kiosk is disabled. . Features: - Live system metrics (CPU, memory, disk) - Service management with start/stop/restart - Network interface status with WAN/LAN classification - Real-time log viewer with filtering - Vim-style keyboard navigation - Board-specific theming (MOCHAbin, ESPRESSObin, etc.) . Port Debian bookworm de SecuBox-DEB (CyberMind.fr). Package: secubox-cookies Version: 1.3.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 133 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core (>= 1.4.3) Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-cookies/secubox-cookies_1.3.3-1~bookworm1_all.deb Size: 24884 SHA256: da832ffc8f74851641fd21fc7f12fb9d3ebc9086bd3afffd6ed673929355029a SHA1: 6eea7c620bba85a09fc5be41f08bac992909d846 MD5sum: 4b8d624e810895bcac8f3cbdd49a7027 Description: SecuBox Cookie Tracker Cookie tracking, analysis, and privacy compliance monitoring. Provides third-party cookie detection, tracker identification, GDPR compliance checking, policy enforcement, and alerts. Package: secubox-core Version: 1.7.10-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 823 Depends: python3:any, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jwt, python3-cryptography, python3-httpx | python3-pip, python3-python-multipart | python3-multipart | python3-pip, nginx, systemd-timesyncd | time-daemon, nftables, openssl Recommends: wireguard-tools Breaks: secubox-defaults (<< 1.0.3~), secubox-metrics (<< 1.12.9~) Replaces: secubox-defaults (<< 1.0.3~), secubox-metrics (<< 1.12.9~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-core/secubox-core_1.7.10-1~bookworm1_all.deb Size: 191996 SHA256: ebd1271694bb2a9f6264644638ba8241a26f7f518a2fca25c5ea0915407c4324 SHA1: 3cb27fd749015ac814cdd1993fad7670262d6cd7 MD5sum: 9f43daa377acbcd1ad12cab83e0129bf Description: SecuBox-DEB — bibliothèque centrale et infrastructure Bibliothèque Python partagée (JWT auth, config TOML, logging structuré), configuration nginx reverse proxy, et scripts d'initialisation firstboot. . Ce paquet est requis par tous les modules secubox-*. Port Debian bookworm du cœur de SecuBox OpenWrt (CyberMind.fr). Package: secubox-courbes Version: 0.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: secubox-core (>= 1.7.10), secubox-aggregator (>= 0.4.1), python3, python3-psutil, python3-fastapi | python3-pip Breaks: secubox-metrics (<< 1.24.0~) Replaces: secubox-metrics (<< 1.24.0~) Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-courbes/secubox-courbes_0.1.0-1~bookworm1_all.deb Size: 21962 SHA256: 6ebd28891d0704a3bdbd212a39ca0ef365d2c04df21ee15b4dc2e6ba05ecfa4b SHA1: 1e4256fe22b6e7ce6f6ff8a44278d674010f14af MD5sum: 719981de558cdce9e5d1cd21af24d09d Description: SecuBox Courbes — historique de la box et système en direct (remplace Grafana et Glances) Courbes (/grafana/) : un relevé par minute, 7 jours, CPU, mémoire, charge, débit, connexions, disque. Glances (/glances/) : instantané système, CPU par cœur, disques, réseau, températures, top des processus. Bibliothèque standard et psutil seulement, servi par secubox-groupd : aucun processus de plus, aucun Grafana ni Glances. Package: secubox-cve-triage Version: 1.2.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 146 Depends: python3-yaml, secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-cve-triage/secubox-cve-triage_1.2.4-1~bookworm1_all.deb Size: 29654 SHA256: c1cc22508c2c73aa25774ae15a7bada2f4f3dd97187a8843519f75be51e010e5 SHA1: 17d7cc979ce9c94b449e70ca91b603e4329af71e MD5sum: 7b1a4f4593d3065efba4e99f1b8a2a09 Description: SecuBox CVE Triage — vulnerability assessment workflow CVE triage dashboard: pull advisories, score against the installed package set, track remediation. Maintains its own data store under /var/lib/secubox/cve-triage/. . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella alert dashboard (Suricata + WAF), not vulnerability-focused. - secubox-threat-analyst — AI agent for detection scenarios. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables IP blocklist enforcement. - secubox-network-anomaly — DNS-log anomaly detection. Package: secubox-cyberfeed Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 85 Depends: secubox-core (>= 1.4.0), python3-httpx | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-cyberfeed/secubox-cyberfeed_1.2.2-1~bookworm1_all.deb Size: 15944 SHA256: 0e6753c98ae1a843ef0ae149d5b23f1c09e328b1e26f2f359c183af7de7b16b9 SHA1: fd10546e306a9b760d1ae5b5df388c548ca8a42d MD5sum: 000b9f581c71e1e7161a05dc88194fed Description: SecuBox CyberFeed - Threat Intelligence Feed Aggregator Aggregates threat feeds from multiple sources (abuse.ch, Spamhaus, etc.) and provides unified blocklist management for IPs, domains, and IoCs. . Features: - Multi-source threat feed aggregation - IP and domain blocklist management - Threat indicator (IoC) tracking - Scheduled feed updates - Feed health monitoring - Export to nftables, unbound, dnsmasq formats Package: secubox-daemon Version: 0.1.0-2~bookworm1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 11660 Depends: libc6 (>= 2.34), wireguard-tools Recommends: secubox-core Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-daemon/secubox-daemon_0.1.0-2~bookworm1_amd64.deb Size: 3658290 SHA256: 12a34a85ba084a6f687846c9831354c012a60b892d75bb1bab0242eee2eb3ac3 SHA1: 210884a831310aecf67572cb81b78c288d887b95 MD5sum: e5d22ed6457668039b72f5c73b6a0ab1 Description: SecuBox Mesh Daemon - WireGuard mesh with ZKP authentication Go-based mesh networking daemon for SecuBox featuring: - mDNS peer discovery - WireGuard mesh topology with automatic mesh gate election - GK-HAM-2025 Zero-Knowledge Proof authentication with 24h PFS - SQLite telemetry with metrics collection Includes secuboxd daemon, secuboxctl CLI, and c3box dashboard. Package: secubox-daemon-c3box Source: secubox-daemon Version: 0.1.0-2~bookworm1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 5088 Depends: libc6 (>= 2.34), secubox-daemon Conflicts: secubox-c3box (<< 1.1~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-daemon/secubox-daemon-c3box_0.1.0-2~bookworm1_amd64.deb Size: 1919286 SHA256: 7db5b8a58ebd2ecd7d57d17d6f7dfd5fee93c2fea6e13654fd9d48424e09dd65 SHA1: 6b2f7030abe5f3dd2ee88b02789874e3ac5ee023 MD5sum: 686ac5a861bf67f4295106b69ca34c66 Description: SecuBox C3BOX - Situational Awareness Dashboard (Go variant) Web-based situational awareness dashboard for SecuBox mesh networks. Visualizes mesh topology, node status, and ZKP credentials. Connects to secuboxd via Unix socket. . This is the Go-built variant shipped alongside secubox-daemon. It conflicts with the older Python secubox-c3box package; install only one of the two on a given host. Package: secubox-defaults Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 18 Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-defaults/secubox-defaults_1.0.2-1~bookworm1_all.deb Size: 3616 SHA256: 435b8e58fcbb6f74ca95ca85755e90e7c17567ab6f722e6edfdd707385e6b791 SHA1: ecd4b169a43a7279cf2ce035dd0b1b0c8f762af2 MD5sum: 7d343f41ad1ec90deb7ef6c58bf4b3c6 Description: SecuBox board identity defaults Ships /etc/default/secubox, the single source of truth for SECUBOX_HOSTNAME and SECUBOX_DOMAIN_SUFFIX. Other SecuBox packages depend on this for the canonical admin URL pattern admin... Package: secubox-device-intel Version: 1.3.1-1~bookworm2 Architecture: all Maintainer: Gerald KERMA Installed-Size: 30 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-device-intel/secubox-device-intel_1.3.1-1~bookworm2_all.deb Size: 5656 SHA256: a77185aa97fd90841d8f7c751db6c39dd2d8c0f51bfa23fbd5ad31412adf3267 SHA1: 71f276a3ab174e7010556a8c6cb1f5127d1bbff8 MD5sum: 4d81c53590d2ac2995f9ac1094a515c4 Description: SecuBox Device Intel — network asset discovery + fingerprinting Scans the LAN for connected devices, fingerprints them (OS, vendor, SecuBox/OpenWrt theme markers, LuCI version), and tracks asset inventory over time. Distinct from secubox-watchdog (which monitors *known* services for health, not unknown devices). . Distinct from sibling packages in the monitoring cluster: - secubox-watchdog — LXC + service + HTTP health monitor. - secubox-health-doctor — vital-services check. - secubox-glances, secubox-metrics — system metrics dashboards. Package: secubox-devwatch Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 179 Depends: secubox-core (>= 1.4.0), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip, secubox-sbxui Priority: optional Section: web Filename: pool/main/s/secubox-devwatch/secubox-devwatch_1.1.0-1~bookworm1_all.deb Size: 46026 SHA256: 9b70171e435feafcf131dd208c953751dd5e679cde493bef0455e2c69eec74d2 SHA1: 06657c1b711e9d2790d0b0d0ed90113faa4086a0 MD5sum: be6d02e2d246b7949b7d14d57897fe4e Description: DevWatch — live upstream-GitHub development watch for SecuBox A personal-but-shareable cardlet + vhost service that turns a GitHub repo's live pulse into pertinent, vulgarized metrics: real-time cadence, efficiency arrows, cumulative dev-time, latest commits and release link, plus an emancipation layer (estimated cost, carbon equivalent, perpetual funding campaign). Facts come only from the public GitHub API; the derived figures are clearly labelled estimations, and operator-entered static flows (expenses, sponsorship, subscriptions) are captured through a JWT admin panel. . FastAPI backend on /api/v1/devwatch/ over a Unix socket; a background poller caches a ready-to-serve summary (double-cache pattern); the browser only ever talks to the box (same origin), never to GitHub. Package: secubox-dns Version: 1.5.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 244 Depends: secubox-core (>= 1.7.0), python3-httpx | python3-pip, python3 (>= 3.11) Recommends: systemd, unbound Breaks: secubox-dns-lan (<< 0.1.2~), secubox-dns-provider (<< 1.2.3~) Replaces: secubox-dns-lan (<< 0.1.2~), secubox-dns-provider (<< 1.2.3~) Priority: optional Section: admin Filename: pool/main/s/secubox-dns/secubox-dns_1.5.1-1~bookworm1_all.deb Size: 45548 SHA256: f3c5561346838a60a6d85b5ed146d14138c9d65132c788ee8877efc8c7cabca3 SHA1: c7e02ae54324d36de605a642fb0de99552cbc229 MD5sum: 946fe0260a5858ce4fcfa38bf63fe0af Description: SecuBox DNS — authoritative BIND zone manager BIND zone management dashboard for SecuBox: create, edit, and serve authoritative DNS records you own. . Distinct from sibling packages in the DNS cluster: - secubox-dns-provider — external registrar API (OVH, Cloudflare, Gandi, Route53). Install if you publish records *at a registrar*. - secubox-vortex-dns — recursive DNS firewall with RPZ + threat feeds (unbound-backed). - secubox-dns-guard — DNS anomaly detection (dnsmasq-backed). - secubox-ad-guard — ad/tracker DNS blocking with per-device stats. Package: secubox-dns-guard Version: 1.4.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 177 Depends: secubox-core (>= 1.7.10) Breaks: secubox-network-anomaly (<< 1.1.4~) Replaces: secubox-network-anomaly (<< 1.1.4~) Priority: optional Section: admin Filename: pool/main/s/secubox-dns-guard/secubox-dns-guard_1.4.7-1~bookworm1_all.deb Size: 42606 SHA256: 199f063a1e0a2ce151dfe63f52c10f18a0b892a1f3bf5d98e6eae7b3d7090737 SHA1: eb42c27a11a63aed34c009103dca43dd5b6a8d29 MD5sum: 44cfd88e3ad67062adbe0a84f1197f2b Description: SecuBox DNS Guard — détection d'anomalies DNS Watches recursive DNS resolution for anomalous patterns and keeps the resulting list of suspicious domains. It does not block by itself: the only DNS engine is Unbound, driven by ad-guard and webfilter. . Distinct from sibling packages in the DNS cluster: - secubox-vortex-dns — full recursive DNS firewall with RPZ (unbound-backed; inline blocking before resolution). - secubox-ad-guard — ad/tracker-specific blocking with per-device stats. - secubox-dns — authoritative BIND zone manager (publishing). - secubox-dns-provider — external registrar API. Package: secubox-dns-lan Version: 0.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 44 Depends: python3 (>= 3.11), unbound Recommends: systemd Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-dns-lan/secubox-dns-lan_0.1.0-1~bookworm1_all.deb Size: 10404 SHA256: 39f6534b84636ec000a64a123355edf88268b40335a1f3f3e5595094c7679f6e SHA1: 2e9bb17eba1e6ec93b10180ee5e88dc9bf9b51c9 MD5sum: d70bf0851737d7004eb750cc74413b98 Description: SecuBox DNS du LAN : drop-ins Unbound et adresse IPv6 stable générés Le DNS du réseau local d'une SecuBox : écoute et accès d'Unbound sur le LAN, résolveur IPv6, vue locale du sous-domaine de la box, noms redirigés vers des machines du LAN, et l'adresse IPv6 stable de la box. Les valeurs du site vivent dans /etc/secubox/dns-lan.toml ; la commande secubox-dns-lan génère les fichiers, les valide avec unbound-checkconf (retour arrière si le contrôle échoue) et ne recharge Unbound que si la configuration effective change. Package: secubox-dns-provider Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 130 Depends: secubox-core (>= 1.4.0), python3-httpx | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-dns-provider/secubox-dns-provider_1.2.2-1~bookworm1_all.deb Size: 23714 SHA256: fad3991f4c594de39db19b4794b4983b68f0c9d0d9cf876c375908d5a2e32e8a SHA1: 7fc48f2c9a83b6469c87eb77d0c20f4a8b44f2ac MD5sum: d5b3c3da9e302c2e69d6f021490eafa5 Description: SecuBox DNS Provider Module Multi-provider DNS API management for SecuBox. Supports OVH, Gandi, Cloudflare, and AWS Route53. Features ACME DNS-01 challenge support, Dynamic DNS, zone import/export, and comprehensive audit logging. Package: secubox-dpi Version: 1.4.19-1~bookworm2 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 2272 Depends: secubox-core (>= 1.4.0), iproute2, libndpi-bin, python3-geoip2, geoip-database, secubox-ndpid-engine Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-dpi/secubox-dpi_1.4.19-1~bookworm2_amd64.deb Size: 876078 SHA256: 8f1551a728430649a5e51e9459109cdcd1247d948581f8c307799842ddab230e SHA1: 5c3622c4af4005acf29054ac667259d7171ddb26 MD5sum: 01b077812d85c5329dfa420076a3316f Description: SecuBox DPI Analytics — nDPId/sbxdpi app/protocol classification Analytics layer over the SecuBox DPI pipeline: top applications, top protocols, bandwidth-by-app, bandwidth-by-device, talkers, and risk visualization. . The live engine is full nDPId (nDPI 5.x → nDPIsrvd → sbxdpi, dpi-live.sock). See secubox-ndpid for the JA3/JA4 TLS-fingerprinting nDPId dashboard. . Port Debian bookworm du DPI dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-droplet Version: 1.4.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 180 Depends: secubox-core (>= 1.5.39~), python3-uvicorn | python3-pip, python3-aiofiles, secubox-metablogizer (>= 1.2), rsync, unzip, python3 Priority: optional Section: net Filename: pool/main/s/secubox-droplet/secubox-droplet_1.4.7-1~bookworm1_all.deb Size: 44076 SHA256: 5b8323d8596cc9ec39ff8269d43551e71af3386f1bf884d2a439809b7aea670d SHA1: 015e6116737e66afd6107e5ff2870ae61d29517b MD5sum: 0a4e18d97bb9a55ddfaeaacdd2ec3abe Description: SecuBox Droplet File Publisher Dashboard pour la publication de fichiers et sites statiques. Port Debian bookworm de luci-app-droplet (SecuBox OpenWrt). Package: secubox-exposure Version: 1.5.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 136 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core (>= 1.4.0) Recommends: tor Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-exposure/secubox-exposure_1.5.1-1~bookworm1_all.deb Size: 28092 SHA256: b35dde6d928d1fe0194ac032ee6210f515ca841ab8543b56980b0a3f39177bc2 SHA1: 0393f69d7418e9ee5e6b88f07b0a4bc6a408f5e8 MD5sum: c95b5e07923fb3c6d796d93a13b77202 Description: SecuBox Exposure Manager Service exposure management for SecuBox. Provides Tor hidden services, SSL backends, DNS registration, and mesh network exposure capabilities. Package: secubox-eye-square Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 119 Depends: secubox-core, secubox-eye-remote, python3-pil, python3-evdev, python3-fastapi, python3-uvicorn, python3-websockets, python3-httpx, apparmor-utils Priority: optional Section: admin Filename: pool/main/s/secubox-eye-square/secubox-eye-square_1.0.4-1~bookworm1_all.deb Size: 25612 SHA256: 746f778031df2532e023824d493a055341fceb8edc62f58731867b4b2f9f89a9 SHA1: cf698275551f99167dc73379cf202ea395c60a77 MD5sum: 5ddf689407c20a0064ed04a1247e58d0 Description: SecuBox Eye Remote — Square variant (Pi 4B / Pi 400 + 7" 800x480) Pillow-on-framebuffer single-process kiosk. Renders the SecuBox dashboard directly to /dev/fb0 — no X server, no Qt, no Chromium. Companion to the round/ Pi Zero W variant (also Pillow+fb). . Includes a privileged Helper FastAPI on a Unix socket (SO_PEERCRED) for USB gadget mode switching, service restart, lockdown (nftables atomic swap), and console streaming. Package: secubox-federation Version: 0.3.2-1~bookworm1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 12785 Depends: secubox-core, git Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-federation/secubox-federation_0.3.2-1~bookworm1_amd64.deb Size: 3110858 SHA256: 1108d2dcb1e977cad34f3fd9bd08db46abb59ac10295d126fef2d97b1dc0d6e0 SHA1: 8e38fbc9ddf623236292c172f0c92c85fc2565e9 MD5sum: 524cd72f19e8d92ee182983dc5928df7 Description: SecuBox — fédération SBX (GK2) : certificats et adhésion Phase 1 de la fédération SBX v2 : autorité de certification GK2, certificat SBX v2 signé Ed25519 (sujet = identité annuaire de la box, canonicalisation identique à secubox-annuaire), demandes d'adhésion signées, renouvellement avec preuve de clé, liste de révocation signée, niveaux d'abonnement configurables (/etc/secubox/federation.yaml). . La box reste autonome : sans fichier de configuration elle est hors fédération, et toute synchronisation est initiée par elle. . Fournit sbx-certd (API sur /run/secubox/federation.sock) et sbxctl. Package: secubox-fonction-bouclier Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-service-waf Recommends: secubox-service-dpi, secubox-service-detection Suggests: secubox-service-soc, secubox-service-radio-veille Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-bouclier_0.1.15-1~bookworm1_all.deb Size: 2594 SHA256: 7b072268fc084624b13e4bc2ae8511dc851d6a950967096ddbc38ee442f72f5c SHA1: 20ef947ba2a87a6a2cd5bb2eb40b2c5df7859938 MD5sum: b509eb70abd63182e28863d60306a1ec Description: SecuBox — fonction « Bouclier » Voir et arrêter ce qui frappe : pare-feu applicatif, inspection, détection. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-correspondance Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-service-mail, secubox-service-messagerie, secubox-service-fediverse Suggests: secubox-service-visio Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-correspondance_0.1.15-1~bookworm1_all.deb Size: 2600 SHA256: a0d2a0298ce04c4acfa4ea50174e2085e498ca788b10285322ed78bac16caebe SHA1: 9a0ff2ca68fe77c149df7ebd558da83a4cf332eb MD5sum: 0ddbd275fd97c97fda8457025997d24a Description: SecuBox — fonction « Correspondance » Écrire et recevoir : courrier, messageries chiffrées, fédivers, visio. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-ia Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-service-ia Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-ia_0.1.15-1~bookworm1_all.deb Size: 2552 SHA256: 5a190b9d18e2e06db63727038a5bab0fe66b3c9076aaae35a6305c1398668c57 SHA1: d2df7a49beaf80b1bceb9e29b3f64ee5ac8f65a4 MD5sum: 113d7cee7134f32843ba936cd96f5974 Description: SecuBox — fonction « IA locale » Des modèles qui tournent chez soi, et la passerelle qui garde les données. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-maison Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-service-domotique Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-maison_0.1.15-1~bookworm1_all.deb Size: 2556 SHA256: aa0e76ac5f9fd439ce3002b39fff532e65cf2ccdb237cfe560db3766a26ff82c SHA1: a4b137ec0e95d3b249b6c513747812086df9c350 MD5sum: b973d77f14f2639d6c28570625e0ebc6 Description: SecuBox — fonction « Maison connectée » Piloter le domicile : Zigbee, MQTT, vidéosurveillance. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-media Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-service-radio, secubox-service-video, secubox-service-musique Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-media_0.1.15-1~bookworm1_all.deb Size: 2572 SHA256: c700f50f0dcc6b3a987e99b202cabd8c062567780ee3b026fd3f20e3b8a42334 SHA1: 2e6acd2edee683ca6a98ca01bda2a8d17a347fa0 MD5sum: e6fcf682bc2f26df716976a2f5e15fd0 Description: SecuBox — fonction « Média » Écouter et regarder chez soi : radio, balados, vidéo, musique. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-mesh Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-service-mesh Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-mesh_0.1.15-1~bookworm1_all.deb Size: 2542 SHA256: da712a141b9550df4a144b9db85da96a19e9c4d3225d88323cc9659977a28a4f SHA1: e21239024fe3cb4237362545e003654efa261e6a MD5sum: d6a2daa155bc685666d94e4f648540ec Description: SecuBox — fonction « Maillage » Relier les box entre elles : annuaire, fédération, overlay. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-nuage Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-service-fichiers, secubox-service-photos, secubox-service-git Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-nuage_0.1.15-1~bookworm1_all.deb Size: 2562 SHA256: 7deb2ddf671f51e7f0c46baae9c65a4d356366d3094f09d4bd422144d130be00 SHA1: 9355dcf87f426245994be534e3923d055202450d MD5sum: 035b175e997ab13566bf0102d17c15ff Description: SecuBox — fonction « Nuage personnel » Ses fichiers, ses photos et son code chez soi. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-provision Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-service-provision Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-provision_0.1.15-1~bookworm1_all.deb Size: 2544 SHA256: e088191440b99a75cc02ac4112bc3e6651e3844a0933d79aa23c685690bd9e82 SHA1: 5bb21f7e616bb86fe73d775eb1a294dccec2e0d7 MD5sum: 7a34e0e63a7b2d362d484f592e7d8450 Description: SecuBox — fonction « Provision » Sauvegarder, cloner, déployer d'autres box. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-publication Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-service-sites, secubox-service-bbs Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-publication_0.1.15-1~bookworm1_all.deb Size: 2566 SHA256: 24c17b0bd344386ccf71ef95ecbb81821c19386a866b9a08bc47e19a1ceacc59 SHA1: 3bdbf0c9113f8dbef3b226a7bf5174ee9e9e8c95 MD5sum: e31ce68d8720ab5dc4a0462079aea08e Description: SecuBox — fonction « Publication » Publier : sites, billets, forum, dépôt de fichiers. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-reseau Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-service-routage, secubox-service-dns, secubox-service-exposition Recommends: secubox-service-vpn Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-reseau_0.1.15-1~bookworm1_all.deb Size: 2582 SHA256: e3c5c7f0242f43c7b53a2134367ddfabe0a542b71575fd8dc12a61768d3ebfe2 SHA1: ffce20a076d4c79d324cdcf5a4f359a2c6933486 MD5sum: f97c30b4272c5ddea47c8130faa7b8c9 Description: SecuBox — fonction « Réseau d'opérateur » Être son propre opérateur : routage, résolution, exposition, tunnels. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-socle Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-service-noyau, secubox-service-identite, secubox-service-administration Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-socle_0.1.15-1~bookworm1_all.deb Size: 2560 SHA256: a4356740eb39b59c578d8f1e519f0d1a5abb709d2b20ee70169d9860270ad6a7 SHA1: 8f4405e79a108021ec935ca7d1829eb418854598 MD5sum: b1e9a7dd9b1c8b42a299adab5cfac430 Description: SecuBox — fonction « Socle » Ce sans quoi rien ne tient : noyau, identité, administration. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-supervision Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-service-metriques Suggests: secubox-service-ecrans Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-supervision_0.1.15-1~bookworm1_all.deb Size: 2570 SHA256: 7fb57b9fce276fb5da5cc68de6ba6a6ab69554168750ec53b3edf92c61582065 SHA1: 72d8f4bec3b73e2f91a110da015783b226173266 MD5sum: 7c2cfd3180dd4ad8d8d82210d9cb3849 Description: SecuBox — fonction « Supervision » Mesurer la box : métriques, tableaux, rapports. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-veille Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-service-actualites Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-veille_0.1.15-1~bookworm1_all.deb Size: 2546 SHA256: b6410bf93837655d11d7d0801593d9907d5142a3ce600a0fbda2e4a6ff9cf5c6 SHA1: 7dcab0d40dd81034a9a16bb0bfc40ee694805f4a MD5sum: d39c50d45b94ad92794634c0f6c62a65 Description: SecuBox — fonction « Veille » Suivre ce qui se dit : actualité, flux, recherche libre. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-freeboxtv Version: 0.1.2-1~bookworm1 Architecture: all Maintainer: Gerald Kerma Installed-Size: 32 Depends: secubox-core (>= 1.4.0), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-fastapi | python3-pip, ffmpeg, adduser Homepage: https://secubox.in Priority: optional Section: video Filename: pool/main/s/secubox-freeboxtv/secubox-freeboxtv_0.1.2-1~bookworm1_all.deb Size: 7748 SHA256: 1b7b05b205b13da35407def88b500869cfff0ccb0c76807f14f9b7ad1b8e4e19 SHA1: 1a14c82ef4b215f0a73fa5127950387cb2c66e9d MD5sum: 37c944c64ef08d514807e449a510f1b6 Description: SecuBox — streamer Freebox TV (RTSP vers HLS, on-demand) Derriere une Freebox, les chaines TV sont exposees en RTSP unicast. Un navigateur ne lit pas le RTSP : ce module interpose un sas ffmpeg RTSP->HLS (remux -c copy, sans re-encodage), lance A LA DEMANDE par chaine et tue apres inactivite. Il sert la playlist de base (variante standard) et le HLS que la cardlet du Hall joue. Donnees reelles uniquement, usage personnel LAN. Package: secubox-full Version: 1.3.2-1~bookworm3 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-ndpid-engine, secubox-profiles, secubox-isp (>= 1.0), secubox-bbs, secubox-billets, secubox-nextcloud (>= 1.0), secubox-gitea (>= 1.0), secubox-jellyfin (>= 1.0), secubox-lyrion (>= 1.0), secubox-peertube (>= 1.0), secubox-podcaster (>= 1.0), secubox-torrent (>= 1.0), secubox-webmail (>= 1.0), secubox-mail (>= 1.0), secubox-ytsas, secubox-zigbee (>= 1.0), secubox-metablogizer (>= 1.0), secubox-publish (>= 1.0), secubox-radio Recommends: wireguard-tools Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-full/secubox-full_1.3.2-1~bookworm3_all.deb Size: 1726 SHA256: 66033720d04b7f27e10f58ef693677047c9292c2e568483d7b66ef58e193cfeb SHA1: 835d0e5ec6c341827578c6211d3d2a6ac80919ab MD5sum: 0ec4ad87852e841bdaa6c181b0dd6f0f Description: SecuBox Full — socle ISP + applications working (catalogue all.gk2) Métapaquet showcase : le socle secubox-isp PLUS les applications effectivement en service et listées sur all.gk2.secubox.in — BBS, billets, Nextcloud, Gitea, Jellyfin, Lyrion, PeerTube, Podcaster, torrent, webmail, mail, ytsas, Zigbee, metablogizer, publish, radio. . Profil PROPRE : les modules non finis / désactivés / hors catalogue ne sont PAS inclus ; ils restent installables à la demande depuis apt.secubox.in. Package: secubox-gitea Version: 1.6.8-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 190 Depends: secubox-core (>= 1.5.39~) Priority: optional Section: admin Filename: pool/main/s/secubox-gitea/secubox-gitea_1.6.8-1~bookworm1_all.deb Size: 40116 SHA256: e0777e149bb165f2e98e20c9b79658ae024219e6b28a6ba4879c0e4adb33b056 SHA1: 061ea63639fb16c4e18af3d06e5340b74a1188bb MD5sum: f25f2e274eeead50ca867ae2d6d44a14 Description: SecuBox Gitea — self-hosted Git server (LXC) Manages a Gitea Git server (private repositories, issues, PRs) running in its own LXC container. SecuBox wires up nginx vhost, ACME TLS, backup integration, and a web management dashboard around the upstream Gitea install. Package: secubox-glances Version: 1.1.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: secubox-core (>= 1.4.0), glances, python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-glances/secubox-glances_1.1.3-1~bookworm1_all.deb Size: 17864 SHA256: ac8e646c6c70477bd52f0b7cc30ca33e9b57a6a55887e5279d2deff144c3e6c6 SHA1: e01d807aff1ed6e1313cdf1e76a60265181c92ab MD5sum: 34f706776afd25fb58e8242fa8e175c3 Description: SecuBox Glances Dashboard System monitoring module wrapping the Glances monitoring tool. Provides real-time CPU, memory, disk, network stats with P31 Phosphor theme. . Features: hardware sensors, process list, historical data, service control. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-grafana Version: 1.0.17-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 86 Depends: secubox-core (>= 1.5.39~), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq Recommends: secubox-metrics Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-grafana/secubox-grafana_1.0.17-1~bookworm1_all.deb Size: 18620 SHA256: abee1bef5a2ee748cb094d16badc4670c304b3e46d3ba5309834a336aeff788b SHA1: 1b1396ed8e9300ce02c1af2b76dafea0c11e4d08 MD5sum: e931deaa1b1386e679a93296cf08f095 Description: SecuBox Grafana — security metrics dashboards Hosts Grafana OSS in a Debian LXC at 10.100.0.70 on br-lxc, with pre-provisioned dashboards for the SecuBox security stack: nftables, suricata, cookie-audit, sbxwaf and per-service systemd health. . The host-side FastAPI control plane runs on /run/secubox/grafana.sock and is exposed by nginx at /api/v1/grafana/. The native Grafana UI is iframe- embedded under /grafana/ (proxy_pass to the LXC). . grafanactl exposes the canonical SecuBox three-fold introspection (components/status/access) plus dashboard/datasource/alert/user/api-key nouns matching the OPS MONITORING layer of the CTL grammar. Package: secubox-groupd Version: 0.3.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 37 Depends: python3, python3-uvicorn, python3-fastapi Priority: optional Section: net Filename: pool/main/s/secubox-groupd/secubox-groupd_0.3.0-1~bookworm1_all.deb Size: 8906 SHA256: 263ae3e24d7d19ca4633bf6d624ee41b203b397bcc668bef4fc580e6bc55f132 SHA1: 7372dac0e1b26687f052ab08d0e1abdc033a3af2 MD5sum: b3dbac64b2a61422be97fbdd0428be0f Description: SecuBox — hote de groupe pour les modules Sert plusieurs modules SecuBox dans un seul interpreteur Python, chacun sur sa socket habituelle. L'interpreteur, FastAPI et Starlette sont ainsi payes une fois au lieu d'une fois par module : 82 modules tiennent dans 180 Mo la ou leurs demons separes en occupaient 3070. . L'empaquetage reste separe et modulaire : chaque module garde son paquet et son unite. C'est l'INSTALLATION qui est rassemblee — un module se declare groupable en deposant un fichier a son nom dans /usr/share/secubox/groupable.d, et le groupe constate ce que l'installation contient au lieu de tenir une liste. Package: secubox-haproxy Version: 1.12.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 541 Depends: secubox-core (>= 1.6.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, nginx, python3-jinja2, python3, python3-fastapi | python3-pip Recommends: haproxy, secubox-waf-ng, tor Breaks: secubox-exposure (<< 1.5.2~), secubox-vhost (<< 1.6.5~) Replaces: secubox-exposure (<< 1.5.2~), secubox-vhost (<< 1.6.5~) Priority: optional Section: net Filename: pool/main/s/secubox-haproxy/secubox-haproxy_1.12.1-1~bookworm1_all.deb Size: 116908 SHA256: 6f6fa714e628a0f4f05a76bc8ae13a0dbeeab8f0d06ba5358f97da19e2b22684 SHA1: f5da0d996f9c6f3990299e8b76b42c1f5d42b4d1 MD5sum: 3c2cfb9cdb11ab374aca01db7a618ef6 Description: SecuBox HAProxy Dashboard Dashboard HAProxy avec gestion des vhosts et backends. Port Debian bookworm de luci-app-haproxy (SecuBox OpenWrt). . Features: - WAF integration for MITM traffic inspection - Per-vhost WAF bypass controls - Dynamic route syncing with WAF module Package: secubox-hardening Version: 1.5.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 107 Depends: secubox-core (>= 1.4.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip Recommends: auditd Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-hardening/secubox-hardening_1.5.1-1~bookworm1_all.deb Size: 22874 SHA256: 0e47486e6f14273f9c82e51c61820dda739984b81d2a2246afd4880dfd325431 SHA1: 6a75340a2dad8804835c136581f7c36e317c3756 MD5sum: c7865a7a6f80529a45b0a6d57b2c1425 Description: SecuBox Kernel and System Hardening Kernel and system hardening for SecuBox appliances. . Features: - Kernel sysctl hardening (ASLR, kptr_restrict, etc.) - Network hardening (SYN cookies, reverse path filter) - Module blacklist (uncommon protocols, filesystems) - Security benchmark tool . Based on ANSSI/CIS benchmark recommendations. Package: secubox-health Version: 1.3.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 164 Depends: python3 (>= 3.11), python3-aiohttp, secubox-core (>= 1.4.0), python3-uvicorn, python3-fastapi, lxc, systemd Breaks: secubox-health-doctor (<< 1.2.1~), secubox-watchdog (<< 1.2.5~) Replaces: secubox-health-doctor (<< 1.2.1~), secubox-watchdog (<< 1.2.5~) Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-health/secubox-health_1.3.2-1~bookworm1_all.deb Size: 36136 SHA256: 2fa395d68d1af786857fe6df6f8602e3427c64453fab8f1ab10af6de77c4676d SHA1: fe86195b37f256322bf7175260dcb431b007a6cb MD5sum: 34a5da9fc630b56109a65df48302f85b Description: SecuBox health probers (vhost + module health monitoring) Reconstitue en paquet source les sondes de santé de la board, jusque-là déployées à la main sur gk2 (aucune source dépôt) : - secubox-health-prober (prober.py) : sonde chaque vhost via nginx et écrit /var/cache/secubox/health/status.json. Ignore désormais les vhosts lifecycle=on-demand (modules.d) — les sonder les maintenait éveillés et neutralisait secubox-sleeper (scale-to-zero). - secubox-module-prober (module_prober.py) : santé par socket unix /health. Package: secubox-health-doctor Version: 1.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 55 Depends: python3:any, secubox-core (>= 1.4.0), python3-uvicorn, python3-fastapi, lxc, systemd Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-health-doctor/secubox-health-doctor_1.2.0-1~bookworm1_all.deb Size: 14214 SHA256: d559521e6c3f71455685e6eb1d620292d6c82ac5381f96a5710c389c955a50a0 SHA1: 2548c906abc5da8f3f2d7eeb1e8d5f213f31e476 MD5sum: 849047f134c475bf7602e55491187cea Description: SecuBox vital-services health monitor Daemon + CLI (healthctl) + FastAPI that runs periodic checks against the vital services on a SecuBox board (haproxy, sbxwaf, gitea LXC, nginx, mail LXC, metrics socket, cookie-audit ledger freshness, filesystems, act-runner). State transitions emit CSPN-compatible journal events. Read-only API consumed by the portal banner. Package: secubox-hub Version: 1.12.13-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 1332 Depends: secubox-core (>= 1.5.39~), secubox-aggregator, fonts-noto-color-emoji Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-hub/secubox-hub_1.12.13-1~bookworm1_all.deb Size: 239444 SHA256: 8ac74b067a5b326aab853ff9aa9a9771af50828ada760baa9c6559d984af1796 SHA1: c8218259b375b83d0f6a02ee15856b2034e043ee MD5sum: 1c20d9a4789b5859461d3cc66dd5e0b9 Description: SecuBox Hub — Tableau de bord central Hub central SecuBox : lanceur de modules, état des services, alertes consolidées. . Port Debian bookworm de luci-app-secubox (SecuBox OpenWrt / CyberMind.fr). Package: secubox-interceptor Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 98 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core (>= 1.4.0) Recommends: secubox-waf, openssl Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-interceptor/secubox-interceptor_1.1.1-1~bookworm1_all.deb Size: 16038 SHA256: 4f4a46daa1ceae2cc1ca6b4399e6cba788d275f8b0ec35379eacc417be1cb32f SHA1: 5acf63d646a204934e2b5e9ca87c9b74ba4f5f94 MD5sum: ca3a99746b9ce7eae85a2479964f39c4 Description: SecuBox Traffic Interceptor HTTP/HTTPS traffic interception and analysis module. Provides SSL/TLS inspection, request/response modification, traffic recording, protocol analysis, content filtering, and WAF integration. Package: secubox-iot-guard Version: 1.1.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 30 Depends: secubox-core (>= 1.4.3) Priority: optional Section: admin Filename: pool/main/s/secubox-iot-guard/secubox-iot-guard_1.1.4-1~bookworm1_all.deb Size: 5956 SHA256: 46b755977b04adb10362e120de1809ce3141cb24b375da1af4639079c4775ba1 SHA1: 60f80cab88c3d88691cb64b51deb1cdee6d20e08 MD5sum: bb982d36f8156a565e2bfe60371f0e44 Description: SecuBox IoT Guard — IoT device discovery + segmentation Inventories IoT devices on the LAN (vendor MAC OUI, mDNS/SSDP/MQTT fingerprints), classifies them by type, and applies nftables micro-segmentation policies to keep IoT traffic isolated from trusted hosts. Package: secubox-ipblock Version: 1.1.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 88 Depends: secubox-core (>= 1.4.0), nftables, curl Priority: optional Section: admin Filename: pool/main/s/secubox-ipblock/secubox-ipblock_1.1.3-1~bookworm1_all.deb Size: 16648 SHA256: dc044da39195043dfbfe3954a3ee07934518b6c9f8d020dc23f6d669270082f4 SHA1: 183a5e60d84594e989e3897c60eece025c0ec137 MD5sum: 917ada459d570bdf3df9b7190b5529bd Description: SecuBox IP Blocklist Manager IP blocklist management module for SecuBox. Features include: - Multiple blocklist sources (Spamhaus, AbuseIPDB, FireHOL, etc.) - Custom blocklist rules - nftables set integration - Whitelist management - Auto-update scheduling - Block statistics and history - Import/export lists Package: secubox-isp Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-profiles, secubox-core (>= 1.0), secubox-defaults (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-system (>= 1.0), secubox-auth (>= 1.0), secubox-users (>= 1.0), secubox-netmodes (>= 1.0), secubox-nac (>= 1.0), secubox-wireguard (>= 1.0), secubox-dns (>= 1.0), secubox-vortex-dns (>= 1.0), secubox-dns-provider (>= 1.0), secubox-modem (>= 1.0), secubox-routes (>= 1.0), secubox-netdiag (>= 1.0), secubox-traffic (>= 1.0), secubox-waf (>= 1.0), secubox-waf-ng (>= 1.0), secubox-vortex-firewall (>= 1.0), secubox-haproxy (>= 1.0), secubox-ipblock (>= 1.0), secubox-hardening (>= 1.0), secubox-certs (>= 1.0), secubox-exposure (>= 1.0), secubox-qos (>= 1.0), secubox-vhost (>= 1.0), secubox-mediaflow (>= 1.0), secubox-dpi (>= 1.0), secubox-watchdog (>= 1.0), secubox-health-doctor (>= 1.0), secubox-tor (>= 1.0), secubox-mesh (>= 1.0), secubox-p2p (>= 1.0), secubox-meshname (>= 1.0), secubox-security-posture (>= 1.0) Recommends: secubox-cdn, wireguard-tools Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-isp/secubox-isp_1.0.1-1~bookworm1_all.deb Size: 1694 SHA256: 15758eabfe6ea4bc7c153d69065e353e3fea3149c2fc0143f7e615e443a03b4c SHA1: 6f364c4bc97a3696688255c22b4540ab711728c8 MD5sum: 2de77753a275b5ad4c7586e27b00a3b9 Description: SecuBox ISP — socle routeur/FAI propre Métapaquet du socle SecuBox pour un routeur/passerelle FAI : réseau, pare-feu (nftables, WAF, vortex-firewall, HAProxy), DNS, WireGuard, contrôle d'accès réseau, DPI, QoS, exposition (Tor), supervision et durcissement. . Profil PROPRE : aucune application lourde (PeerTube, Matrix, Jellyfin, cloud…). Ces modules s'installent à la demande depuis apt.secubox.in, ou via le profil secubox-full. Package: secubox-jabber Version: 1.0.3-1~bookworm1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 51 Depends: secubox-core, python3, python3-uvicorn | python3-pip, python3-fastapi | python3-pip, nginx Recommends: prosody Priority: optional Section: net Filename: pool/main/s/secubox-jabber/secubox-jabber_1.0.3-1~bookworm1_all.deb Size: 10634 SHA256: b23b4121bca669740670387b1bc07cf72bb27b53f004ca2a4184f7295cebdff9 SHA1: 872f1efcd5e9380ac12153ee57a2fa5fa89b1c13 MD5sum: ea8f111158a9f5765b143169c2b0e1eb Description: SecuBox Jabber XMPP Server Prosody XMPP server management for SecuBox. User accounts, virtual hosts, and federation. Package: secubox-jellyfin Version: 2.0.13-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 185 Depends: secubox-core (>= 1.5.39~), lxc, lxc-templates, debootstrap, nftables, sudo, python3-uvicorn, python3-fastapi, python3-toml, curl, jq Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-jellyfin/secubox-jellyfin_2.0.13-1~bookworm1_all.deb Size: 39422 SHA256: ac28352f1f1e9ca42397fabd6a2af516ae629a2749a3d6188c52e22d009eb09e SHA1: dd0861784af5ee2b9f33d9155d4715a94a226b3a MD5sum: a0ecdf4cfc71f6c8c44d3aab5a4e45c6 Description: SecuBox Jellyfin — LXC-native media server (MIND layer) Runs Jellyfin in a Debian bookworm LXC at 10.100.0.170 on br-lxc, behind the SecuBox chain (HAProxy TLS 1.3 → sbxwaf → nginx). Replaces the earlier Docker/Podman-based 1.0.0 host-API stub with the peertube/lyrion LXC model. . The unprivileged host API (/api/v1/jellyfin/, JWT-gated) delegates every privileged action to the audited root helper jellyfinctl over scoped sudo: LXC start/stop/restart, library scans, and Jellyfin/version upgrades. . Partner auto-wire detects the sibling SecuBox media services (photoprism, nextcloud, torrent, lyrion) by the presence of their media directory and read-only bind-mounts each into the Jellyfin LXC as a virtual-folder library (peertube stays a deep link). Wiring is independently toggleable per partner. Package: secubox-jitsi Version: 2.1.8-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 154 Depends: secubox-core (>= 1.5.39~), python3-uvicorn | python3-pip, lxc, curl Recommends: nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-jitsi/secubox-jitsi_2.1.8-1~bookworm1_all.deb Size: 38158 SHA256: 3d60b51eda8785afe73bae5dc6af0c00c99df9d6f7952ede9a43caefa55463c7 SHA1: cdae11a2b198b2053588cc0f64726b7529df6fb3 MD5sum: d167969ee4813c95760015af32150515 Description: SecuBox Jitsi Meet - Video Conferencing (LXC-native) Jitsi Meet running natively in an unprivileged Debian LXC: prosody (XMPP), jicofo (focus), jitsi-videobridge2 (media) and an internal nginx serving the web app. The host only routes: HAProxy terminates TLS for the public hostname and proxies to the container. . Replaces the 1.0.0 module, which generated a docker-compose.yml and drove docker/podman from the API request path. . Features: - Native LXC deployment, one systemd unit per Jitsi service - jitsictl: the single audited root surface (WebUI delegates, never acts) - Videobridge NAT harvester wiring for media behind two NATs - Per-service restart without cycling the container . Provides FastAPI backend on /api/v1/jitsi/ via Unix socket. Package: secubox-ksm Version: 1.2.2-1~bookworm2 Architecture: all Maintainer: Gerald KERMA Installed-Size: 67 Depends: secubox-core (>= 1.4.0), python3-fastapi | python3-pip Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-ksm/secubox-ksm_1.2.2-1~bookworm2_all.deb Size: 11658 SHA256: 9f84d9224ff05e6422f6f59660c3a0bc638ff0a4785096a6b3e287f301021916 SHA1: e24b9d95cebb390ef3e229ef32eeca8860f10605 MD5sum: 49395104bc934ccd0ac02c3404f17c7d Description: SecuBox KSM Memory Optimization Dashboard Kernel Same-page Merging (KSM) management module. Provides web UI and API for KSM controls to optimize memory in VMs and containers. . Features: enable/disable KSM, configure pages_to_scan and sleep_millisecs, view memory savings statistics. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-led-heartbeat Version: 2.1.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: python3, secubox-core, device-tree-compiler, i2c-tools Recommends: secubox-heartbeat Breaks: secubox-core (<< 1.5.5) Replaces: secubox-core (<< 1.5.5) Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-led-heartbeat/secubox-led-heartbeat_2.1.4-1~bookworm1_all.deb Size: 19916 SHA256: 8a86384d05f35da0a73b12fca07d0f756cf384eed1cd7d093b7a3e64f398d348 SHA1: e3386d90042f593377eb586689da788f136727a0 MD5sum: 449d598418714246e929327b67a7c8b9 Description: SecuBox LED heartbeat status indicator Visual system health indicator using MOCHAbin RGB LEDs. . Displays system health, security status, and resource usage via the IS31FL3199 I2C LED controller (3 RGB LEDs). . LED mapping: - LED 1: Health status (pulsing green/yellow/red) - LED 2: Security status (steady, flashing on threat) - LED 3: Capacity (CPU/memory load) Package: secubox-lite Version: 1.1.0-1~bookworm2 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-profiles, secubox-core (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-wireguard (>= 1.0), secubox-netmodes (>= 1.0), secubox-nac (>= 1.0), secubox-system (>= 1.0), secubox-hardening (>= 1.0) Recommends: wireguard-tools Suggests: secubox-qos, secubox-auth, secubox-watchdog, secubox-backup Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-lite/secubox-lite_1.1.0-1~bookworm2_all.deb Size: 1362 SHA256: 61d63f5f90c765820fa39fb783217e7ba6d09e4fe9dc9587b202318c728e07a0 SHA1: a5cfd34e9bc4b702f01e695569f76ecd4f9bff9f MD5sum: 56e747147478cd69ab7a1ed30e4ceaf8 Description: SecuBox Lite — Essential modules for low-RAM devices Metapackage installing essential SecuBox modules for ESPRESSObin and other devices with 1-2GB RAM. . Includes: Hub, WireGuard, Network Modes, NAC, and System. DPI, QoS, CDN and other heavy modules are excluded. Package: secubox-localrecall Version: 1.1.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 60 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-localrecall/secubox-localrecall_1.1.3-1~bookworm1_all.deb Size: 12726 SHA256: bb599a5e0bae61ae10fa7aade4a440aeb55e5b60bb62d37140c6a63865696960 SHA1: 22094bd357016fc1a8c386b3d424aa1ed87e01fb MD5sum: 3310023e666ce397eb255337378443fd Description: SecuBox LocalRecall — on-box AI memory store Long-term, on-box memory store for AI assistants: conversation history, learned operator preferences, project context. Local storage only — nothing leaves the box. Pairs with secubox-mcp-server if exposing memory contents to MCP-compatible AI clients. Package: secubox-lyrion Version: 1.7.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 169 Depends: secubox-core (>= 1.5.39~), secubox-auth (>= 1.2.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, python3-yaml, openssl, curl, jq Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-lyrion/secubox-lyrion_1.7.1-1~bookworm1_all.deb Size: 44820 SHA256: 58ae9b8ef3029603b61b806ddeee3295c8bd6e399a7d4e804e8e25955dba222c SHA1: 6069b90fc31d89fc9dc37029f20d0035af6c2389 MD5sum: 5ff8d83419bc41b40594f44eb69edf8a Description: SecuBox Lyrion — Music server (HOSTING layer) Hosts Lyrion in a Debian bookworm LXC at 10.100.0.100 on br-lxc. File-backend identity provider reading /etc/secubox/users.json (the same argon2-hashed user store already managed by secubox-users) so the canonical SecuBox identity is the single source of truth for SSO. . OIDC clients pre-provisioned for the three native admin UIs that already support OIDC: Grafana, Gitea, Nextcloud. YaCy/secubox-waf UI (no native OIDC) get nginx `auth_request` integration to the same Lyrion. . Health-banner injected on the Lyrion login page via nginx sub_filter so the operator sees the SecuBox system health bar even on the SSO screen. Package: secubox-mac-guard Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 37 Depends: secubox-core (>= 1.0), nftables, nginx, ieee-data Recommends: nmap, arp-scan Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mac-guard/secubox-mac-guard_1.2.2-1~bookworm1_all.deb Size: 6036 SHA256: 62af7d268d2709c97acfc06dca3db4768424ad07405de0482227fa0b64327571 SHA1: da9b8b52933ea19634298688708b1501d35eea52 MD5sum: 0fb197291d472d5be5fd22fefea63f09 Description: SecuBox MAC Guard - MAC Address Control MAC-based network access control with device discovery, vendor lookup, whitelist/blacklist management, and nftables integration. . Features: - MAC address whitelist/blacklist management - Device discovery and tracking via ARP/DHCP - OUI vendor lookup (ieee-data) - Device naming and tagging - Alert on unknown devices - nftables MAC filtering integration - Real-time device monitoring . Port Debian bookworm SecuBox module (CyberMind.fr). Package: secubox-macro Version: 0.1.0-1~bookworm1 Architecture: all Maintainer: Gerald Kerma Installed-Size: 41 Depends: python3, nftables, secubox-core Recommends: tor Priority: optional Section: admin Filename: pool/main/s/secubox-macro/secubox-macro_0.1.0-1~bookworm1_all.deb Size: 7998 SHA256: a3b5763262a2ff455c0116327abfecd16689702e060bc975ef2df7b4c9514141 SHA1: 453f7edf84640c11e4933b14cd4732e39ac60268 MD5sum: 5a837b901499be550d65402feb5d7f41 Description: SecuBox vetted access-macro framework + tor-exit kind Root dispatcher secubox-macroctl and the vetted tor-exit macro that offers a node's Tor SOCKS port to approved mesh peers. Package: secubox-mail Version: 2.12.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 418 Depends: secubox-core (>= 1.5.41~), lxc, debootstrap, openssl, python3-httpx Suggests: acme.sh Breaks: secubox-mail-lxc (<< 2.2), secubox-webmail (<< 2.2), secubox-webmail-lxc (<< 2.2) Replaces: secubox-mail-lxc (<< 2.2), secubox-webmail (<< 2.2), secubox-webmail-lxc (<< 2.2) Priority: optional Section: admin Filename: pool/main/s/secubox-mail/secubox-mail_2.12.1-1~bookworm1_all.deb Size: 92728 SHA256: 7ea8b9b0193c0b0359e04e3904b8b7f6ad2daac6663f74f0de590a4b20a536d6 SHA1: 145d11bc2f00bba15071a0211b22670313f8abda MD5sum: ca7a612e0cdf8b094e6f2fd987b5de77 Description: SecuBox Mail Module Complete email server management API and dashboard. Postfix/Dovecot mail server and Roundcube webmail in Debian LXC containers. . Features: - User/alias management via mailctl - DKIM/SPF/DMARC configuration - ACME certificate automation (Let's Encrypt) - Service monitoring - Webmail integration (Roundcube in LXC) - Three-fold architecture (components, status, access) . For Let's Encrypt certificates, install acme.sh: curl https://get.acme.sh | sh Package: secubox-mail-lxc Version: 2.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 10 Depends: secubox-mail (>= 2.2) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-mail-lxc/secubox-mail-lxc_2.2.1-1~bookworm1_all.deb Size: 1986 SHA256: e48312fe703bb710233501f97a7a98fa36dff2f9667d8d028ed214450dfb20bd SHA1: 0a591f4bf58bc8d2de11501c8f1d8d6f7378ffc6 MD5sum: 9a18c592878a4f107c6901559fc0fcf1 Description: Transitional package — mail LXC functionality moved to secubox-mail The single consolidated mail LXC is now installed and driven by secubox-mail (>= 2.2). This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-matrix Version: 1.1.3-1~bookworm1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 103 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, lxc, lxc-templates Recommends: nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-matrix/secubox-matrix_1.1.3-1~bookworm1_all.deb Size: 18394 SHA256: 92c794eee3741b206eb3881785314c31b7987d323edc8d6dcac0f50d8012fc9c SHA1: 0fdaaf9d730bcc030317e32eb5830eb743c4ad0e MD5sum: feb92bef017464f489837ca5d0cdd338 Description: SecuBox Matrix Synapse - Federated Chat Server LXC-based Matrix Synapse homeserver for SecuBox. Provides federated, encrypted messaging with Element web client support. . Features: - Full Matrix Synapse homeserver in LXC container - User and room management via web UI - Bridge support (Telegram, Discord, Signal, etc.) - Element web client installation - Federation support - Backup/restore functionality Package: secubox-mcp-server Version: 1.1.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 73 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-mcp-server/secubox-mcp-server_1.1.6-1~bookworm1_all.deb Size: 15212 SHA256: c84d99b5ae1fa42509fcf92c035a3ccd893a3f5ecefa1c2d5b923601f133ef2c SHA1: 56dc325999a603d1f3b1238a7524b31bd67b5c31 MD5sum: 54f106e476730797dcf471e0f47d1c5e Description: SecuBox MCP Server — Model Context Protocol server for AI tools Hosts a Model Context Protocol (MCP) server exposing SecuBox telemetry, config, and operations to MCP-compatible AI clients (Claude Desktop, Cursor, etc.). Operator-controlled tool surface with per-client authentication. . Distinct from sibling packages in the AI cluster: - secubox-ai-gateway — request router with sovereignty policy. - secubox-ai-insights — ML-based threat detection. Package: secubox-media Version: 1.6.0-1~bookworm1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 118 Depends: secubox-core (>= 1.4.0), python3-uvicorn Recommends: rsync, exfat-fuse, exfatprogs, ntfs-3g Priority: optional Section: net Filename: pool/main/s/secubox-media/secubox-media_1.6.0-1~bookworm1_all.deb Size: 30104 SHA256: 0652be3e9e23a1f223f22a7b5e87109aa5d259078975c5b6d82d7721c6762f64 SHA1: d32c7a51b291a28f2dc67b0c470a6ede95875c0c MD5sum: a49ac0870a036251c1b790da060dfd15 Description: SecuBox External Media Manager Port Debian bookworm du module luci-app-media de SecuBox OpenWrt. Provides FastAPI backend on /api/v1/media/ via Unix socket. Package: secubox-mediaflow Version: 2.4.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 183 Depends: secubox-core (>= 1.4.3), secubox-dpi Recommends: ffmpeg, yt-dlp, curl Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mediaflow/secubox-mediaflow_2.4.4-1~bookworm1_all.deb Size: 37120 SHA256: 7e77181cf2e25321880ce8b8931f496b6e62bdbbc09426d91bbea50dd3287b37 SHA1: 85d98d794fd3ead78df46ababa4e0d0401db0b91 MD5sum: fd9fbc5e3131b556a71ea2775ee4f2ce Description: SecuBox Media Flow Détection trafic streaming et VoIP : Netflix, YouTube, Zoom, Spotify, qualité d'expérience. . Port Debian bookworm de luci-app-media-flow (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mesh Version: 2.0.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 78 Depends: secubox-core (>= 1.0), python3 (>= 3.11), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jinja2, python3-pydantic, iw, hostapd, wpasupplicant, wireless-regdb, adduser Breaks: secubox-mesh (<< 2.0.0~), secubox-yggdrasil Replaces: secubox-mesh (<< 2.0.0~), secubox-yggdrasil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mesh/secubox-mesh_2.0.7-1~bookworm1_all.deb Size: 18668 SHA256: 80b42a2ae6b874b213fece341a022395fa4039f43d22c0191cc9ae83ef9d9350 SHA1: 52604005218d934aacab49eb4167e2ee01f4ba90 MD5sum: bb9a1879e714bd529a5f10c4ef890a6f Description: SecuBox-DEB MESH module (802.11s + Passpoint AP, OPAD) Plan de contrôle FastAPI pour le module mesh : 802.11s/HWMP backhaul (ath10k_pci QCA9880 par défaut), AP Passpoint HS2.0 via hostapd, et client mesh USB (mt76x2u / ath9k_htc). Verrou régulatoire FR au postinst, posture OPAD passive par défaut. . Référence spec : CM-MESH-MPCIE-2026-06 v0.2.1. Package: secubox-meshname Version: 1.1.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 64 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-meshname/secubox-meshname_1.1.4-1~bookworm1_all.deb Size: 12686 SHA256: cf88eab51907f8cf0837e22ac03213ffb336a72d1555cb8b85fd2dedbc29ae01 SHA1: b036fe6c121f8c9d1ef5fe374273a32585f71a44 MD5sum: de08e6ceb22d9b54c428cdcb2e5a095a Description: SecuBox Meshname — noms du réseau maillé (mDNS + DNS local) Résolution de noms du maillage : domaine local (mesh.local par défaut) servi par dnsmasq, publication et découverte mDNS par Avahi, table de correspondances nom → adresse gérée depuis le tableau de bord. . Ne dépend d'aucun overlay : Yggdrasil a été décommissionné (#1703). Package: secubox-meshtastic Version: 0.5.2-1~bookworm1 Architecture: all Maintainer: Gérald Kerma Installed-Size: 153 Depends: python3 (>= 3.11), python3-fastapi, python3-uvicorn, python3-pydantic, python3-paho-mqtt, secubox-core, sudo Recommends: mosquitto, python3-segno Homepage: https://secubox.in Priority: optional Section: net Filename: pool/main/s/secubox-meshtastic/secubox-meshtastic_0.5.2-1~bookworm1_all.deb Size: 37098 SHA256: 61351c86ce1d17ce22fbb01a034b7a7995359afcf0eca41e9f42b6bb1b6faad2 SHA1: 085b814be7155fa02ba63e19dc843d40c046b182 MD5sum: 893dc590b9d266ede1bcdaa4a002314a Description: SecuBox-Deb Meshtastic LoRa node integration Native Python module for managing Meshtastic LoRa mesh nodes: radio/cache/ passive-listener/MQTT-bridge daemon (secubox-meshtasticd), privileged CLI (secubox-meshtasticctl) and webui panel (/meshtastic/, own dedicated socket — never served by the aggregator). . The upstream `meshtastic` Python library (device/BLE/serial protocol) is NOT packaged for Debian and is intentionally NOT a dependency here: the daemon runs fine with `radio: absent` (cache/passive/bridge only) without it, and it is only required once a physical Meshtastic device is attached. See README.md for the pip/venv install note. Package: secubox-messagerie Version: 0.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 54 Depends: secubox-core (>= 1.5.25), python3, python3-fastapi, python3-httpx, secubox-aggregator Recommends: secubox-webos (>= 1.0.343), secubox-sbxid Priority: optional Section: admin Filename: pool/main/s/secubox-messagerie/secubox-messagerie_0.2.2-1~bookworm1_all.deb Size: 15864 SHA256: ddeddda7221ba343749e1e9cbbfea34c979512ce7bae3cd0575d06a085a90d19 SHA1: c8e8102f0d8f8aa7733cde251e3207a7cd9561c2 MD5sum: c0b03fdf4339eef858204aea02a60410 Description: SecuBox — messagerie de la box (mur public et messages privés) Un mur public et des messages privés, pour les personnes (identité SBX OS) comme pour les visiteurs (un pseudo). On écrit à une personne ou à tous, on répond en privé ou publiquement. Le chat de la radio y est centralisé et y répondre le republie dans la radio. . Servi par le Hall : https://hall./messagerie/ Package: secubox-metablogizer Version: 1.8.30-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 602 Depends: secubox-core (>= 1.5.40~), python3, nginx, python3-jsonschema Recommends: chromium Priority: optional Section: admin Filename: pool/main/s/secubox-metablogizer/secubox-metablogizer_1.8.30-1~bookworm1_all.deb Size: 143274 SHA256: 896980ea7761191bdff4b0d7c443b22235be644036468507928c23bab58c5bff SHA1: 9c181f4e4f3dcd317e1f03046c52c1cf07c17457 MD5sum: e4d485552bc0a3d4e94c50c451dfab1e Description: SecuBox MetaBlogizer - Static Site Publisher Static site publishing and management for SecuBox. Package: secubox-metacatalog Version: 1.2.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 103 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-metacatalog/secubox-metacatalog_1.2.4-1~bookworm1_all.deb Size: 18956 SHA256: 642c31f61f46b8c1ba162254a80d5d592d02c002aaae4ccdde621df6caa45848 SHA1: 19da17cead4c5bc27d73df070c40c7df6a736024 MD5sum: bc50ad15cee18cf962c7518048aebfb7 Description: SecuBox Metacatalog - Service catalog and registry SecuBox module for discovering and monitoring installed SecuBox services. Provides a centralized view of all services, their health status, dependencies, and API endpoints. . Features: - Catalog of installed SecuBox services - Service health status tracking - Dependency mapping between services - API endpoint documentation - Service metadata (version, ports, sockets) - P31 Phosphor light theme frontend . Part of the SecuBox security appliance suite. Package: secubox-metanews Version: 0.1.50-1~bookworm1 Architecture: amd64 Maintainer: Gerald Kerma Installed-Size: 9664 Depends: adduser, secubox-sbxui Recommends: secubox-bbs Homepage: https://secubox.in Priority: optional Section: news Filename: pool/main/s/secubox-metanews/secubox-metanews_0.1.50-1~bookworm1_amd64.deb Size: 3690946 SHA256: 97a13482c2fe50e3dbced3cee61cd059da073cd6648cbe70979eebaf53fdad5f SHA1: fa8528ede80f9a79ac2d55d17ddbdfec071f3011 MD5sum: 28abfa232aa3a996ea8ae5c292b91423 Description: SecuBox — radar d'actualite multi-sources (MetaNews) MetaNews agrege des flux RSS/Atom, detecte quand plusieurs sources parlent du meme evenement et les regroupe en UN sujet : un resume court et factuel, les liens vers les sources originales, puis une discussion dans le BBS SecuBox. . Ce n'est pas un portail de presse ni une recopie d'articles : c'est un radar. Plusieurs sources -> un evenement -> un resume -> les liens -> une discussion. . Regroupement heuristique local (sans LLM obligatoire), agregation locale, pas de traqueur tiers : les appels externes se limitent a lire les flux declares. Package: secubox-metrics Version: 1.28.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 703 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-maxminddb | python3-pip, python3-geoip2 | python3-pip, python3-cryptography, nftables, python3-psutil, secubox-haproxy, lxc, lxc-templates, debootstrap, python3-toml, openssl, curl, jq Recommends: geoipupdate, python3-fpdf2 | python3-fpdf (>= 2), python3-matplotlib, python3-weasyprint | wkhtmltopdf, glances Conflicts: secubox-metalogizer Breaks: secubox-glances (<< 1.1.4~), secubox-grafana (<< 1.0.18~), secubox-reporter (<< 1.2.4~) Replaces: secubox-glances (<< 1.1.4~), secubox-grafana (<< 1.0.18~), secubox-metalogizer, secubox-reporter (<< 1.2.4~) Provides: secubox-metalogizer Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-metrics/secubox-metrics_1.28.0-1~bookworm1_all.deb Size: 169286 SHA256: cd4f789f9921d1ad475d064325ec8b303cc7cb14ae84372a6867716136a5bb28 SHA1: 6439a1a0a7cd654d886a0cf5c2dc644ab3293884 MD5sum: 00fddff5630943138983a1aeb228cb3d Description: SecuBox Metrics Dashboard Real-time system metrics dashboard with caching. Provides overview stats, WAF metrics, connection counts, and service status monitoring. Package: secubox-minimal Version: 0.7.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-core (>= 1.0), secubox-aggregator, secubox-system (>= 1.0), secubox-hardening (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-auth (>= 1.4.0), secubox-dpi (>= 1.7.0), secubox-ndpid-engine (>= 1.7.2), secubox-dns-guard, secubox-ad-guard (>= 1.6.2), secubox-nac (>= 1.0), secubox-freebox, secubox-ipv6guard, secubox-webfilter (>= 0.2.1), secubox-autoload-agent, secubox-wireguard (>= 1.3.0), secubox-courbes (>= 0.1.0) Conflicts: secubox-metrics, secubox-toolbox, secubox-waf, secubox-waf-ng, secubox-webos Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-minimal/secubox-minimal_0.7.0-1~bookworm1_all.deb Size: 2880 SHA256: c57022b92550f5c4ac25a43bd3c80588589c21db0c5278c616d148c4723f590e SHA1: d7147fd1f116ba857c2159d69876b059ae3907e8 MD5sum: ee29d3891f233f8313e8bc521035153f Description: SecuBox Minimal — DPI, garde DNS, filtre de publicites, NAC, Freebox, WireGuard, Courbes et Glances Profil minimal, pour une petite carte (ESPRESSObin) : inspection des paquets (DPI), detection d'anomalies DNS (dns-guard), filtrage des publicites et traqueurs (ad-guard), controle d'acces reseau (NAC), module Freebox, garde IPv6 et filtrage web, avec la seule interface d'administration. WireGuard offre la sortie Internet a des clients distants. Ni WAF (il reste sur l'infrastructure), ni profil ISP, ni Hall, ni metrics (le module « visites »), ni service heberge. Les modules exclus sont en Conflicts : un Recommends de secubox-auth ou de secubox-freebox ramenait le Hall dans l'image. Ni secubox-toolbox ni R-level (ad-guard ne l'exige plus), ni le moteur d'interception secubox-toolbox-ng. Package: secubox-mirror Version: 1.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 78 Depends: secubox-core (>= 1.0), nginx, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, curl Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mirror/secubox-mirror_1.2.1-1~bookworm1_all.deb Size: 14094 SHA256: a1e2a2788cc405227f58430c81a39d1b9b3328e062bea53a81f5a00d20cabba4 SHA1: 3a513e6003232f9b5b741b9948529c30eb98d51b MD5sum: 4c22357e4fbb1be8b2e5f2e0f97bc67e Description: SecuBox Mirror/CDN Cache Local mirror and CDN caching service for APT repositories and other content. Features nginx caching proxy, mirror sync status, cache statistics, and bandwidth optimization through edge caching. . Part of SecuBox-DEB security appliance (CyberMind.fr). Package: secubox-modem Version: 1.2.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 178 Depends: secubox-core (>= 1.4.0), modemmanager, libqmi-utils, libmbim-utils, picocom, python3-serial Recommends: usb-modeswitch, usb-modeswitch-data Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-modem/secubox-modem_1.2.4-1~bookworm1_all.deb Size: 31638 SHA256: 046ae8c1420a606d3a8d918f945779668d377cb726ebd61a2317d67d5943bc8b SHA1: e000f477ca526bfff4a8bb9087d6c74c656f16f1 MD5sum: 0a6d6d1cb97c593722495bd4b3099c18 Description: SecuBox LTE/5G Modem Management Quectel LTE/5G modem management interface for SecuBox. . Features: - Auto-detect any plugged Quectel modem (EC25, RM500Q, etc.) - Data connection management (APN, connect/disconnect) - SMS send/receive via WebUI - AT command console (interactive WebSocket terminal) - Signal strength monitoring with real-time graphs - Firmware/device info display - Hybrid approach: ModemManager + qmicli . Port Debian bookworm de luci-app-modem (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mqtt Version: 2.4.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 78 Depends: secubox-core (>= 1.4.0), lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mqtt/secubox-mqtt_2.4.6-1~bookworm1_all.deb Size: 18750 SHA256: 2dc69d087b156141e445f7e884b0214d0cfc6068bb40552776e57752be5546be SHA1: e4519e0b36afc43f29776cb5febfe34ec3973f25 MD5sum: 897c72c62b48e43ba1a1bd23cc4e5c15 Description: SecuBox MQTT — Mosquitto broker (WALL layer) Hosts a hardened Mosquitto 2.x broker in a Debian bookworm LXC at 10.100.0.110 on br-lxc. . No anonymous access (allow_anonymous false). Per-service authentication via mosquitto_passwd-managed credentials and per-topic ACL — z2m, sentinelle, domoticz and the SecuBox internal API each get their own user with a randomly-generated password stored under /etc/secubox/secrets/mqtt-* (mode 0600, owner root:secubox). . Host-side control plane: FastAPI on Unix socket /run/secubox/mqtt.sock + nginx route /api/v1/mqtt/ on the canonical hub vhost. CTL grammar: mqttctl components / status / access + install / reload + topic / client / acl / user nouns. Package: secubox-nac Version: 3.9.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 562 Depends: secubox-core (>= 1.4.3), dnsmasq, nftables, nginx, ieee-data Breaks: secubox-device-intel (<< 1.3.2~), secubox-hub (<< 1.9.18~), secubox-iot-guard (<< 1.1.5~), secubox-mac-guard (<< 1.2.3~) Replaces: secubox-hub (<< 1.9.18~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-nac/secubox-nac_3.9.2-1~bookworm1_all.deb Size: 130514 SHA256: 517c1a76dbf47cf4b9c1b685fba5735f26fd3026176694746f770ef540014670 SHA1: af1eca3549e9da76a0e5cff17318ca1b7a20744b MD5sum: 291d567d0e95417fea3745ca5b5e3dc4 Description: SecuBox NAC / Client Guardian Contrôle d'accès réseau : zones nftables, portail captif, contrôle parental, quarantaine. . Port Debian bookworm de luci-app-client-guardian (SecuBox OpenWrt / CyberMind.fr). Package: secubox-ndpid Version: 1.1.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 102 Depends: secubox-core (>= 1.4.0), python3-zmq Recommends: secubox-dpi, secubox-ndpid-engine | ndpid | ndpi-reader Priority: optional Section: admin Filename: pool/main/s/secubox-ndpid/secubox-ndpid_1.1.3-1~bookworm1_all.deb Size: 18694 SHA256: 661e2cf5da17074dc0366577878639cf71c097232296b75a71ba00d55f908678 SHA1: 93846f13e1f36007d60bdcca3697efda4fcd2928 MD5sum: 463801baee6c263f419a61e45235c98f Description: SecuBox nDPId — DPI dashboard with JA3/JA4 TLS fingerprinting nDPId-backed deep packet inspection dashboard: JA3/JA3S/JA4 TLS fingerprinting, protocol detection, application classification, risk scoring, and SQLite flow database. . Distinct from sibling packages in the DPI cluster: - secubox-dpi — DPI-backed analytics layer (top apps, bandwidth, mirred setup) — see #382 for the layered model. - secubox-mediaflow — streaming/VoIP classifier consuming DPI. Package: secubox-ndpid-engine Version: 1.7.0-1~bookworm1 Architecture: amd64 Maintainer: Gérald Kerma Installed-Size: 3559 Depends: libc6 (>= 2.34), libpcap0.8 (>= 1.5.1), adduser Provides: ndpid Priority: optional Section: net Filename: pool/main/s/secubox-ndpid-engine/secubox-ndpid-engine_1.7.0-1~bookworm1_amd64.deb Size: 671840 SHA256: 72aa013106425c1fdf596720d0388de512fafc8013a74adbb1d1c395522fd201 SHA1: 9f8407b24de45693b9ccca7fa755747cf4a56451 MD5sum: 2770bb0ae2acf2d429eded85096f2302 Description: SecuBox — moteur DPI nDPId + nDPIsrvd (nDPI 6.x statique) Les deux démons qui PRODUISENT les événements de flux que sbxdpi agrège : nDPId capture et classe, nDPIsrvd distribue. . Sans eux, sbxdpi servait un instantané gelé — connected:false, total_flows figé, hosts et fingerprints à zéro — parce que son socket distributeur n'existait pas. L'alternative « ndpi-reader » était satisfaite par ndpiReader, l'outil de démonstration de libndpi, qui écrit du CSV dans un fichier et ne parle à personne. . nDPI 6.x est liée STATIQUEMENT : nDPId exige au moins la 5.0.0 et Debian fournit la 4.2. Remplacer la bibliothèque système casserait tout ce qui s'appuie dessus ; l'embarquer ne coûte que 4 Mo. Package: secubox-netboot Version: 0.4.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 152 Depends: secubox-core (>= 1.0), python3, u-boot-tools, mtd-utils, openssl Recommends: tftpd-hpa, isc-dhcp-server Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-netboot/secubox-netboot_0.4.4-1~bookworm1_all.deb Size: 36574 SHA256: b06fc936de9a76e43efc07f4866a6cbda3c6e8a24c3af12d432fd3aa2fbe0f87 SHA1: 7f062c57c53da61b2568cdd52630fee6cfc09d4c MD5sum: 2c32470b5b4db34ce022a8cae7c03dfe Description: SecuBox provisioning réseau + overlay U-Boot (#737) Service d'installation/boot réseau pour les boards Marvell Armada (MOCHAbin, ESPRESSObin). Fournit un overlay U-Boot chainloadé (HTTP + FIT-signature) sans reflasher l'usine, avec rollback automatique anti-brick (bootcount/altbootcmd), des triggers de cycle de vie et une interface de suivi/contrôle. . Phase 2 : overlay 2e U-Boot. Auto-flash A/B = Phase 3. Package: secubox-netdiag Version: 1.3.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 116 Depends: secubox-core (>= 1.0), iputils-ping, traceroute, dnsutils, whois, mtr-tiny, nmap, net-tools, iproute2 Recommends: iperf3 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netdiag/secubox-netdiag_1.3.0-1~bookworm1_all.deb Size: 21302 SHA256: 97e66bff1e7bce5fdbbbf003a616475edc3f1cc2c47b9a95c95c75bae49d4e2e SHA1: 1e2ab7c62df0ded4ec6643a5e8dcc88c09e4daec MD5sum: 9e8438d7d222824c2295f61ba2d6dbf3 Description: SecuBox Network Diagnostics — Troubleshooting Tools Network diagnostics module for SecuBox providing various troubleshooting tools including ping, traceroute, DNS lookup, WHOIS, MTR, port scanning, and network interface analysis. . Features: - Ping with RTT statistics - Traceroute with hop analysis - DNS lookup (A, AAAA, MX, NS, TXT, CNAME, SOA) - WHOIS domain/IP lookup - MTR (My Traceroute) - Port scanning (local network only) - Network interface listing - Routing table display - ARP table - Active connections (netstat-like) - Bandwidth testing (iperf3) . Part of SecuBox Debian edition. Package: secubox-netmodes Version: 1.2.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 302 Depends: secubox-core (>= 1.0), netplan.io, iproute2, bridge-utils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netmodes/secubox-netmodes_1.2.4-1~bookworm1_all.deb Size: 50700 SHA256: 840d9795da6d13e10d1f250de964d985f8397d03575047822e991d0feeec362b SHA1: d792d0e9f02ada1a6b510fb245ca74d058e8f10c MD5sum: cfc31d75dde6bfed51ff7a16ff17e67c Description: SecuBox Network Modes Commutation de modes réseau : router, sniffer-inline, sniffer-passif, AP, relay. Templates netplan par mode. . Port Debian bookworm de luci-app-network-modes (SecuBox OpenWrt / CyberMind.fr). Package: secubox-nettweak Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 90 Depends: secubox-core (>= 1.4.0), python3-fastapi | python3-pip, procps Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-nettweak/secubox-nettweak_1.2.2-1~bookworm1_all.deb Size: 16300 SHA256: a49a82eb798b9ccad463990a3357101dca20218db7217f2ec8cedeb383106df8 SHA1: 612db389457f2ae5ffde368bb138c8b4c48c7d88 MD5sum: 5bcc98641a78edfcc0a36bd7b74c152c Description: SecuBox Network Tuning Dashboard Network tuning module for sysctl and TCP/IP stack optimization. Provides web UI and API for managing kernel network parameters. . Features: tuning profiles (default, performance, low-latency, security), TCP settings, network stack settings, persistent configuration. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-network-anomaly Version: 1.1.3-1~bookworm2 Architecture: all Maintainer: Gerald KERMA Installed-Size: 59 Depends: secubox-core (>= 1.0.0) Recommends: dnsmasq Priority: optional Section: admin Filename: pool/main/s/secubox-network-anomaly/secubox-network-anomaly_1.1.3-1~bookworm2_all.deb Size: 12628 SHA256: af3cd0dd7e042617fef656e2eaab1cc85767db37d670b855c076380784b7f2ef SHA1: ea2b7842390021e88eec971e8b2ae6844c0ede7a MD5sum: 279b977bf04158f87b2296f3bd0a0caf Description: SecuBox Network Anomaly — DNS-log anomaly detection Reads /var/log/dnsmasq.log and flags lookups that deviate from baseline patterns (volume, novelty, NXDOMAIN bursts, suspicious TLDs). . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella dashboard (Suricata + WAF alerts). - secubox-threat-analyst — AI agent that writes detection scenarios. - secubox-cve-triage — CVE vulnerability triage. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables-driven IP blocklist enforcement. . For DNS-layer blocking (rather than detection only), see secubox-dns-guard or secubox-vortex-dns. Package: secubox-nextcloud Version: 1.8.10-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 179 Depends: secubox-core (>= 1.5.41~) Priority: optional Section: admin Filename: pool/main/s/secubox-nextcloud/secubox-nextcloud_1.8.10-1~bookworm1_all.deb Size: 48148 SHA256: ee06bfd9b09fe7c6fc44a2393f0079e203600e32d2d97943e0daf1f33e7a7f97 SHA1: 7902e4001c723fc0a064538e6a4f7290688c6833 MD5sum: 1d1fdb421aa194dce4efa9a3752d00a7 Description: SecuBox Nextcloud — self-hosted file sync + collaboration (LXC) Manages a Nextcloud server (file sync, calendar, contacts, collaborative editing) running in its own LXC container. SecuBox wires up nginx vhost, ACME TLS, backup integration, and a web management dashboard around the upstream Nextcloud install. Package: secubox-oidc Version: 0.1.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 42 Depends: secubox-core (>= 1.5.39~), secubox-aggregator, python3, python3-jwt, python3-cryptography, python3-fastapi | python3-pip Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-oidc/secubox-oidc_0.1.2-1~bookworm1_all.deb Size: 10798 SHA256: 23d4b14eb5dbc602ef2941d5a663e33b5ab1de50af570525cf0c70975add2b62 SHA1: 7a048ff3d2c27dc7f786cc020f7c72efb3bd2be5 MD5sum: 91364c8c6be80c5d8299db5912ccc921 Description: SecuBox OIDC — fournisseur OpenID Connect adossé à la session SecuBox Un service de la box (PhotoPrism, Mastodon…) ouvre le compte d'une personne d'après sa session SecuBox, sans mot de passe. Flux code + PKCE, id_token RS256, codes à usage unique ; seule une session qui désigne une personne authentifie. Clients enregistrés par secubox-oidcctl. Package: secubox-openpgp Version: 0.3.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 106 Depends: python3, python3-fastapi, python3-uvicorn, gnupg, gpg-agent, secubox-core (>= 1.5.41~), secubox-annuaire (>= 0.10.10~), adduser, util-linux Priority: optional Section: net Filename: pool/main/s/secubox-openpgp/secubox-openpgp_0.3.0-1~bookworm1_all.deb Size: 25736 SHA256: 2ac8aacc382ac1f216016db8733052f2737e83bae689ac7f84484bdb4f525d89 SHA1: 562c34ea725c85b2bc20b244bc5df050735e6644 MD5sum: 2c48c0ae3647aac5a43d1f83777969a2 Description: SecuBox OpenPGP — clé de box liée à l'identité canonique (phase 1) Chaque box reçoit une clé OpenPGP (ed25519 signature + cv25519 chiffrement), distincte de node.key et LIÉE à son did par une entrée d'annuaire signée par node.key : aucune identité de plus. Les box liées échangent des enveloppes signées et chiffrées sur le maillage WireGuard ; la clé privée ne quitte jamais le démon, et aucune route ne signe ni ne déchiffre des octets arbitraires. Package: secubox-p2p Version: 1.11.18-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 410 Depends: secubox-core (>= 1.4.3), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, avahi-daemon, avahi-utils, wireguard-tools, secubox-annuaire, python3-aiohttp Breaks: secubox-master-link (<< 1.1) Replaces: secubox-master-link (<< 1.1) Priority: optional Section: admin Filename: pool/main/s/secubox-p2p/secubox-p2p_1.11.18-1~bookworm1_all.deb Size: 94074 SHA256: d591ad6e9386d7bbb0582fefe875852db5bf09c9a9039b4dad9a6b3bcdb52901 SHA1: fdbcee422655f52ba7c9aa2551d39bdc50e06638 MD5sum: de3cf1e7b6412c86382a230ca84e4a0c Description: SecuBox P2P - Peer-to-Peer Network Hub P2P network management with peers, services, mesh visualization, and threat intel. Includes master-link enrollment (token issuance, peer approval, join workflow) served at /master-link/ and /api/v1/p2p/master-link/*. . As of 1.7, this package absorbs the master-link role that was previously shipped as a separate (but never nginx-reachable) secubox-master-link package. That package was decommissioned on 2026-09-15 (#1362): it had been reduced to a documentation directory owning no code at all. The master-link role is unaffected — it lives here. Package: secubox-peertube Version: 1.5.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 262 Depends: secubox-core (>= 1.5.39~), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl Recommends: yt-dlp Priority: optional Section: net Filename: pool/main/s/secubox-peertube/secubox-peertube_1.5.7-1~bookworm1_all.deb Size: 57704 SHA256: bd93604462ac95dbdfaab8ce020e2d9250fa5a89be20f78c651793ba64b7c970 SHA1: 6de4b7b77018cd26f997cedaa2a59ca75174c1bd MD5sum: 02b71dd2adf98e14ba4a19145c7bbcf5 Description: SecuBox PeerTube — federated video platform (native LXC) Dashboard + FastAPI backend for a PeerTube video-hosting instance installed NATIVELY inside a dedicated Debian LXC (its own peertube.service: Node 22 + PostgreSQL 15 + Redis + ffmpeg). The API daemon on the host is lightweight (always reachable to serve the dashboard); `peertubectl install` provisions the LXC and the PeerTube stack on demand. . PeerTube runs native-in-LXC rather than Docker/Podman: an unprivileged LXC cannot reliably bring up a podman CNI bridge on the Marvell arm64 boards, so the native systemd-managed install is the supported path. . Features: - LXC lifecycle via peertubectl (install, status, start, stop, restart, logs) - Public nginx vhost (:9080 → LXC :9000) bypassing the WAF (gitea pattern) - Video and playlist import (single URL or full playlist, sequential, resumable) - Video and channel management - User creation and role assignment (admin/moderator/user) - Federation (ActivityPub) — follow/followers - Transcoding settings (HLS, WebTorrent, resolutions) - Plugin installation from NPM - Storage usage monitoring . Distinct from sibling federated/streaming/media SecuBox packages: - secubox-matrix — Matrix Synapse (chat federation, not video). - secubox-jitsi — Jitsi Meet (real-time conferencing, not VOD). - secubox-jellyfin — Jellyfin (local media library, not federated). . Reachable at /peertube/ (frontend) and /api/v1/peertube/* (API) via Unix socket /run/secubox/peertube.sock. Package: secubox-photoprism Version: 1.3.11-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 154 Depends: secubox-core (>= 1.5.39~), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl, python3-yaml Recommends: secubox-oidc Priority: optional Section: net Filename: pool/main/s/secubox-photoprism/secubox-photoprism_1.3.11-1~bookworm1_all.deb Size: 35778 SHA256: 40925952af49efb3bc150c8f80ec9839359b70e23d5906a394af22f4bba442ce SHA1: 03ff54a0ecdaa5dfdcaa9919e7fe34ad42c367b3 MD5sum: 0734dbef0e5a53c44d94040a2535cd8d Description: PhotoPrism photo management for SecuBox (native LXC) SecuBox module for a PhotoPrism photo server installed natively (official build from dl.photoprism.app) inside a dedicated Debian LXC, running as its own unprivileged user. No podman, no docker. `photoprismctl install` provisions the LXC on demand; the host dashboard daemon stays lightweight and always reachable. . Photos live on /data/shared/photos, also mounted by Nextcloud as the "PhotoLibrary" external storage — phone → Nextcloud → /data/shared/photos → PhotoPrism originals (indexed by a 15-min timer, since PhotoPrism's built-in auto-index only fires for its own UI uploads). . Features: - LXC lifecycle via photoprismctl (install/update/status/start/stop/restart/index/import) - Public nginx vhost (:9080 → LXC :2342) behind sbxwaf inspection - AI-powered face recognition, library indexing, album management - Import workflow + Nextcloud photo integration - CRT-light P31 phosphor theme . Provides FastAPI backend on /api/v1/photoprism/ via Unix socket. Package: secubox-picobrew Version: 2.0.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 62 Depends: secubox-core (>= 1.4.0), python3-uvicorn | python3-pip, python3-fastapi | python3-pip, lxc, debootstrap, sudo Recommends: unbound Priority: optional Section: net Filename: pool/main/s/secubox-picobrew/secubox-picobrew_2.0.5-1~bookworm1_all.deb Size: 15520 SHA256: a1a6667888e3144e253707e2076e7386ff781fbcdd8d1971192c8d8f95bdc7b5 SHA1: 0a54f71d02ea61d710362e5b2b3d99794cf9957c MD5sum: 249f6087003ad9f57cb41f7ec42b713c Description: PicoBrew appliance host (LXC) for SecuBox — phase 1 Ports "secubox-app-picobrew" from OpenWrt: hosts an LXC container running the upstream picobrew_pico server, giving a second life to PicoBrew appliances (Pico S/C/Pro, Z Series, Zymatic) whose manufacturer cloud has been shut down since 2020. . Phase 1 scope: - picobrewctl: root-audited lifecycle (install/start/stop/status/update/logs) for the LXC, delegated to via sudo from an unprivileged FastAPI panel - Local DNS rewrite of picobrew.com to the LXC (device otherwise unreachable) - TLS termination in front of the picobrew_pico server for the Z series - Admin panel exposing container state and start/stop controls . Fermentation/temperature tracking (sensors, profiles, recipes, Tilt/ iSpindel, alerts) is out of scope for this phase and will ship in a later phase; the existing sensor controller code is preserved untouched in lib/stillwatch/ for that purpose. Package: secubox-podcaster Version: 1.2.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 202 Depends: secubox-core (>= 1.5.39~), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-mutagen, python3-pil Recommends: yt-dlp, ffmpeg Priority: optional Section: sound Filename: pool/main/s/secubox-podcaster/secubox-podcaster_1.2.6-1~bookworm1_all.deb Size: 62172 SHA256: c6782455586b2334b4b45e62381c4c9054a77b7158d2b53d9b745ecc83d6511b SHA1: 5083d55d26320cb12fcf03d058579b897f94743d MD5sum: e9cafbbc3df12ca0eb78a331d4396f3f Description: Modern podcast manager for SecuBox Subscribe to podcast feeds, download episodes locally, and re-publish a shareable RSS feed (LAN by default, public via HAProxy / secubox-exposure). FastAPI backend on /api/v1/podcaster/ over a Unix socket; SQLite store; an asyncio download queue. Feed parsing is pure stdlib (no feedparser dep). . Features: - Subscribe by RSS URL or OPML import - Local download queue with per-episode progress - Generated shareable RSS of the local library (relay/share to the web) - In-UI service status + TOML config - Modern C3BOX cyberpunk WebUI with inline player Package: secubox-portal Version: 2.3.8-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 111 Depends: secubox-core (>= 1.4.3), python3-uvicorn | python3-pip, python3-jwt Breaks: secubox-hub (<< 1.9.6~) Replaces: secubox-hub (<< 1.9.6~) Priority: optional Section: admin Filename: pool/main/s/secubox-portal/secubox-portal_2.3.8-1~bookworm1_all.deb Size: 26664 SHA256: fa11fd682e9f63f5a1c622908e4f01f794f67e02a6456a1b80a7f688a5b30e76 SHA1: 94654e18ee9b584b9760cd10451a666def246922 MD5sum: 33c196adf849b0570355ae76e9d13a4b Description: SecuBox Portal - Web Authentication Centralized web authentication for all SecuBox modules. . Features: - JWT token-based authentication - Session management - Login/logout endpoints - User management - Password recovery Package: secubox-premier-pas Version: 0.4.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 198 Depends: python3 (>= 3.11), secubox-core, systemd-timesyncd | time-daemon Recommends: secubox-users, secubox-profiles, secubox-p2p Priority: optional Section: admin Filename: pool/main/s/secubox-premier-pas/secubox-premier-pas_0.4.9-1~bookworm1_all.deb Size: 49988 SHA256: 580dc75ea90a52ffa3b92bedb98d2bd47d5cfc34e17c7dda4f1e2d6196d237b8 SHA1: 1a448a18462c80483041f3ad11a5db46c9e5e911 MD5sum: c151b3694f2d7b5016368a251a10d93c Description: SecuBox Premier Pas — first-boot wizard engine and silent profile One engine, one profile (profil.toml), four faces: kiosk, console, master panel and silent. premier-pasctl validates a profile step by step (name, clock, admin, network and domain, services, mesh, updates), shows the exact plan, and applies it by driving the existing SecuBox tools (hostnamectl, timedatectl, secubox-users engine, secubox-net-detect, secubox-profilectl, sbx-mesh-join). An incomplete profile is never half-applied: the wizard resumes at the missing step. Never stores a plaintext password. . Also ships secubox-majauto: nightly unattended upgrade of the SecuBox packages only, from the signed apt.secubox.in repository. Package: secubox-profil-complet Source: secubox-profils Version: 1.0.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-profil-defense, secubox-profil-media, secubox-profil-provision, secubox-profil-reseau, secubox-profil-socle Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-complet_1.0.9-1~bookworm1_all.deb Size: 1912 SHA256: 99c300b017d23540d2b4b41bd4678c47ffedd606045c6946f676841a812ea047 SHA1: cb65dde1c4796b7fa90a4d94710cd71edcf7580a MD5sum: b832121ad0d367b30c8b6ce9b7accbec Description: SecuBox — profil complet : tous les profils Le parc entier. Sur une machine a memoire etroite, preferer les profils separes : chaque module absent est de la memoire et une surface d'attaque en moins. Package: secubox-profil-defense Source: secubox-profils Version: 1.0.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-profil-socle, secubox-ad-guard, secubox-antirootkit, secubox-cve-triage, secubox-cyberfeed, secubox-dns-guard, secubox-exposure, secubox-interceptor, secubox-ipblock, secubox-ksm, secubox-mac-guard, secubox-network-anomaly, secubox-security-posture, secubox-soc, secubox-threat-analyst, secubox-threatmesh, secubox-threats, secubox-toolbox, secubox-vortex-firewall, secubox-waf, secubox-watchdog, secubox-wazuh Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-defense_1.0.9-1~bookworm1_all.deb Size: 2200 SHA256: c8b4a051b6819e82f1aab94481a89d9d88a9f3d7045533940990a8477fab12c7 SHA1: fe35b5a3c433801c7214a6c17e57d133b027fbe5 MD5sum: 0e5c050ddaeddae4a50601ab61c1b938 Description: SecuBox — profil « defense » : La couche de defense : WAF, listes de blocage, garde DNS Ce qui protege la boite et le reseau qu'elle sert. C'est le profil qu'on garde quand on ne garde rien d'autre. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profil-media Source: secubox-profils Version: 1.0.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-profil-socle, secubox-ai-gateway, secubox-ai-insights, secubox-bbs, secubox-billets, secubox-c3box, secubox-config-advisor, secubox-dpi, secubox-glances, secubox-grafana, secubox-jellyfin, secubox-localrecall, secubox-mcp-server, secubox-metablogizer, secubox-metacatalog, secubox-metrics, secubox-radio, secubox-reporter, secubox-roadmap, secubox-saas-relay, secubox-sentinelle-gsm, secubox-ytsas Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-media_1.0.9-1~bookworm1_all.deb Size: 2164 SHA256: a62e29c7ef5bf3988a44ee83bc31433179ff7ee8d1945cbf96f0f85ebb610a7e SHA1: 026340005dd255ecee17022146589e7c942f4a13 MD5sum: ce2ba46db2b648a6a9c48739b20c59a2 Description: SecuBox — profil « media » : Contenu, medias et publication Ce que les membres consultent et publient : lecture, forums, billets, tableaux de bord. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profil-provision Source: secubox-profils Version: 1.0.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-profil-socle, secubox-backup, secubox-cloner, secubox-droplet, secubox-eye-remote, secubox-mediaflow, secubox-netboot, secubox-publish Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-provision_1.0.9-1~bookworm1_all.deb Size: 2054 SHA256: e9807a06b076b9388e6d38c4cd7677314ddf7c71af31359885b46042b9d223b8 SHA1: d0f23baf8eefea7b5392390841c74b4a3de5e06e MD5sum: 46dfce934789ee456d7faac6210b5322 Description: SecuBox — profil « provision » : Provisionnement, sauvegarde et deploiement Ce qui sert a fabriquer, sauvegarder et deployer une boite. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profil-reseau Source: secubox-profils Version: 1.0.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-profil-socle, secubox-annuaire, secubox-assist, secubox-avatar, secubox-cdn, secubox-cookies, secubox-dns, secubox-dns-provider, secubox-gitea, secubox-haproxy, secubox-jabber, secubox-jitsi, secubox-lyrion, secubox-mail, secubox-matrix, secubox-mesh, secubox-meshname, secubox-meshtastic, secubox-mirror, secubox-modem, secubox-mqtt, secubox-netmodes, secubox-nettweak, secubox-nextcloud, secubox-p2p, secubox-peertube, secubox-photoprism, secubox-picobrew, secubox-podcaster, secubox-proxypac, secubox-qos, secubox-reality, secubox-streamforge, secubox-streamlit, secubox-tor, secubox-torrent, secubox-traffic, secubox-turn, secubox-vhost, secubox-vortex-dns, secubox-webmail, secubox-wireguard, secubox-yacy, secubox-zigbee Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-reseau_1.0.9-1~bookworm1_all.deb Size: 2262 SHA256: cedb7364719e50981d2f810982d0455070b8d4e2f637b00dabc7c83687314b52 SHA1: 6e29f117d8506261d28e065eaeb304ac0691bfe2 MD5sum: a83e23c7cd3f286531bca1aed74c2547 Description: SecuBox — profil « reseau » : Reseau, federation et services heberges Les services que la boite rend au LAN et au fedivers : DNS, annuaire, conteneurs applicatifs, maillage. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profil-socle Source: secubox-profils Version: 1.0.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-admin, secubox-appstore, secubox-auth, secubox-certs, secubox-console, secubox-hardening, secubox-hub, secubox-media, secubox-nac, secubox-netdiag, secubox-portal, secubox-profiles, secubox-repo, secubox-routes, secubox-system, secubox-users, secubox-vault, secubox-vm, secubox-zkp Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-socle_1.0.9-1~bookworm1_all.deb Size: 2138 SHA256: 48f14b73d0133f501c403f3c7c773f1a4d7ac518c63bca466e7d0d0fcdeb3665 SHA1: 0db7e512642481aa7fc1b45528ee02764ae1eca3 MD5sum: 16e12d70c8f5003330010e1d6cf99021 Description: SecuBox — profil « socle » : Le noyau indispensable : administration, identite, routage Sans lui rien ne se pilote — le panneau, l'authentification et le routage. Tous les autres profils en dependent. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profiles Version: 0.23.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 460 Depends: python3 (>= 3.11), python3-fastapi, python3-uvicorn, python3-pydantic, secubox-core (>= 1.5.30) Priority: optional Section: admin Filename: pool/main/s/secubox-profiles/secubox-profiles_0.23.4-1~bookworm1_all.deb Size: 106374 SHA256: 7202d1cb1f5b8ab94d06765c84ab6d51eda9e55f3fadf0604fb1b764c04d3f56 SHA1: 26146ab32b4bc611e1d4b06738929eac0e532559 MD5sum: 21c90f2f6ca2e25f00ff97d66b55867a Description: SecuBox — inventaire et profils de modules (phase 1, lecture seule) Manifestes de modules, profiler de configuration, état et diff — CLI secubox-profilectl et API web (webui /profiles/, socket dédié, jamais servi par l'aggregator). Phase 1 n'applique aucun changement : scan/status/diff + écriture de l'état désiré (profils, pins) uniquement. `apply` n'existe pas encore. Package: secubox-proxypac Version: 1.2.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: python3, python3-fastapi, python3-uvicorn, secubox-core, secubox-hub, secubox-tor, nginx Priority: optional Section: net Filename: pool/main/s/secubox-proxypac/secubox-proxypac_1.2.6-1~bookworm1_all.deb Size: 18584 SHA256: 7ff8b049a995b85bf441002439e4495e9f5bc0d2372fa8f2edc2d7a2d8ddd90c SHA1: 7d1435dcf40c7814459bb8076e0fb5176e984cd8 MD5sum: cebba531654c6b5a5cc8efea4fc71956 Description: SecuBox WPAD/PAC auto-config routing to mesh services Generates a proxy.pac from the active p2p /services catalog + operator policy, served via WPAD for zero-config client routing to mesh tools. Package: secubox-publish Version: 2.1.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 174 Depends: secubox-core (>= 1.5.39~), python3-httpx | python3-pip Recommends: secubox-streamlit, secubox-streamforge, secubox-droplet, secubox-metablogizer Priority: optional Section: admin Filename: pool/main/s/secubox-publish/secubox-publish_2.1.6-1~bookworm1_all.deb Size: 36112 SHA256: df0cfe9b6ebc80f27dd2a12a30b1c5be1fb827b50851701052a7775cfa1f1570 SHA1: 4d98b70f1f25f8a368b0c9c320f3ddf1da6e128e MD5sum: c7d8413a7f4619edfd8f0776fa660177 Description: SecuBox Publishing Platform Unified Layer 2 dashboard for all publishing modules. . Aggregates and orchestrates: - Streamlit (data apps) - StreamForge (app templates) - Droplet (file publishing) - MetaBlogizer (static sites) . Provides quick-publish actions and unified overview. Package: secubox-qos Version: 1.2.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 342 Depends: secubox-core (>= 1.0), iproute2, nftables Recommends: vnstat Suggests: python3-pyroute2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-qos/secubox-qos_1.2.3-1~bookworm1_all.deb Size: 53228 SHA256: fa45287368c5a4567613e8450d663a3aaf64dc8e3fb2cb1cd9a0f2abe11201a1 SHA1: f1ea88618e1077752e32c21c958cd7f1e2606721 MD5sum: aea41f0483fe7903369f2a81690cc75b Description: SecuBox QoS / Bandwidth Manager QoS avancé : classes HTB pyroute2, quotas par client, planification horaire, détection média. . Port Debian bookworm de luci-app-bandwidth-manager (SecuBox OpenWrt / CyberMind.fr). Package: secubox-radio Version: 0.1.76-1~bookworm1 Architecture: amd64 Maintainer: Gerald Kerma Installed-Size: 9684 Depends: adduser, acl, secubox-sbxui Recommends: secubox-ytsas Homepage: https://secubox.in Priority: optional Section: sound Filename: pool/main/s/secubox-radio/secubox-radio_0.1.76-1~bookworm1_amd64.deb Size: 3682256 SHA256: 132e2e6c4982dcd54efc6d17465b2d619541a375b0fd2ffe304430ead2849075 SHA1: 77b99a137875cfe41af78864f92c6b93134afa4d MD5sum: e703b5c1a5152e6798a4ca2e6faf4965 Description: SecuBox — radio et television collaboratives synchronisees Une playlist partagee ou tout le monde ecoute et regarde la meme chose au meme instant. Les membres proposent, la communaute soutient, le sysop valide. . Le tirage est pondere par la nouveaute, les coeurs et un temps de repos, de sorte qu'une nouveaute s'entende sans qu'un succes monopolise l'antenne. . Les clips sont rapatries une seule fois par la passerelle yt-dlp puis servis depuis la board : aucun auditeur ne contacte de service tiers. Package: secubox-rbs-sensor Version: 0.1.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 72 Depends: secubox-core (>= 1.4.0), python3-uvicorn, python3-fastapi, python3-serial, python3-toml, usbutils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-rbs-sensor/secubox-rbs-sensor_0.1.4-1~bookworm1_all.deb Size: 16846 SHA256: 169cad2f4625f7e935f66518a772d82986b2aff0c2fb9aadd7ccc246b9c4d2a3 SHA1: f8c5a817a838716ee369306bbe0a81196ef9e086 MD5sum: c08ea113ea7edf1df9df538d6c502e54 Description: SecuBox RBS Sensor — Rogue Base Station sensor (WALL layer) Host-resident module that drives a Quectel EP06-E mPCIe LTE modem as a cellular telemetry sensor for false-base-station detection. Follows the SecuBox OPAD doctrine (Off-Path Active Defense, OODA loop): . OBSERVE — broadcast cell identifiers + own-modem RX measurements only. ORIENT — local verdict engine scores LIKELY_ROGUE / SUSPECT / OK. DECIDE — operator policy or auto-mitigation. ACT — local off-path mitigation: RAT lock (refuse 2G), RF detach. . The sensor NEVER captures third-party subscriber identifiers (IMSI/TMSI). The CellObservation / NeighbourObservation dataclasses have no fields that could carry such data — proof verifiable via `GET /api/v1/rbs-sensor/status` which returns `captures_subscriber_identifiers: false`. . v0.1.0 is a scaffold: framework + EP06 driver shape + AT command allowlist + service plumbing. The full LTE/GSM cell parser and verdict engine land in v0.2 once a real EP06 is connected. Package: secubox-reality Version: 0.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 107 Depends: secubox-core (>= 1.0.0), python3, python3-fastapi, python3-pydantic, python3-segno, openssl Recommends: xray Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-reality/secubox-reality_0.2.2-1~bookworm1_all.deb Size: 25092 SHA256: 0197a1233318c5094f86bb37e2ed39f51678f94af013bb35fa619361f920d020 SHA1: 39aab403f8901bbc6ff75a4e12bb20acfd9918fb MD5sum: 56df8cc573ae28e8cce3df75466f6653 Description: SecuBox Reality — VLESS+Reality+Vision egress-point manager Manages VLESS+Reality+Vision egress points backed by Xray-core: x25519 identity provisioning, Reality dest/SNI sanity validation (TLS1.3 + X25519), per-instance hardened systemd units, client vless:// links with QR codes, and a sliding-window volume-guard (soft warn / hard disable) that preserves egress identity across a stop. Package: secubox-release Version: 0.1.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 71 Depends: python3:any, python3-fastapi, python3-uvicorn, secubox-core (>= 1.4.0), secubox-annuaire, reprepro, sudo Priority: optional Section: net Filename: pool/main/s/secubox-release/secubox-release_0.1.3-1~bookworm1_all.deb Size: 15092 SHA256: 0fe3bab6de1e4d0120491e158ae81ba57136f16ea939c2b55cf9d0ca28c0da1a SHA1: 35459c0dfe6b7047a213418138393962e48d6c2c MD5sum: e73f5bec95e2dc49fa104a692b337f22 Description: SecuBox release-rings — reprepro-copy promotion actuator Op-gated argv builders for promoting packages between apt repo rings (draft/internal/published) via reprepro copy, with a hard arm64 guard: an evolution carrying deb artifacts with no arm64 build is refused, never published amd64-only (arm64 is the only production arch and would otherwise be bricked). Package: secubox-repo Version: 1.1.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 92 Depends: secubox-core (>= 1.4.3), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-aiofiles, reprepro, gnupg, rsync Recommends: nginx, certbot Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-repo/secubox-repo_1.1.5-1~bookworm1_all.deb Size: 19276 SHA256: c6f69148ca76e9bf876221106306ed17ef930a7610b39fb5829d5126ab39e657 SHA1: 1bcf8c90b7fb929a430b888986c2a7808fbad466 MD5sum: 561d726eaa654bc4a925d17558f8cf6f Description: SecuBox APT Repository Manager Management interface for the SecuBox APT repository (apt.secubox.in). . Features: - Package management (add, remove, list) - GPG key generation and signing - Multiple distribution support (bookworm, trixie) - Remote sync via rsync - Web interface for repository status . This is the control plane for apt.secubox.in. Package: secubox-reporter Version: 1.2.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 99 Depends: secubox-core (>= 1.0) Recommends: python3-weasyprint | wkhtmltopdf Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-reporter/secubox-reporter_1.2.3-1~bookworm1_all.deb Size: 18226 SHA256: ee76360238afba3334dd2168e580cf6b55317570778128926804a046f92afa22 SHA1: 75d50f03789f8a06ec89d18a915229c270704dfc MD5sum: f534edf877c378ee4750786cd4b8b39d Description: SecuBox Reporter - System report generation System reporting module that generates PDF/HTML reports for SecuBox. Supports daily, weekly, security, and network report types. Features scheduled report generation with cron expressions. . Port Debian bookworm de SecuBox (CyberMind.fr). Package: secubox-routes Version: 1.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 86 Depends: secubox-core (>= 1.0), iproute2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-routes/secubox-routes_1.2.1-1~bookworm1_all.deb Size: 14418 SHA256: d57785e6d38f6305f263be517008a3d7ab2ddfbec5a3ef4c8aefb3c2e9e6750c SHA1: 536ed367ecb66c22573dc769f05fbd9adaaaa403 MD5sum: 5e6fc67c3495ebc477b1bd107a80dea4 Description: SecuBox Routes - Routing table viewer and manager SecuBox module for viewing and managing routing tables, policy routing rules, and ARP/NDP neighbors. . Features: - View IPv4 and IPv6 routes - Add/delete routes dynamically - Policy routing rules management - ARP/NDP neighbor table viewer - Route cache flush capability . Part of the SecuBox security appliance suite. Package: secubox-rustdesk Version: 1.0.17-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 75 Depends: secubox-core (>= 1.5.39~), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq, iproute2, nftables Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-rustdesk/secubox-rustdesk_1.0.17-1~bookworm1_all.deb Size: 17708 SHA256: 7c504bec52b9a82cf35bf03f20117cfc1b75474480700705fb31f3c81ce9d7d7 SHA1: cc1acc286173612146619ad951611c69580fce38 MD5sum: 66830bf4b4496c470227ef5144cb2698 Description: SecuBox RustDesk — self-hosted remote desktop relay Hosts RustDesk hbbs (signal) and hbbr (relay) servers in a Debian LXC at 10.100.0.90 on br-lxc. Two separate systemd units inside the LXC for the two daemons; rustdeskctl components surfaces both as independent. . Public exposure does not use sbxwaf (it cannot inspect the raw UDP NAT-traversal traffic on 21116/udp). HAProxy stream-mode handles 21115/tcp, 21116/tcp, 21117/tcp; nftables DNAT handles 21116/udp. . rustdeskctl exposes the canonical SecuBox three-fold introspection plus peer/relay/key/session nouns matching the REMOTE-ACCESS layer of the CTL grammar (sister to OPS MONITORING / SEARCH). Package: secubox-saas-relay Version: 1.2.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 101 Depends: secubox-core (>= 1.4.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-cryptography Priority: optional Section: net Filename: pool/main/s/secubox-saas-relay/secubox-saas-relay_1.2.3-1~bookworm1_all.deb Size: 18376 SHA256: 1721ed48e9abb8ed3dc0ff3c641ba6adde7a019a0588874f52cf4bfb4b3556fa SHA1: 0412719548f629b472e0a3f0ce62f776a2e8c417 MD5sum: 19e0b796e0b63ebbbfedf8627d02ca67 Description: SecuBox SaaS/API Proxy Relay Secure proxy relay for external SaaS APIs with encrypted key storage. Port Debian bookworm de SecuBox-DEB Phase 9. . Features: - Proxy configuration for external SaaS APIs - API key management (encrypted storage with Fernet) - Rate limiting and quota tracking per service - Request/response logging - Health checks for proxied services - P31 Phosphor light theme dashboard Package: secubox-sbxid Version: 0.4.18-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 493 Depends: secubox-core (>= 1.5.51~), python3, python3-fastapi, python3-uvicorn, python3-cryptography, python3-qrcode, python3-pyotp, secubox-aggregator Recommends: secubox-webos (>= 1.0.338), secubox-users (>= 1.8.6) Breaks: secubox-acces (<< 1.7.0~) Replaces: secubox-acces (<< 1.7.0~) Priority: optional Section: admin Filename: pool/main/s/secubox-sbxid/secubox-sbxid_0.4.18-1~bookworm1_all.deb Size: 120406 SHA256: 682f83a8d2b4afe9a74eca647d20abf7eb0a65cd94d1cc7631af1f9e34540e23 SHA1: cb647f847a45425a31745e34a541c84dbc9c6f76 MD5sum: da0150b7526c95e6ace717c4958bc255 Description: SecuBox — SBX Identity Manager (identité SBX OS unifiée) Une identité par personne (user_uuid), prouvée par ses appareils (clé P-256 non exportable), des rôles qui sont des profils de capacités (jamais SSH, sudo ou root), des certificats à double signature (appareil + nœud), l'administration SBX OS et le nœud du maillage (Identity Mesh). . Servi par le Hall : https://hall./identite/ — l'origine où vivent les clés d'appareil. identity. y redirige. . Absorbe secubox-acces (admission des appareils, défi signé, sessions) : mêmes chemins d'API et de pages qu'avant. Package: secubox-sbxos Version: 0.5.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 138 Recommends: secubox-webos, secubox-users (>= 1.6.4) Priority: optional Section: web Filename: pool/main/s/secubox-sbxos/secubox-sbxos_0.5.2-1~bookworm1_all.deb Size: 44160 SHA256: 1489125d618abbecf8db5bea7afc8fa7f26558b91c7149bd21eaba949562e2f6 SHA1: cb93494a429e2c25ab3293687e3ef2364e1f5cdb MD5sum: 3b4b8a78a69de7b46b1c7c0b3043a7fa Description: SBX OS — the Hall as an installable PWA The Hall that fits in a pocket. A Progressive Web App that reproduces the SecuBox Hall on any phone, tablet or desktop: a checkerboard of cardlets, each opening a place rather than an application — Cinema, Radio, Billets, Cloud. . Two sources decide what you see, and they are kept apart on purpose. The MINE says what is AVAILABLE: the box decides, per profile, and ships a manifest. The HALL says what is SHOWN: order, favourites, hidden modules, opening screen, theme — the user decides, in the browser, and nothing leaves the device. . Offline first. The shell is cached so the app opens instantly with no network; the manifest is fetched network-first so a freshly granted cardlet appears at once; watched media are kept for replay. Nothing else is cached — not API calls, not other origins. . V1 carries no backend: the manifest is served as a file and profiles are simulated locally, so the whole journey — including the invitation — is playable end to end. The data contract is already the one the box will serve. Package: secubox-sbxui Version: 0.1.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 31 Homepage: https://secubox.in Priority: optional Section: web Filename: pool/main/s/secubox-sbxui/secubox-sbxui_0.1.2-1~bookworm1_all.deb Size: 9048 SHA256: 4f7f4a3ced12cf94bbc50ba52704d19ac0da7bf46168f33ce2387a78c7d95a32 SHA1: 5baec7a9046e111409cf4c306a7c2c18cef32dcf MD5sum: 951abc4af41ce2209037a23f5bca1e1f Description: SecuBox WebOS — bibliothèque UI partagée (objets sbx) Bibliothèque partagée du design system SBXOS (le WebOS/Hall) : le slicer de pied (SBXSliceBar), l'aide reverse-design (SBXAide), et les skins associés (slicebar.css, spicy.css). Elle est servie sous /shared/sbxui/ sur chaque vhost de module (via l'alias /shared/), pour que tout module — Hall ou service à origine distincte (ex. secubox-radio) — partage EXACTEMENT le même chrome et la même aide contextuelle. Source de vérité unique : cf. HIG.md du WebOS et scripts/sync-sbxui.sh (qui aligne la copie locale du Hall). Package: secubox-security-posture Version: 2.4.1-1~bookworm1 Architecture: all Maintainer: CyberMind Installed-Size: 386 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi, python3-uvicorn, python3-httpx, python3-yaml, auditd, debsums, sudo, nftables Recommends: aide, rkhunter, chkrootkit Breaks: secubox-antirootkit (<< 0.1.7~), secubox-cve-triage (<< 1.2.5~) Replaces: secubox-antirootkit (<< 0.1.7~), secubox-cve-triage (<< 1.2.5~) Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: net Filename: pool/main/s/secubox-security-posture/secubox-security-posture_2.4.1-1~bookworm1_all.deb Size: 83552 SHA256: ed285efa8f6ce42b4b8f5b3ea50fdb958d9f5c20a776cf26383290aa47295706 SHA1: 06289443b649e888cd1af20baea9e09c3c3aaa24 MD5sum: e8b8acae00f1b590dd044b5638db5aa1 Description: SecuBox Security Posture - honest board-truthful scorecard SecuBox Security Posture computes a single security score (mapped to a DEFCON 5-1 dial) from real, provenance-tracked signals collected over public sibling module sockets and unprivileged /proc reads. . Every indicator records where its value came from; signals that cannot be measured render as UNKNOWN or MANUAL and are excluded from the score rather than faked. Indicators are grouped by the six SecuBox module-domains (AUTH/WALL/BOOT/MIND/ROOT/MESH). . Features: * Overall posture score with DEFCON level and per-domain coverage * Repaired ANSSI CSPN compliance backbone (real checks, manual flagged) * Real TPN media-protection overlay (anti-piracy DNS, TLS coverage) * Actionable findings with remediation commands and module deep-links * Background 60s cache; read-only REST API on a unix socket Package: secubox-service-actualites Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-metanews Suggests: secubox-yacy Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-actualites_0.1.15-1~bookworm1_all.deb Size: 2536 SHA256: e6ae78a0f8f45289056a77284b0f9ffb2b5ca2f4be65935e022eb56f99167ec2 SHA1: 6b248893d7fa8ce977eb1d667f4e3b4897a82bd2 MD5sum: 51db503690daa284f7fa3f3091148e2a Description: SecuBox — service « Actualité » Radar d'actualité multi-sources. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-administration Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-admin, secubox-appstore, secubox-profiles, secubox-certs Recommends: secubox-repo, secubox-backup, secubox-config-advisor Suggests: secubox-assist Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-administration_0.1.15-1~bookworm1_all.deb Size: 2612 SHA256: 0fbdb26e8556fbf80a9160ecb5c9614928ae301836a1570b2c75ce4de35ead4b SHA1: 9ab342644669f6a0568a3ce7ab656bf4e8a633a8 MD5sum: 1d15e3fdb68486523eb2d61c004e681c Description: SecuBox — service « Administration » Tableau d'administration, App Store, profils, dépôt, certificats. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-assistant Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-zia, secubox-voice Suggests: secubox-zia-llm, secubox-voice-moteur, secubox-voicestudio Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-assistant_0.1.15-1~bookworm1_all.deb Size: 2584 SHA256: af0216e32d09d331f98bb767a0fe4cffa55f442f5cd235818eca70b704b21158 SHA1: fc9e86a6acfc6a09bced8fade23a4f2cf08821df MD5sum: 8011e39c3d95a97cb4bfb32bb43fb9c6 Description: SecuBox — service « Assistant ZIA » ZIA et Lexie : l'IA locale du Hall, sa voix et son oreille. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-bbs Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-bbs Recommends: secubox-messagerie Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-bbs_0.1.15-1~bookworm1_all.deb Size: 2532 SHA256: 68366e665bcc1e99063ad2be5e8baf865aecdb0f9c2612735e9711b4b65fa61a SHA1: 9b1cd9a94c4b2239c57802f6f33ba9c5ba2a1dd4 MD5sum: 09a959fffdeba2abd7cee2a331e8ecf4 Description: SecuBox — service « Forum » BBS auto-hébergé et messagerie de la box. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-detection Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-security-posture, secubox-threats Recommends: secubox-cve-triage, secubox-cyberfeed, secubox-threatmesh, secubox-antirootkit, secubox-device-intel Suggests: secubox-threat-analyst, secubox-ad-guard, secubox-cookies, secubox-ai-insights, secubox-toolbox Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-detection_0.1.15-1~bookworm1_all.deb Size: 2650 SHA256: d371c7a8c26e1314dfa7dc6c85bd41ab8ba5dc24362aa8e12b84ddc06c98c616 SHA1: 4a1b10349003a1487325bc304a38eb31f31939b3 MD5sum: 6940a764510ef6611e5a71d4219b8f9b Description: SecuBox — service « Détection » Posture de sécurité, menaces, CVE, renseignement partagé. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-dns Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-dns, secubox-vortex-dns Recommends: secubox-dns-guard, secubox-dns-provider, secubox-network-anomaly Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-dns_0.1.15-1~bookworm1_all.deb Size: 2588 SHA256: 5c7cb349d4eca19f5ba966d7bfe6c79ae98e25e38f66874551575929720be9ec SHA1: 6c3eb8271fbeffdec99679a4a187d8452000704e MD5sum: 0e8b89a369be25f76f2be927e2b98a03 Description: SecuBox — service « Résolution DNS » Zones faisant autorité, résolveur récursif pare-feu, garde DNS. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-domotique Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-mqtt Recommends: secubox-zigbee, secubox-iot-guard Suggests: secubox-picobrew Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-domotique_0.1.15-1~bookworm1_all.deb Size: 2580 SHA256: fbfc288a3c8f80c8a838ed7ca4089fed43546d59905523690454b382681fd834 SHA1: 0312c75b0bf436956b367cedec27652b70586deb MD5sum: 4d5ee48fc03a87c5909a8351dbd5c5d0 Description: SecuBox — service « Domotique » Courtier MQTT, coordinateur Zigbee, garde IoT, NVR. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-dpi Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-dpi, secubox-ndpid-engine Recommends: secubox-mediaflow Suggests: secubox-ndpid, secubox-interceptor Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-dpi_0.1.15-1~bookworm1_all.deb Size: 2586 SHA256: 0bf7715d9087214e7f0c7fae3547957e875f7bdbd20e326ce87df6e9d5a6e871 SHA1: 1e0fc8c105e878b923c951ff41878fd2469c97c2 MD5sum: a8c48f5f93614e0d8205f6a246286e0a Description: SecuBox — service « Inspection de flux » nDPId et sbxdpi : quelle application parle, sur quel flux. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-ecrans Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Suggests: secubox-c3box, secubox-daemon-c3box, secubox-eye-remote, secubox-eye-square Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-ecrans_0.1.15-1~bookworm1_all.deb Size: 2568 SHA256: 394ba84891152dca04cbdbb6f78db90bde6241402f8b037bf3b3079531a0fa4f SHA1: 63a6a98dd8d2d48d80516f8ac70c8ab3ea0ce074 MD5sum: 03e009743459e5876063bdca237e234a Description: SecuBox — service « Écrans » Écrans de situation et déports USB (Eye Remote, C3BOX). . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-exposition Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-haproxy, secubox-vhost, secubox-exposure Recommends: secubox-cdn Suggests: secubox-mirror, secubox-proxypac, secubox-saas-relay Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-exposition_0.1.15-1~bookworm1_all.deb Size: 2608 SHA256: 706e6a039c792fe7e48b3e8c64fddffde37c68152b778ba5ca33c566054ea41d SHA1: 478db3d647d63571d4860b6f3b427ec313cb6d1e MD5sum: 60de0781bfc16a7689add2ef075b5661 Description: SecuBox — service « Exposition » Frontal HAProxy, hôtes virtuels, publication de services vers l'extérieur. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-fediverse Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-socialrelay, secubox-billets Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-fediverse_0.1.15-1~bookworm1_all.deb Size: 2564 SHA256: 53d1e0a593e4dbfb7e6b1dbbad478b6944b368f1774da054c2ed1bd1c3646376 SHA1: 05442d2e0464c2cc4ab488c26d383b72bce134da MD5sum: 8b240ef1efb26369839b3083aea54101 Description: SecuBox — service « Fédivers » Présence fédérée et relais social avec consentement. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-fichiers Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-nextcloud Recommends: secubox-droplet Suggests: secubox-smb Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-fichiers_0.1.15-1~bookworm1_all.deb Size: 2574 SHA256: 82b7dcbc660949bbaf7f38ca4dcf571c0e35238bacdd589c2a37d7522aef0a04 SHA1: a8dd5cbae16e99f81bde65ab244173a65a1d5ad4 MD5sum: 8ef05ff91566ad03017b6a93d6b42191 Description: SecuBox — service « Fichiers » Nextcloud, partage SMB noyau, dépôt de fichiers éphémères. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-git Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-gitea Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-git_0.1.15-1~bookworm1_all.deb Size: 2500 SHA256: 4b020831e4b33113f442085ee2c5113fc3830aa7b536eb65c09dd425df30a553 SHA1: f44789cfeff3460e2c9004597739a1c85eb76ade MD5sum: 720f73fa3eb86e7ffcc80db4c4e19b33 Description: SecuBox — service « Forge Git » Gitea. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-hall Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-webos, secubox-sbxui, secubox-sbxos, secubox-portal, secubox-sbxid Recommends: secubox-surf, secubox-devwatch, sbxos-audio-mood Suggests: secubox-ui-manager Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-hall_0.1.15-1~bookworm1_all.deb Size: 2624 SHA256: f8e49be303f72dafd2b3596371ea6a31658ad6d88f2c578cba3d535fda838221 SHA1: 0403590805e45b0f30ee9b35018517e58a9c7249 MD5sum: 71c8f4ebd7d74863a24845ca0969dfd1 Description: SecuBox — service « Hall » SBX OS : le Hall, son registre de services, ses objets UI et l'admission des appareils. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-ia Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-ai-gateway Recommends: secubox-localrecall Suggests: secubox-mcp-server, secubox-streamlit, secubox-streamforge Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-ia_0.1.15-1~bookworm1_all.deb Size: 2576 SHA256: 7c3822c0b390a1075ef6f02ad91b281948e58dc0b71f587f78449cf1f341091c SHA1: 98e6f8a5e2ca1fb711f1ff7133fe061acfebfe62 MD5sum: a5e50ecafef3a9f8b6ccbb5c4bf01a4e Description: SecuBox — service « IA » Passerelle souveraine, inférence locale, mémoire, MCP. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-identite Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-auth, secubox-users Recommends: secubox-vault, secubox-avatar, secubox-oidc Suggests: secubox-zkp Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-identite_0.1.15-1~bookworm1_all.deb Size: 2582 SHA256: 4f8f32971276d1e6f5a3d3f2c44dd4f42ca0c02f273fd5dc28165eef2985c237 SHA1: b5ccbdcec221611ff41d44dbb96faaaf282f9f0b MD5sum: 4a8bfa2860c82a9dfefffa88fd0ced75 Description: SecuBox — service « Identité » Comptes, authentification, identité décentralisée, coffre de secrets. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-mail Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-mail Recommends: secubox-smtp-relay Suggests: secubox-clamav Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-mail_0.1.15-1~bookworm1_all.deb Size: 2582 SHA256: d25b15e5f930aaaa9bdf35420726a0d6c8abc6445de23f4baca1b18f27816b11 SHA1: 03c113938debfffb454a4531b21d215304042574 MD5sum: 2910efebc09076bba5983a21722d8376 Description: SecuBox — service « Courrier » Serveur de courrier complet (conteneur mail, webmail) ; absorbe mail-lxc, webmail et webmail-lxc. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-mesh Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-annuaire, secubox-p2p Recommends: secubox-federation, secubox-meshname Suggests: secubox-mesh, secubox-daemon, secubox-meshtastic, secubox-openpgp Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-mesh_0.1.15-1~bookworm1_all.deb Size: 2594 SHA256: 6b0d40e8227c4a2e5e441ee12b9a5e00d117e3ecc044a83130800befd1e0ff9f SHA1: 5a924957733067b025f1ba0197108f43b1999060 MD5sum: 39f8445de0e62fdf405ca9fc5433f171 Description: SecuBox — service « Maillage » Annuaire-miroir, pair à pair, fédération SBX. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-messagerie Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-matrix Suggests: secubox-jabber Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-messagerie_0.1.15-1~bookworm1_all.deb Size: 2548 SHA256: edb3c8277a63163bc85aa9abe8381741f62a185d60340c3c1248e3aaef2c9f9d SHA1: 333929a7f018adc4999edf277608a35799c48cc6 MD5sum: c61796c1325ca4f28868418149e9b429 Description: SecuBox — service « Messageries » Matrix, XMPP : des messageries qu'on héberge. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-metriques Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-metrics Recommends: secubox-glances, secubox-reporter Suggests: secubox-grafana Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-metriques_0.1.15-1~bookworm1_all.deb Size: 2556 SHA256: b2c2ad88ca61d3c9004a524abc432502e470cede8154fa5e8fa0828ea5b43fad SHA1: 6f70f41908e5e120b8895ced716bbb5a698ccaf3 MD5sum: 1a35f7d1f0527abe494bbb0e609bafde Description: SecuBox — service « Métriques » Métriques temps réel, tableaux et rapports. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-musique Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-lyrion Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-musique_0.1.15-1~bookworm1_all.deb Size: 2518 SHA256: 03ff889cbceec9852fafc0983c61bd5bef3a090c6a1ee7bf9f193b32153c2bad SHA1: 5353f235151ff02aa463798e473516070989cbb9 MD5sum: 5a8eb1b9a1830050cebf06497b2c0ff7 Description: SecuBox — service « Musique » Lyrion (LMS). . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-noyau Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-core, secubox-aggregator, secubox-groupd, secubox-defaults, secubox-system, secubox-hardening Recommends: secubox-premier-pas, secubox-health, secubox-health-doctor, secubox-watchdog, secubox-system-tuning Suggests: secubox-led-heartbeat, secubox-ksm, secubox-console, secubox-system-hub Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-noyau_0.1.15-1~bookworm1_all.deb Size: 2646 SHA256: 3a32df91b79faf08f85308f02309c921cf77183617e7864cd8d29cba4633402b SHA1: 988422405063bba01d3b5804a65886fe1626bf2b MD5sum: 08ca57144ec2cbdeff13563ed20913d3 Description: SecuBox — service « Noyau » Bibliothèque centrale, passerelle d'API, hôte de groupe, santé. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-photos Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-photoprism Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-photos_0.1.15-1~bookworm1_all.deb Size: 2510 SHA256: 499b7f214a88246762de5e5c68412d09193e8c4f43938e408785559dda20371a SHA1: 2d8ac96dcb22cc50486e40048f06ea154570737a MD5sum: 93b1f6d6ba6715ab451ef82532e55c62 Description: SecuBox — service « Photos » PhotoPrism. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-provision Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-cloner, secubox-netboot Suggests: secubox-release, secubox-vm Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-provision_0.1.15-1~bookworm1_all.deb Size: 2580 SHA256: 1bd8be85699d1aceaa482140f683c2bea94502fd789804d4c541d73d2383ade9 SHA1: 4a42155facca2dc13416a0dfed4a8482febac352 MD5sum: e8a1b4c226fd0f07d9929434fb443dd6 Description: SecuBox — service « Provision » Clonage, amorçage réseau, déploiement, anneaux de release, VM. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-radio Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-radio Recommends: secubox-podcaster Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-radio_0.1.15-1~bookworm1_all.deb Size: 2540 SHA256: d97d78c100286c68ef87433b062165cbc5b7f12570d627699bc29ccc425a25a5 SHA1: 6295d6fdf716f30b66a15407eb65b2054448c803 MD5sum: 10a9b9c850fddcb8265e1cf5ab4abffb Description: SecuBox — service « Radio » Radio et télé collaboratives, balados, relais FM. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-radio-veille Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Suggests: secubox-rbs-sensor, secubox-sentinelle-gsm Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-radio-veille_0.1.15-1~bookworm1_all.deb Size: 2570 SHA256: 7103322561c99de2218410b1a59e5d902fa5dd7526c49ff4eb51aefae935da50 SHA1: ab445eba32208f6daa64f4a7dd843c3703348fe9 MD5sum: 672fb99d17e5b88cf2e4fc35dacecd82 Description: SecuBox — service « Veille radio » Capteurs de fausses stations de base : matériel radio requis. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-routage Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-netmodes, secubox-routes, secubox-nac Recommends: secubox-qos, secubox-traffic, secubox-netdiag, secubox-mac-guard Suggests: secubox-nettweak, secubox-modem, secubox-wan-link-guard Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-routage_0.1.15-1~bookworm1_all.deb Size: 2608 SHA256: ed6ebdda80fbbd1f214e421899aed44f965dbbdf59ad44c85c36c412cbee50bb SHA1: 6eab42dc73d366bbb148befc4046f22e8e4c6fbc MD5sum: ac276ca4022b4d07916c5f4c017ca20d Description: SecuBox — service « Routage » Modes réseau, routes, contrôle d'accès, qualité de service. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-sites Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-metablogizer, secubox-publish Recommends: secubox-metacatalog Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-sites_0.1.15-1~bookworm1_all.deb Size: 2552 SHA256: f751105853ce52abad8e8758514c676847a9076929b979e0e7a4306540ea7e49 SHA1: 2ea7207dfc5e68ad865298892862358689b71fb8 MD5sum: 857e98eadf52069cf628007940d0b562 Description: SecuBox — service « Sites » Métablogs, plateforme de publication, catalogue. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-soc Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-soc Recommends: secubox-soc-web Suggests: secubox-soc-agent Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-soc_0.1.15-1~bookworm1_all.deb Size: 2558 SHA256: 4831253ca6e41e2275347e8bcd5a7dcb25b724c33fb236ca1b132193a3f5e637 SHA1: d2b3c1539717d9a01155f6de9a1799cdfdd6492b MD5sum: 44d516b0081627297540114d36adb37a Description: SecuBox — service « Centre opérationnel » Agrégation des alertes et son tableau web. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-video Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-peertube Recommends: secubox-jellyfin, secubox-freeboxtv, secubox-torrent, secubox-ytsas Suggests: secubox-media Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-video_0.1.15-1~bookworm1_all.deb Size: 2584 SHA256: ca0e3a5eebf220df79b12c5a899501b17b00272a802f2b230b6096eaaecdf2fc SHA1: 5f17b07cda71e6a9f69ae062f95ebdcc8257c3f0 MD5sum: 20f370e16b707907f489593ff72f11cd Description: SecuBox — service « Vidéo » PeerTube, Jellyfin, flux Freebox TV, torrent et SAS web. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-visio Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Recommends: secubox-jitsi, secubox-turn Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-visio_0.1.15-1~bookworm1_all.deb Size: 2544 SHA256: af633cb79f332274c075f2c52c9d0ec71267fee240bb9bfcb81ce3f82d3447ff SHA1: 7e65e40c91e0c6fa092b95ccec28e27729170f9c MD5sum: 711a19bca1391322f497d763e84143f8 Description: SecuBox — service « Visio et téléphonie » Jitsi, TURN/STUN, PBX. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-vpn Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-wireguard Recommends: secubox-tor Suggests: secubox-reality, secubox-macro Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-vpn_0.1.15-1~bookworm1_all.deb Size: 2550 SHA256: 7d97513ee4d0509177b936680483a2d5825aa0c5fcae79b50c6b9f27727aaecd SHA1: f11bf76335258d23bd9b11fd26fcf7ebe043495c MD5sum: b081dd1e48921c3cc2abd20502c6f2ba Description: SecuBox — service « Tunnels » WireGuard, sortie Reality, Tor. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-waf Source: secubox-meta Version: 0.1.15-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-waf, secubox-waf-ng Recommends: secubox-ipblock, secubox-vortex-firewall, secubox-toolbox-ng Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-waf_0.1.15-1~bookworm1_all.deb Size: 2600 SHA256: f996fbef068990f06c9705d53666117d1ca1ac1c499992247d9444d813874e9e SHA1: 3181c37df2e8102b662dc1454ab47c3817070070 MD5sum: b91513ecd5fd114c004ecb51ec8b2f86 Description: SecuBox — service « Pare-feu applicatif » Moteur sbxwaf et son interface, listes de blocage, pare-feu à flux de menaces. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-smb Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 35 Depends: ksmbd-tools, nftables Recommends: avahi-daemon Priority: optional Section: net Filename: pool/main/s/secubox-smb/secubox-smb_1.1.0-1~bookworm1_all.deb Size: 8866 SHA256: 8974c84cb0d7bd620a4ec6d9af4d081f710baee676c17ac27f23db3d9258d778 SHA1: 32eb31dd5ce83b5a7942e313f5e71681fb34b6fc MD5sum: f4ba246f197b9cf0aca87ff28b4ac190 Description: SecuBox — partage SMB servi par le noyau (ksmbd) Expose les supports USB montes (/media/secubox-media) et /data en SMB3, cantonne au reseau local par nftables, sans acces invite. . ksmbd sert les fichiers depuis l'espace noyau : pas d'aller-retour vers un processus utilisateur a chaque lecture, contrairement a smbd. Package: secubox-smtp-relay Version: 1.1.1-1~bookworm2 Architecture: all Maintainer: Gerald KERMA Installed-Size: 77 Depends: secubox-core (>= 1.0), postfix | msmtp Recommends: libsasl2-modules, ca-certificates Homepage: https://cybermind.fr/secubox Priority: optional Section: mail Filename: pool/main/s/secubox-smtp-relay/secubox-smtp-relay_1.1.1-1~bookworm2_all.deb Size: 14240 SHA256: dd91517bcfa6632aa4bdbf6a508a8e56dbc7afdc1721e8fb79a356c97b10256f SHA1: 41e374d8c7a794c5cf7bce2b69af0f1a3043ff72 MD5sum: 78bc9dce5534299de8d1acc9868d1da8 Description: SecuBox SMTP Relay — Email forwarding through smarthost SMTP relay module for SecuBox that configures outbound email forwarding through a smarthost (upstream SMTP server). . Features: - Smarthost configuration with SASL authentication - TLS encryption support (mandatory TLS or opportunistic) - Mail queue management (view, flush, delete) - Delivery statistics and real-time log viewing - P31 Phosphor light theme web interface . Port Debian bookworm de luci-app-smtp-relay (SecuBox OpenWrt / CyberMind.fr). Package: secubox-soc Version: 1.1.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 107 Depends: secubox-core (>= 1.4.0) Conflicts: secubox-soc-web Breaks: secubox-hub (<< 1.9.10-1~bookworm1) Replaces: secubox-hub, secubox-soc-web Priority: optional Section: admin Filename: pool/main/s/secubox-soc/secubox-soc_1.1.7-1~bookworm1_all.deb Size: 25840 SHA256: 0681aa31ac4d9b6581888227b6c704f596628277a8f3ee22a78ab2821c3f33b3 SHA1: 4cdd2ecb3b2747e5910cd9f5bef1eefc15b21684 MD5sum: 5cd3ed96386bcde9f50e46c905a76fbe Description: SecuBox SOC — Security Operations Center aggregator Aggregates alerts, threat-map data, and P2P intel from Hub and WAF into a single Security Operations Center dashboard. Read-only consumer of the existing alert sources. . Distinct from sibling packages in the SOC cluster: - secubox-soc-agent — edge node agent reporting up to a gateway. - secubox-soc-gateway — central fleet-monitoring hub (multi-board aggregator). - la page Vigie SOC (www/soc/), trois ecrans lus sur les sources vivantes. Package: secubox-soc-agent Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 73 Depends: python3 (>= 3.11), secubox-core (>= 1.4.0), python3-httpx | python3-pip, python3-fastapi | python3-pip, uvicorn Suggests: secubox-watchdog Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-soc-agent/secubox-soc-agent_1.0.2-1~bookworm1_all.deb Size: 12862 SHA256: 32c53fc25963302354807ce73467002bf500ce02e93907a5822a246f5c9f88c8 SHA1: cde0bc63c6e3a720b8e9374046f85c0436515f36 MD5sum: 7e698c01431136a34288082a9a3ead4d Description: SecuBox SOC Agent — Edge Node Agent for SOC Integration Edge node agent that collects system metrics and security alerts, then pushes them to an upstream SOC gateway for centralized monitoring. . Features: - System metrics collection (CPU, memory, disk, network) - Security alert aggregation (Suricata, WAF) - HMAC-SHA256 signed metric push to upstream SOC - Remote command execution with signature validation - Automatic enrollment with SOC gateway - Command audit logging . Part of the SecuBox hierarchical SOC architecture. Package: secubox-soc-gateway Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 131 Depends: python3 (>= 3.11), secubox-core (>= 1.4.0), python3-httpx | python3-pip, python3-fastapi | python3-pip, python3-websockets, uvicorn Suggests: secubox-soc-agent, secubox-watchdog Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-soc-gateway/secubox-soc-gateway_1.1.1-1~bookworm1_all.deb Size: 21792 SHA256: 3896356aeaf91d5365e85f6e60ad736d9f7153706830ece5e9db39842ad131d0 SHA1: d6326d893ccd241542967737377def1efc4d2379 MD5sum: a42abc1c3f06094c8ff2fc20f9685904 Description: SecuBox SOC Gateway — Central Fleet Monitoring Hub Central SOC aggregation gateway that receives metrics from edge nodes, provides unified alert streams, correlates threats across the fleet, and enables remote node management. . Features: - Node registration with enrollment tokens - Fleet-wide metrics aggregation - Unified alert stream from all nodes - Cross-node threat correlation - Remote command execution - WebSocket real-time updates - Hierarchical deployment support (regional/central) . Part of the SecuBox hierarchical SOC architecture. Package: secubox-soc-web Version: 1.1.3-2~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 257 Depends: nginx Suggests: secubox-soc-gateway Breaks: secubox-hub (<< 1.9.10-1~bookworm1) Replaces: secubox-hub, secubox-soc Homepage: https://cybermind.fr/secubox Priority: optional Section: web Filename: pool/main/s/secubox-soc-web/secubox-soc-web_1.1.3-2~bookworm1_all.deb Size: 68212 SHA256: a7c06d3c8379ccab5c6eefebbae6030c275719bdfb42f8f792214ed7fca5d771 SHA1: 9222a48839460ed283aadc65bf987118faa2fe79 MD5sum: 42cb4f04cfa9de1423571a0e2cb1a931 Description: SecuBox SOC Web Dashboard — Browser-based Fleet Monitoring React-based web dashboard for the SecuBox Security Operations Center. Provides real-time fleet monitoring, alert visualization, and remote node management through a modern web interface. . Features: - Fleet overview with node health grid - Real-time alert stream via WebSocket - Cross-node threat correlation visualization - Remote service management (start/stop/restart) - Threat intelligence map - Cyberpunk-themed responsive UI . Part of the SecuBox hierarchical SOC architecture. Package: secubox-socialrelay Version: 0.1.19-1~bookworm1 Architecture: amd64 Maintainer: Gerald Kerma Installed-Size: 10834 Depends: adduser, acl Recommends: secubox-bbs Homepage: https://secubox.in Priority: optional Section: web Filename: pool/main/s/secubox-socialrelay/secubox-socialrelay_0.1.19-1~bookworm1_amd64.deb Size: 4057526 SHA256: bd4d35036ddd2bac9323b934e55934ab959430d9553db2df3ea5e210cc788009 SHA1: 54443734381965a7d2fbfbd55975474d36efefb5 MD5sum: 0f4f4cf1daa1119b2f970f698121d007 Description: SecuBox — relais de reseaux sociaux (fediverse + consentement) SocialRelay suit des sources sociales, CACHE leurs medias en local (le navigateur ne contacte jamais le tiers) et ouvre un fil BBS par publication. . Trois modes d'acces, JAMAIS de scraping : open (Mastodon/fediverse, public), consent (Facebook via l'API Graph avec un jeton fourni par l'operateur), et bridge (un flux RSS que l'operateur heberge lui-meme). Package: secubox-streamforge Version: 1.2.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 81 Depends: secubox-core (>= 1.4.3), python3-uvicorn | python3-pip, python3-psutil Recommends: streamlit Priority: optional Section: net Filename: pool/main/s/secubox-streamforge/secubox-streamforge_1.2.3-1~bookworm1_all.deb Size: 16616 SHA256: c23abe8c46d1ef91fa4cc6bd2abb3d3cf2abe7533c00d06bbf44b60199c41588 SHA1: f5e0633aadfca5fa3586ee6bb7bc038dcf50d40d MD5sum: b191a97294d93092b3fbbd3709a6987f Description: SecuBox Streamlit Forge Gestionnaire d'applications Streamlit avec templates. Port Debian bookworm de luci-app-streamlit-forge (SecuBox OpenWrt). Package: secubox-streamlit Version: 1.4.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 587 Depends: secubox-core (>= 1.5.46), python3-uvicorn | python3-pip, python3-psutil, lxc, debootstrap Recommends: streamlit, chromium Priority: optional Section: net Filename: pool/main/s/secubox-streamlit/secubox-streamlit_1.4.7-1~bookworm1_all.deb Size: 124546 SHA256: 3d316c43c8053f638ad1335fc6c2999cb6be8138c2caa2def431d1cc03d9752f SHA1: f1647e3082f4cc521df38c7315dc39b35165d370 MD5sum: 487547d5fc6194edee171a9b11fedb9a Description: SecuBox Streamlit Platform Plateforme d'applications Streamlit avec support LXC. Port Debian bookworm de luci-app-streamlit (SecuBox OpenWrt). Package: secubox-surf Version: 1.0.29-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 597 Depends: python3, python3-httpx, python3-uvicorn | python3-pip, python3-socksio | python3-pip Priority: optional Section: web Filename: pool/main/s/secubox-surf/secubox-surf_1.0.29-1~bookworm1_all.deb Size: 171174 SHA256: 5252f3b431f8214532e7eea29e629a35b1815f5b7d797afe12246e488b8a43b5 SHA1: 2874dbeb5b7a936291398ddf0ac2bc7478dcaa30 MD5sum: 13a1856dbbab5968b28414a3b2639a8b Description: SecuBox Surf — relais de navigation par-origine (le BiB) Le navigateur de relais du Hall : chaque hôte distant est servi sous une origine propre, `surf-.gk2.secubox.in`, ce qui cloisonne cookies et stockage par site visité au lieu de les laisser se rejoindre. . Le relais réécrit les URL absolues du HTML et du CSS vers l'origine de surf, coupe les pisteurs, et sait rejouer une page lourde avec un Chromium sans tête dont il fige le DOM abouti (rendu statique, mis en cache). . MetaNews en dépend : chaque clic sur un lien de source y passe. Package: secubox-system Version: 1.10.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 717 Depends: polkitd | policykit-1, secubox-core (>= 1.5.47~), python3-psutil, python3-fastapi | python3-pip, systemd, util-linux, python3, systemd-zram-generator Recommends: lxc Breaks: secubox-admin (<< 1.2.3~), secubox-ksm (<< 1.2.3~), secubox-system-hub (<< 1.0.3~), secubox-system-tuning (<< 1.2.6~) Replaces: secubox-admin (<< 1.2.3~), secubox-ksm (<< 1.2.3~), secubox-system-hub (<< 1.0.3~), secubox-system-tuning (<< 1.2.6~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-system/secubox-system_1.10.2-1~bookworm1_all.deb Size: 128096 SHA256: 4c25e35e1d127b207085908ff17d668896ebc826e351b2fe1b76b0e3c06e344a SHA1: dbabf7dee259d0f43f392840c25b0c594b02273b MD5sum: b3722b46463fe9745b8df2e51427000f Description: SecuBox System Hub Centre de contrôle système : santé, services systemd, logs journald, diagnostics, backup. . Port Debian bookworm de luci-app-system-hub (SecuBox OpenWrt / CyberMind.fr). Package: secubox-system-hub Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 43 Depends: secubox-core (>= 1.4.0), python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-system-hub/secubox-system-hub_1.0.2-1~bookworm1_all.deb Size: 8798 SHA256: 5d81e3c6020dc441d82ed66998aebff8e7a9342a03a43c7428ca7abe5e061353 SHA1: c99be6f568f5b4d3e738d23e52f3afc460d94cd2 MD5sum: 8f3de308a79d4cbd27d0d282dfb24018 Description: SecuBox System Hub Dashboard System control center: health, systemd services, journald logs, diagnostics. . Debian bookworm port of luci-app-system-hub (SecuBox OpenWrt / CyberMind.fr). Package: secubox-system-tuning Version: 1.2.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 44 Depends: systemd, util-linux, python3, systemd-zram-generator Recommends: lxc Priority: optional Section: admin Filename: pool/main/s/secubox-system-tuning/secubox-system-tuning_1.2.5-1~bookworm1_all.deb Size: 14776 SHA256: 9fa82e9e1980346d95395035aa67b41f7e7488027f100f191550766ef7416bce SHA1: f0b9157cdcc04afd864021f58696561a3fb7d160 MD5sum: 730d0785b1a828c3d112311741341f5d Description: SecuBox System Tuning — swap + zram + memory/CPU caps for LXC Per-board memory tuning for SecuBox: configures a swap file in /data (boards typically ship with 0 swap and exhaust real memory under LXC load), and applies per-LXC-container cgroup MemoryHigh soft caps to throttle (not OOM-kill) runaway containers. . Captures the by-hand fix applied on gk2 on 2026-05-27 (#391) so other boards inherit it automatically. Idempotent: re-running the tuning script after editing the TOML config only diffs the deltas. . Configuration lives at /etc/secubox/tuning/{config.toml, lxc-memory-high.toml}. Apply with secubox-tuning-apply or wait for the next package upgrade. . Distinct from secubox-hardening (kernel sysctl + AppArmor + module blacklist for *security*) — this package is *performance* tuning: swap and cgroup soft limits. Package: secubox-threat-analyst Version: 1.5.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 93 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-threat-analyst/secubox-threat-analyst_1.5.5-1~bookworm1_all.deb Size: 24506 SHA256: 46298a89f08c8b9e12b4448b51ff95a675a0f9ca140b16eaf8f53ed05d900ac2 SHA1: 674d38f47786844d373cfeb0e2b98d0b363f630b MD5sum: 4c4f9532a387d65f57580245e052174d Description: SecuBox Threat Analyst — AI agent that writes detection scenarios AI-assisted threat analysis: ingests recent alerts, proposes new detection scenarios, and writes them under /etc/secubox/scenarios/ for operator review and reload. . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella dashboard aggregating Suricata + WAF alerts (read-only). - secubox-cve-triage — CVE vulnerability triage workflow. - secubox-network-anomaly — DNS-log anomaly detection. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables-driven IP blocklist enforcement. Package: secubox-threatmesh Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 59 Depends: secubox-core (>= 1.4.0), python3, python3-uvicorn | python3-pip, secubox-vortex-firewall | secubox-toolbox Recommends: secubox-p2p Priority: optional Section: net Filename: pool/main/s/secubox-threatmesh/secubox-threatmesh_1.0.2-1~bookworm1_all.deb Size: 12610 SHA256: a1241fbe8ddf889f12fcf8e515f84629795c7ebbce68a1e489777f22fbee6cb9 SHA1: 6d0030daca0c9987b18e583a8c8fb8fd6f1d6d8a MD5sum: 6dd264c9fc293f4926e654eb14769817 Description: Sovereign threat-intel mesh for SecuBox (central-API replacement) Replaces third-party central threat APIs with self-sourced free public blocklists (Phase 1) and peer-to-peer MESH distribution of locally-detected decisions over the SecuBox WireGuard mesh (Phase 2), plus a status/aggregate/bouncer-compatible API and dashboard (Phase 3). All IOCs flow into the shared threat_intel table that secubox-blacklist-sync drains into the nft blacklist. No central account, no enrollment, no paywall, no IP-blocklisting by a third party. Package: secubox-threats Version: 1.2.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 85 Depends: secubox-core (>= 1.4.0), python3-tomli Recommends: suricata Priority: optional Section: admin Filename: pool/main/s/secubox-threats/secubox-threats_1.2.3-1~bookworm1_all.deb Size: 16584 SHA256: e9bde30ee3c6e44febd50e2bc1b37574aaddd25d32bb2a96a5d30276014549dd SHA1: 0c72c69949af33710620ce5cd86b4fd7043e32cf MD5sum: 4dc66f617f8a74ff58589c1f64cc1ea1 Description: SecuBox Unified Threats Dashboard Unified security threats dashboard aggregating alerts from Suricata and WAF. Features threat intelligence, IOC management, risk scoring, incident tracking, and report generation. Package: secubox-toolbox Version: 2.13.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 1587 Depends: secubox-core (>= 1.7.10), python3 (>= 3.11), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jinja2, python3-pydantic, python3-httpx, python3-qrcode, python3-fpdf2 | python3-pip, nftables, iproute2, hostapd, dnsmasq, jq, openssl, adduser, fonts-dejavu-core, fonts-symbola, fonts-noto-color-emoji, python3-yaml, python3-geoip2 | geoipupdate, lxc, debian-archive-keyring, sudo Recommends: bridge-utils, tor, obfs4proxy, python3-socksio Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-toolbox/secubox-toolbox_2.13.5-1~bookworm1_all.deb Size: 411282 SHA256: 589027da6ec350b0d6765d2b17a1028803baaf157249fb90ef7c1b68ff3a2a27 SHA1: 181f59e9423967272c7c4dda5f61d7141d5c8f23 MD5sum: 8da62f20da7b2a6b24e37c8cd8728393 Description: SecuBox-DEB ToolBoX — Gondwana Cabine Numérique (captive AP + MITM analyzer) Phase 1 du parent #474 (ToolBoX Pipeline). Productionize le PoC captive portal en package dédié : splash + consent R2 + CA distribution iOS (mobileconfig) + nftables TPROXY → moteur MITM Go (sbxwaf/sbxmitm) + addons (cookies/dpi/avatar/ja4/soc-relay) → modules SecuBox existants. . Conforme CSPN (R2 opt-in explicite, MAC hashing avec sel rotatif daily, retention 24h défaut). Cible : borne publique cabine téléphonique numérique. Package: secubox-toolbox-ng Version: 0.5.7-1~bookworm1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 24832 Conflicts: secubox-mitmproxy Replaces: secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-toolbox-ng/secubox-toolbox-ng_0.5.7-1~bookworm1_amd64.deb Size: 6117722 SHA256: dd271afe1f96ff1c3b2fc2841981cd8abe5e61933dd5100e359e6809fa1c53d2 SHA1: 398f8f2c3c12422a36a4ebc81dd309d3c729a9ce MD5sum: 532078d6934812197a60d12a73d67d3b Description: SecuBox-Deb — outils Go du parc (sbxmitm, sbx-sentinel, sbx-authwatch, sbxdpi) LE MODULE GO DU PARC vit ici (go.mod, vendor/), et il porte CINQ commandes : sbxmitm, sbx-sentinel, sbx-authwatch, sbxdpi — livrees par ce paquet — et sbxwaf, qui ne l'est PAS : c'est secubox-waf-ng qui compile et livre le moteur du pare-feu depuis cette meme source. . sbxdpi est la couche Go qui emancipe nDPId : il consomme le flux JSON du distributeur nDPIsrvd (moteur C libre, nDPI 5.x), applique le filtrage declaratif du parc (exemption premiere partie, listes deny/allow, mise en sourdine des risques — memes conffiles *.txt que sbx-sentinel), agrege les stats DPI et les sert en lecture seule sur /run/secubox/aggregator.sock (/api/v1/dpi/) pour la cardlet DPI du Hall, derriere nginx + JWT FastAPI. . Multi-core Go re-implementation of the R3 toolbox MITM engine (#662), porte hors de l'ancienne flotte de workers Python mitmproxy, bridee par le GIL et retiree depuis. Livre le standalone sbxmitm binary plus a DISABLED systemd template unit. . This package is the Phase-6-cutover migration target. The unit is NOT enabled or started by the maintainer scripts — the live R3 tunnel keeps running on the Python workers until the cutover is performed manually. Installing this package changes NO runtime behaviour (no service start, no nft DNAT). Package: secubox-tor Version: 1.7.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 263 Depends: secubox-core (>= 1.4.0), tor, unbound, nftables, dns-root-data, python3, python3-fastapi, python3-uvicorn, secubox-hub, nginx Breaks: secubox-macro (<< 0.1.1~), secubox-proxypac (<< 1.2.7~) Replaces: secubox-macro (<< 0.1.1~), secubox-proxypac (<< 1.2.7~) Priority: optional Section: admin Filename: pool/main/s/secubox-tor/secubox-tor_1.7.0-1~bookworm1_all.deb Size: 56096 SHA256: b51f923f4da1e5aa412281b84e8d36ac37ff708c0adc22b3a33cf95930171eec SHA1: 3738a1542d31016995e395184f9e218e4933ff26 MD5sum: da61bf01d8a48e5ba5bf18625cad73b3 Description: SecuBox Tor — Tor relay + hidden-services manager Manages a local Tor daemon: transparent-proxy + SOCKS modes, hidden-service publishing, circuit monitoring, identity rotation, DNS-over-Tor, and kill-switch enforcement. Pairs with secubox-exposure when publishing hidden services for SecuBox vhosts. Package: secubox-torrent Version: 2.4.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 403 Depends: secubox-core (>= 1.5.39~), secubox-hub, lxc, debootstrap, nftables, jq Recommends: secubox-peertube, secubox-lyrion, ffmpeg Priority: optional Section: net Filename: pool/main/s/secubox-torrent/secubox-torrent_2.4.9-1~bookworm1_all.deb Size: 91724 SHA256: ba491889cb8e088762b77b3f69f6174ebdd422f173ca3047fa21cbf9f61eefbd SHA1: 83b32fd332aca93f1f20c5ac0dcd4254055061e2 MD5sum: 138b616a283e97ce8a8b37af94c49719 Description: WebTorrent streaming for SecuBox (LXC-native) Paste a magnet and stream it in the browser (HTTP Range) while it downloads. Ephemeral by default with an optional Keep to a persistent library on /data. The WebTorrent engine (hybrid WebRTC+BitTorrent) runs isolated in a dedicated LXC; the host only proxies an authenticated vhost. Conserved video goes to PeerTube, conserved audio (mp3/flac/…) goes to Lyrion; ffmpeg (ffprobe) lets the host resolve ambiguous containers (eg. audio-only .mkv) precisely. Package: secubox-traffic Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 84 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core (>= 1.4.0), iproute2 Recommends: linux-image-amd64 (>= 5.4) | linux-image-arm64 (>= 5.4) Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-traffic/secubox-traffic_1.1.1-1~bookworm1_all.deb Size: 14776 SHA256: 72cc57f6b653f97aa121458d291bac1e794c5293c0545e7bb815350a1dc7fbfb SHA1: 9963cd012bc77d9258d12eb7dde7b4654d18cbb7 MD5sum: aec830696d6ab2c3c39baf49f322c1da Description: SecuBox Traffic Shaper Advanced QoS traffic control with TC/CAKE. Provides traffic classification, bandwidth management, priority-based shaping, and preset configurations. Package: secubox-turn Version: 1.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 95 Depends: secubox-core, coturn Priority: optional Section: net Filename: pool/main/s/secubox-turn/secubox-turn_1.2.1-1~bookworm1_all.deb Size: 16336 SHA256: 8e87a608ca2d2541094118ff369cce7ae8f891b8c389ffd1fc34d08dbe2d5390 SHA1: cdf22a32e93224e86d2d2639e77bc66518cf31ec MD5sum: b4a05c2e8b0f8161606e698b11d2d4cb Description: SecuBox TURN/STUN Server Management TURN/STUN server management interface for SecuBox WebRTC. Features: - coturn service control (start/stop/restart) - User management with turnadmin integration - Temporary credential generation (HMAC) - Active session monitoring - Configuration editor - Three-fold architecture (Components/Status/Access) Package: secubox-ui-manager Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 129 Depends: python3 (>= 3.11), kbd, xinit, xserver-xorg-core, chromium | chromium-browser, unclutter, x11-xserver-utils Recommends: python3-textual, secubox-console Suggests: xserver-xorg-video-vmware, xserver-xorg-video-qxl Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-ui-manager/secubox-ui-manager_1.0.1-1~bookworm1_all.deb Size: 24276 SHA256: ec1657fe884cafe20c45ab0dc5c966b44ca7904663fda8c7a6c7b42a3d659c45 SHA1: ab469dd70ff845c48ffec5ec21c5954a1d644f87 MD5sum: aefd47988f7f3309cb06493ca79ccbd3 Description: SecuBox Unified UI Manager Manages the SecuBox user interface with automatic mode selection and graceful fallback support. . Features: - KUI: Kiosk UI mode (X11 + Chromium fullscreen) - TUI: Terminal UI mode (Textual-based console) - Console: Fallback to standard getty login - Automatic hypervisor detection (VirtualBox, QEMU/KVM, VMware) - Per-hypervisor graphics optimization - Modular debug system with 6 verbosity levels - Health monitoring with automatic fallback on failure . This package is part of the SecuBox security appliance. Package: secubox-users Version: 1.8.17-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 232 Depends: python3-fastapi, python3-uvicorn, python3-argon2, python3-pyotp, python3-qrcode, python3-jsonschema, python3-tomli | python3 (>= 3.11), secubox-core (>= 1.5.47~), jq Priority: optional Section: admin Filename: pool/main/s/secubox-users/secubox-users_1.8.17-1~bookworm1_all.deb Size: 56974 SHA256: caf2d9e1483bdbd7e1e30df9474ad7f2092f1f852aefef7e66364fe9efe9fff0 SHA1: 27724836f72e0b5d4b1d896c2d712ffbc9e8184a MD5sum: 77dac905afdfca3f75747af8ed0e1c43 Description: SecuBox Users — local account manager (Argon2id + TOTP + RBAC) Unified user-account management for SecuBox: account create/disable/ enable, password reset (Argon2id hashes), TOTP enrollment with backup codes, session management, and role-based access control. . Distinct from sibling packages in the identity stack: - secubox-auth — JWT auth guardian / session middleware (consumes secubox-users state). - secubox-portal — web login portal. - secubox-avatar — profile image + display-name manager. Package: secubox-vault Version: 2.1.2-1~bookworm1 Architecture: all Maintainer: SecuBox Team Installed-Size: 649 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-cryptography, python3-argon2, gpg, gpg-agent, gpgconf, secubox-core (>= 1.5.51) Suggests: secubox-openpgp (>= 0.1.2) Priority: optional Section: admin Filename: pool/main/s/secubox-vault/secubox-vault_2.1.2-1~bookworm1_all.deb Size: 178792 SHA256: 3e473746319d41590a97381f3fcc5e4503d215dd1ddfa733e06467ef532e8114 SHA1: d91020bff5a46433c250eaa8eaa4dcf02676bfc6 MD5sum: 76b2794d168c7ec3fd086e459ed86841 Description: SecuBox Vault - Secrets management Encrypted secrets storage for SecuBox. Provides secure storage for API keys, passwords, and credentials with audit logging and rotation support. Package: secubox-vhost Version: 1.6.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 134 Depends: secubox-core (>= 1.4.0), nginx, python3-jinja2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-vhost/secubox-vhost_1.6.4-1~bookworm1_all.deb Size: 30036 SHA256: 69376fa0dc79343ffe3838bf2f73ef932e4d0e1e3f218e4e9fc186482180375a SHA1: 80fe403141a89cc681c52d4bace6083cff8df5b8 MD5sum: b661edef27c2683299b6c80342616b01 Description: SecuBox Virtual Host Manager Gestion des hôtes virtuels nginx et SSL : Let's Encrypt, autosigné, reverse proxy, redirections. . Port Debian bookworm de luci-app-vhost-manager (SecuBox OpenWrt / CyberMind.fr). Package: secubox-vm Version: 1.2.5-1~bookworm1 Architecture: all Maintainer: SecuBox Team Installed-Size: 89 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core (>= 1.5.46) Recommends: libvirt-daemon-system, qemu-system-x86, virtinst, lxc Priority: optional Section: admin Filename: pool/main/s/secubox-vm/secubox-vm_1.2.5-1~bookworm1_all.deb Size: 18298 SHA256: ff8548983221a39c64384f3bd03f163e42c705db60ee6db223a5577b645c83f2 SHA1: 974cd1aed7107212b49d03f2fd317e1412c38ef1 MD5sum: 399d72f50abd529ca2117f89a63b942f Description: SecuBox VM Manager - Virtualization management Virtual machine and container management for SecuBox. Supports KVM/QEMU virtual machines via libvirt and LXC containers. Package: secubox-voice Version: 0.1.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 76 Depends: secubox-core (>= 1.4.0), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-multipart | python3-pip, ffmpeg Recommends: secubox-zia, secubox-voice-moteur Priority: optional Section: web Filename: pool/main/s/secubox-voice/secubox-voice_0.1.7-1~bookworm1_all.deb Size: 18936 SHA256: f9e8edd360a0a71119408dbaf0978d82ca764650e1c1dd93a62f18e65fc0623a SHA1: 12df739b427d15048fde85244c5bc652f1665984 MD5sum: ff8e27269879d5247fa5f2d83567d19e Description: SecuBox Voice — Lexie: local speech synthesis and recognition The ears and mouth of SBXOS. This module understands nothing: it transcribes and it speaks. Intent, role policy and action belong to ZIA, whose action layer already turns "pause the radio" into media.pause on the radio service — adding a second voice brain would duplicate the one place allowed to decide. . Voice is not a second API. It adds two capability families to the existing bus, voice.speak and voice.listen, declared in a capabilities.d manifest like any other module. . The engine is pluggable behind the OpenAI-compatible audio contract (/v1/audio/speech, /v1/audio/transcriptions): either a local backend (Piper plus whisper.cpp, arm64, loaded on demand so the box keeps its RAM) or any remote host serving that contract. Engine unreachable is reported as such — never a fallback voice, never an approximate transcription. Package: secubox-voicestudio Version: 0.5.1-1~bookworm1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 255 Depends: secubox-core (>= 1.4.0), lxc, python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-multipart | python3-pip, sudo Recommends: secubox-system-tuning (>= 1.2.5), secubox-profiles Homepage: https://cybermind.fr/secubox Priority: optional Section: sound Filename: pool/main/s/secubox-voicestudio/secubox-voicestudio_0.5.1-1~bookworm1_amd64.deb Size: 64836 SHA256: f6f5963725e226a0c919e123842b5fbf82e6c5f69ea03f5bb23f60ec9b9db5d5 SHA1: 5ed9b2c164c5370a2f3b1ac1c0780b167ee0650e MD5sum: 3f0edaefb739a4b52c6c169f58229a64 Description: SecuBox — VoiceStudio, moteur vocal studio du parc (LXC natif) Fait tourner VoiceStudio (AGPL-3.0, poids CC-BY-NC : service SÉPARÉ, joint par le réseau) dans un LXC Debian dédié, sans podman ni docker. Sources amont épinglées par commit et par empreinte sha256, versions Python tirées de l'image validée, mémoire bornée. Port 3900 publié par un mandataire d'hôte sur le LAN et le maillage seulement, clé d'API obligatoire ; mode permanent ou éveillé à la demande. Deux interfaces : administration (état, démarrage, mode, modèle de reconnaissance, clé, journal, sauvegarde) et usager (dire un texte, dicter). Les autres box l'utilisent comme moteur distant de secubox-voice. amd64 seulement : aucune roue torch CPU arm64 n'est validée ici. Outil : voicestudioctl. Package: secubox-vortex-dns Version: 1.1.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 62 Depends: secubox-core (>= 1.4.0) Recommends: unbound, dnsmasq Priority: optional Section: admin Filename: pool/main/s/secubox-vortex-dns/secubox-vortex-dns_1.1.3-1~bookworm1_all.deb Size: 12604 SHA256: 986a09981719388f3417fb509e332c95d0b80dc2154cb263d1d898de6d7ec242 SHA1: c7f418853ad99cdb54433d7cda1cb65443edebe7 MD5sum: b88bbe37361eefe4360182f96eded764 Description: SecuBox Vortex DNS — recursive firewall with RPZ + threat feeds Recursive DNS firewall: aggregates threat-feed blocklists into RPZ zones and pushes them to unbound (preferred) or dnsmasq. Inline blocking happens before resolution, so policy-violating lookups never leave the box. . Distinct from sibling packages in the DNS cluster: - secubox-dns-guard — post-resolution anomaly detection (dnsmasq-only). - secubox-ad-guard — ad/tracker-specific lookups with per-device stats. - secubox-dns — authoritative BIND zone manager (publishing). - secubox-dns-provider — external registrar API. Package: secubox-vortex-firewall Version: 1.1.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 66 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-vortex-firewall/secubox-vortex-firewall_1.1.3-1~bookworm1_all.deb Size: 13672 SHA256: 502d9fcd75f72c43da39a64475540c90a22dc94fb9089b2b7f4d789628367544 SHA1: 8994578e51316b7da45e6b96b2562a2dc1b01357 MD5sum: d03bf5dc275efb4bd1874f3fb00f118c Description: SecuBox Vortex Firewall — nftables threat-feed enforcer Subscribes to threat feeds (Spamhaus, AbuseIPDB, FireHOL, internal SecuBox blocklists) and compiles them into nftables sets for inline drop/log enforcement. Complements secubox-vortex-dns (which handles DNS-layer blocking via RPZ). Package: secubox-waf Version: 1.10.42-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7403 Depends: secubox-core (>= 1.5.40~), lxc, jq, curl Recommends: secubox-haproxy Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-waf/secubox-waf_1.10.42-1~bookworm1_all.deb Size: 6702342 SHA256: a333478afb575c77879252d57e14252aad0b2354350f2fddb66f846d6a4e3213 SHA1: 4094e4f5e0277e9194da6e82dfc08c2678b4c90e MD5sum: 19c2f1580e2da54cf990bd1ca0ee5e8e Description: SecuBox — API et interface du pare-feu applicatif (wafctl, tableau de bord) LA MOITIE VISIBLE DU PARE-FEU. Ce paquet ne filtre rien : il MONTRE et il COMMANDE. L'inspection et le bannissement sont l'affaire de secubox-waf-ng, qui livre le moteur Go sbxwaf. . Contenu : l'API /api/v1/waf/* (statistiques, menaces, bannissements, pays, detections comportementales, inventaire RGPD des temoins), le tableau de bord et sa vue /micro, et l'outil wafctl par lequel l'interface fait bannir. . Ne pas confondre les trois paquets du pare-feu : - secubox-waf-ng le MOTEUR Go (sbxwaf) — inspecte, decide, bannit - secubox-waf l'API et l'interface — montre et commande - secubox-toolbox-ng les autres outils Go du parc, PAS le pare-feu Package: secubox-waf-ng Version: 1.18.12-1~bookworm1 Architecture: amd64 Maintainer: Gerald KERMA Installed-Size: 13139 Depends: secubox-core (>= 1.5.40~), adduser, apparmor Conflicts: secubox-crowdsec, secubox-mitmproxy Breaks: secubox-aggregator (<< 0.3.3~) Replaces: secubox-crowdsec, secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-waf-ng/secubox-waf-ng_1.18.12-1~bookworm1_amd64.deb Size: 3629472 SHA256: 028b283ebf8b08988979623ab324966daae3a6970b910df9f5a98ae0b42b0766 SHA1: 3d5cc1e9dcbc07246e760558e8b83019e4208d38 MD5sum: b8990c91463890c48c297c72799b60e4 Description: SecuBox-Deb — MOTEUR du pare-feu applicatif (sbxwaf, Go, natif hote) LE MOTEUR. Il inspecte, decide et bannit ; l'interface qui le montre est dans secubox-waf. . SA SOURCE N'EST PAS ICI : elle vit dans packages/secubox-toolbox-ng/cmd/sbxwaf — un seul module Go pour tout le parc, un vendor/ partage. Ce paquet compile depuis la et n'a aucun code propre. Modifier cmd/sbxwaf puis reconstruire secubox-toolbox-ng ne deploie donc RIEN : c'est CE paquet qu'il faut reconstruire. . Host-native Go WAF reverse-proxy replacing mitmproxy/mitmdump for the SecuBox-DEB WAF layer (#744). Ships the standalone sbxwaf binary plus hardened systemd worker template units (secubox-waf-ng-worker@{1,2}). . Features: TLS-forging reverse proxy, hot-reloadable WAF rules engine, graduated WARNING/BAN responses, threat log (NDJSON), RGPD Set-Cookie ledger, media response cache, themed error pages. . CSPN-compliant: dedicated secubox-waf unprivileged user, AppArmor enforce profile, NoNewPrivileges, ProtectSystem=strict, RuntimeDirectoryPreserve=yes (avoids the /run/secubox socket-wipe cascade, #741). Package: secubox-wan-link-guard Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 25 Depends: ethtool, iproute2, iputils-ping Priority: optional Section: net Filename: pool/main/s/secubox-wan-link-guard/secubox-wan-link-guard_1.0.1-1~bookworm1_all.deb Size: 5186 SHA256: b73abd21aae769b02befead78e8c615c88d79e7bfe88e3a6dface7bec353e9ea SHA1: 6135ac51923ca63a1b1e088cd54561e5634ca642 MD5sum: 892031cc967b63ee579d45767b861c9e Description: WAN mvpp2 marginal-link guard for SecuBox (MOCHAbin) Board-specific watchdog for the MOCHAbin (Marvell Armada, mvpp2) WAN port, which recurrently goes dead on gk2 through three stacked faults: the MAC TX wedges under upstream flow-control PAUSE frames, gigabit auto-negotiation is marginal through the intermediate hub, and a parasite default route/duplicate host IP appears on lan0. . Ships a oneshot guard (ethtool pause-off + renegotiate + route/addr cleanup — never `ip link down/up`, which wedges the comphy), a boot+30s timer, a systemd .link that disables flow-control the moment eth2 appears, and a flow-control backstop unit. Tunable via /etc/default/secubox-wan-link-guard. . MOCHAbin-only: on other boards eth2/lan0 do not match and the guard is a no-op. See /usr/share/doc/secubox/FAQ-NETWORK-WAN-RECOVERY.md (ref #913). Package: secubox-watchdog Version: 1.2.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 86 Depends: secubox-core (>= 1.5.46) Priority: optional Section: admin Filename: pool/main/s/secubox-watchdog/secubox-watchdog_1.2.4-1~bookworm1_all.deb Size: 17208 SHA256: 8554f0f18ac8f349ea244e931140037f8c85cb875da185486d641328cc0f2570 SHA1: e59d2c3f880852ffae77d045f44c12781a234d34 MD5sum: 2e3730cb49853b4683ee95e9a0f21ecb Description: SecuBox Watchdog — LXC + service + HTTP health monitor Health monitor for LXC containers, systemd services, and HTTP endpoints with auto-restart for failed targets. Real-time dashboard with 30-second auto-refresh. . Distinct from sibling packages in the monitoring cluster: - secubox-health-doctor — vital-services health check (different target set: focuses on SecuBox-internal critical services). - secubox-device-intel — asset discovery + device fingerprinting (network-side, not service-side). - secubox-glances, secubox-metrics — system metrics dashboards (different upstreams: Glances vs Prometheus). Package: secubox-webfilter Version: 0.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 192 Depends: python3 (>= 3.11), secubox-core (>= 1.4.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, systemd, adduser, iproute2 Recommends: unbound, apparmor Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-webfilter/secubox-webfilter_0.2.1-1~bookworm1_all.deb Size: 41098 SHA256: 116fa97342852294c9408839b2a0aebb57401db86a7a990d73d413492ce8aee3 SHA1: 5ee2ed5e86bfbad56fcd675d426ab5e275f1dea7 MD5sum: d1cfaf6a1a656cb511b06cc804f9a892 Description: SecuBox WebFilter : filtrage de contenus par catégories, profils et appareils Classe les requêtes DNS de chaque appareil par catégorie (contenu adulte, jeux d'argent, phishing et malware) à partir du journal d'Unbound et de listes publiques téléchargées à l'exécution. Mode « observe » (ce que le filtrage aurait bloqué) ou blocage : des profils mettent chaque catégorie en observe ou en block ; un appareil est rattaché à un profil par adresse MAC ; le blocage passe par des vues d'Unbound partagées, appliquées par un contrôleur root déclenché par fichier (contrôle, rechargement, retour arrière, audit). Tant qu'aucun profil ne bloque, rien n'est écrit dans Unbound. Compteurs conservés 30 jours, réservés à l'administrateur. Package: secubox-webmail Version: 2.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-mail (>= 2.2) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-webmail/secubox-webmail_2.2.0-1~bookworm1_all.deb Size: 1386 SHA256: 5b81d2ab13933d33e245bc6fd796cbd5c6492bbffc6f13889d6e48d1f72da330 SHA1: 4832c42406ed15fb1dd1cd4909ba4f69acc4903e MD5sum: 95ed4d234e8a149ab6d7814869caf73a Description: Transitional package — webmail admin folded into secubox-mail The webmail admin API is now part of secubox-mail (>= 2.2). This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-webos Version: 1.12.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 2003 Depends: secubox-core (>= 1.5.39~), python3, python3-fastapi | python3-pip, python3-httpx, python3-python-multipart | python3-multipart | python3-pip, python3-uvicorn | python3-pip, python3-pydantic | python3-pip Breaks: secubox-sbxui (<< 0.1.3~) Replaces: secubox-sbxui (<< 0.1.3~) Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-webos/secubox-webos_1.12.3-1~bookworm1_all.deb Size: 680024 SHA256: 5177aa1ba96abba63321598021b1d70233f77f654ad3d19969a6e5ce79e0382f SHA1: 4fc27ed0d8cc9ae0b921ec3ca4ca6656765fe219 MD5sum: 55eb25c2b89c256e8ff24f9598785116 Description: SecuBox WebOS — normalized service registry (Hall P1) Aggregator-independent registry service exposing a normalized view of SecuBox services (catalogue + health + reach), served on its own socket. Package: secubox-wireguard Version: 1.3.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 373 Depends: secubox-core (>= 1.4.0), wireguard-tools, qrencode Priority: optional Section: net Filename: pool/main/s/secubox-wireguard/secubox-wireguard_1.3.0-1~bookworm1_all.deb Size: 71030 SHA256: 479d9db56ab8882c1290b88a9e9d94354f3ebd23e7a7d20d86b1facdd244d8db SHA1: 7761b40b2f19da15585105062081f452b461d11a MD5sum: bb7ecec3858c6ae6fae6e0427b171034 Description: SecuBox WireGuard VPN Dashboard WireGuard VPN management interface for SecuBox. Features: - Interface management (up/down/status) - Peer management with auto-config and QR codes - Traffic statistics and monitoring - Migration from OpenWrt - Three-fold architecture (Components/Status/Access) Package: secubox-yacy Version: 1.0.22-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 91 Depends: secubox-core (>= 1.5.39~), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-yacy/secubox-yacy_1.0.22-1~bookworm1_all.deb Size: 24468 SHA256: 526988cbfd29f74ed2a125123872a66d0a1358e1fdfe145a41dbd1d7fdc0638b SHA1: 50476ab958db55eb5d72692b3531eabcda9920fb MD5sum: 090cf23bdb10be1e0ec3d11dc08678bb Description: SecuBox YaCy — peer-to-peer search engine Hosts YaCy in a Debian LXC at 10.100.0.80 on br-lxc with a sovereign, decentralised search index that does not depend on any third-party search provider. Peer-to-peer discovery, configurable crawl profiles, user-managed blacklist. . The host-side FastAPI control plane runs on /run/secubox/yacy.sock and is exposed by nginx at /api/v1/yacy/. The native YaCy admin UI is iframe-embedded under /yacy/ (proxy_pass to the LXC). . yacyctl exposes the canonical SecuBox three-fold introspection plus peer/index/query/blacklist/crawler nouns matching the SEARCH layer of the CTL grammar (sister to OPS MONITORING / healthctl / grafanactl). Package: secubox-ytsas Version: 0.2.12-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 175 Depends: secubox-core (>= 1.5.39~), lxc, lxc-templates, debootstrap, nftables, sudo, curl, jq Recommends: secubox-peertube, secubox-lyrion, ffmpeg Priority: optional Section: net Filename: pool/main/s/secubox-ytsas/secubox-ytsas_0.2.12-1~bookworm1_all.deb Size: 42416 SHA256: 0cad8c2369ff16d30820c00e515915023fd113adc6439158f12a9c6da2354453 SHA1: dda5076b3201590e2e3f2dbf871b09d96018230b MD5sum: 212ef952fb429690d1c502ed7e89e288 Description: YouTube/web-media SAS for SecuBox (LXC-native) Paste a YouTube (or any yt-dlp-supported site) link, pull it into a staging space and watch it in the browser (HTTP Range) — then decide: Garder (conserve) or leave ephemeral with an opt-in purge TTL. The yt-dlp fetch engine runs isolated in a dedicated LXC (cookie vault for age-gated/private videos stays inside it); the host only proxies an authenticated vhost and mediates the conserve pipeline — video to PeerTube, audio (mp3/flac/…) to Lyrion; ffmpeg (ffprobe) lets the host resolve ambiguous containers precisely. Package: secubox-zia Version: 0.1.24-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 175 Depends: secubox-core (>= 1.5.39~), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip Priority: optional Section: web Filename: pool/main/s/secubox-zia/secubox-zia_0.1.24-1~bookworm1_all.deb Size: 47730 SHA256: c49bfebc6509f658495f2160b9477bb90d976cdb02e9c0c2721fef00a6766ae6 SHA1: c467498905d6caf67006c07dbf2be42eee5c8e95 MD5sum: 8efdc0d89360e6668e17b7f25f8ed023 Description: ZIA Hall — local ARM64 AI, interface to the Hall object bus (POC) ZIA is AletheiaVox/SBXOS's local AI: the human interface to the Hall's object bus. It does not own the data — it interprets and orchestrates objects already exposed by SecuBox (the bus stays the source of truth and applies the ACL). Always local (level 1); delegates to a VHOST (level 2) or optional remote (level 3) when needed. . POC / P1: FastAPI on a Unix socket (/api/v1/zia/), a heuristic responder that calls read-first bus tools (search_objects, get_object, list_recent, open, delegate) so it never invents an object, plus a Chat cardlet for the Hall. A llama.cpp GGUF model (chosen after benchmark on the MOCHAbin) plugs into the same interface later. Package: secubox-zigbee Version: 2.7.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 148 Depends: secubox-core (>= 1.5.39~), secubox-mqtt (>= 2.4), lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, udev, mosquitto-clients Recommends: secubox-iot-hub Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-zigbee/secubox-zigbee_2.7.5-1~bookworm1_all.deb Size: 42500 SHA256: 01a1b461b372f0427773b8200c908a5c16c029164f658c0ec8aa9acdda81d11e SHA1: e94cd963ad5933a197696fbe37e0d39125cf8291 MD5sum: d55b3cc4035f25c9860cd0a4f0302b27 Description: SecuBox Zigbee — Coordinator RF IoT (MIND layer) Hosts zigbee2mqtt 2.x in a Debian bookworm LXC at 10.100.0.111 on br-lxc. . Wraps the upstream zigbee2mqtt daemon (Apache-2.0) with a SecuBox host control plane: FastAPI on /run/secubox/zigbee.sock, reverse-proxied at /api/v1/zigbee/ on the canonical hub vhost. . The Sonoff Zigbee 3.0 USB Plus dongle (CC2652P, VID:PID 1a86:55d4) is detected by a shipped udev rule and exposed inside the LXC at /dev/secubox-zgb. ConBee II (1cf1:0030) and generic CP210x (10c4:ea60) are also recognized. . zigbee2mqtt is wired to the SecuBox broker (secubox-mqtt v2.4) as user z2m on topic zigbee2mqtt/# — credentials are read from /etc/secubox/secrets/mqtt-z2m at install time and rendered into configuration.yaml. network_key and pan_id are GENERATEd by zigbee2mqtt on first run; never hard-coded. . zigbeectl follows the SecuBox CTL grammar: components / status / access + install / reload + device / network / topology / permit-join nouns (list-only in v2.4.0). Package: secubox-zkp Version: 1.2.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-zkp/secubox-zkp_1.2.3-1~bookworm1_all.deb Size: 13370 SHA256: cbcf81465b31f91b7afdd3f443286ec25cd31c25295789de09b4fded2a1e1805 SHA1: 3c2b3d51df2830674722128b1b17e58894b50942 MD5sum: 9011ebebc07c5cc958fd2b95f4c59f2a Description: SecuBox ZKP - Zero-Knowledge Proof Dashboard Zero-Knowledge Proof Hamiltonian management for SecuBox.