Package: secubox-ad-guard Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Installed-Size: 105 Depends: secubox-core (>= 1.0.0), python3-httpx | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-ad-guard/secubox-ad-guard_1.0.0-1_all.deb Size: 18696 SHA256: 387e2c9e10210902cd372d87cc716e0ab982430b52e931618f4c2471e8ac59d5 SHA1: 9064d81a135814a9ef9e029ab5d5da062662660b MD5sum: a74341b6fc51c709c62476a8f3024c65 Description: SecuBox Ad Guard Module Ad and tracker detection with per-device statistics. Features blocklist management, delayed blacklisting workflow, and device-type classification (IoT, phones, smart TVs, etc.). Package: secubox-admin Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 91 Depends: secubox-core (>= 1.0), python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-admin/secubox-admin_1.0.0-1~bookworm1_all.deb Size: 15520 SHA256: 62d82dc085c034097f7ca8d57ed073bf1d358502caa5a47134f0a14e231e8286 SHA1: ee74bf7d9f12100c5c2f3c919e59f8be282ae9e9 MD5sum: 213eaf33ffda5e2734e9d87f093eea0e Description: SecuBox System Administration Dashboard Advanced system administration module for SecuBox. Provides web UI and API for system management tasks. . Features: - System status overview (CPU, memory, disk, load) - Systemd service management (start, stop, restart) - System logs viewer (journalctl integration) - Disk usage monitoring - Process manager (top processes by CPU/memory) - APT updates management - System reboot/shutdown with confirmation . Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-aggregator Version: 0.2.3-1~bookworm1 Architecture: all Maintainer: CyberMind FR Installed-Size: 52 Depends: python3:any, python3, python3-fastapi, python3-uvicorn, secubox-core Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: net Filename: pool/main/s/secubox-aggregator/secubox-aggregator_0.2.3-1~bookworm1_all.deb Size: 12830 SHA256: 8c30f94243c804fc365736624f8d0c41426704c42c9d2f44f7583a07739bf4eb SHA1: 1f5cb8abd5d26e2d353eee0dd3010d9cbed39914 MD5sum: a9540bcfbe1401cf59e9ebe0e55b353c Description: SecuBox API gateway — master ASGI process Mounts SecuBox module FastAPIs as sub-apps under /api/v1/, eliminating the duplicated Python interpreter overhead of running each module as its own uvicorn process. . Pilot mounts (per /etc/secubox/aggregator.toml) save ~30 MB RAM per migrated module versus a per-module systemd unit. Full migration of the ~100 SecuBox modules would free ~3 GB on a typical install. Package: secubox-ai-gateway Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 68 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-ai-gateway/secubox-ai-gateway_1.0.1-1~bookworm1_all.deb Size: 13234 SHA256: c38d3cc135a018c21202a1436c6bb82026824b1921a353e6d1da9458ad52255b SHA1: 9ca78734d431d285c5b7ce45039620996fd53287 MD5sum: 103379675e5c1fd19fde4c608e983b0b Description: SecuBox AI Gateway — data-sovereignty router for AI requests Routes AI inference requests across the available backends with per-request policy enforcement (sovereignty constraints, cost caps, data-class rules). Tracks egress + redirects sensitive prompts to local backends. . Distinct from sibling packages in the AI cluster: - secubox-ai-insights — ML-based threat detection. - secubox-localai — self-hosted LocalAI LLM runtime. - secubox-ollama — Ollama LLM runtime wrapper. - secubox-mcp-server — Model Context Protocol server. Package: secubox-ai-insights Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 104 Depends: secubox-core (>= 1.0), python3 (>= 3.11) Recommends: crowdsec, suricata Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-ai-insights/secubox-ai-insights_1.0.0-1~bookworm1_all.deb Size: 18042 SHA256: b33c3854b2b604e0b1c84016c74b7170599e4d1926276230162e420f45a370d8 SHA1: dbb56731ab0064b07dd1f3a246d86bb4d1845b80 MD5sum: 47b66f19fe0457cfc66946a7b372a49f Description: SecuBox AI Insights - ML-based Threat Detection Machine learning powered threat detection and security insights module. . Features: - ML-based threat detection and classification - Anomaly detection in network traffic - Log analysis with trained models - Threat scoring and risk assessment - CrowdSec and Suricata integration - Model management (train, deploy) - Alert correlation engine . Port Debian bookworm de SecuBox OpenWrt (CyberMind.fr). Package: secubox-auth Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 129 Depends: python3-aiosqlite, python3-fastapi, python3-uvicorn, python3-argon2, python3-pyotp, python3-jose, secubox-core (>= 1.0), secubox-users (>= 1.4) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-auth/secubox-auth_1.0.2-1~bookworm1_all.deb Size: 24440 SHA256: bff5ba79a031ed14d7bb88fe60045829fe11e4be4aff91fb34bc2caef9dacd4e SHA1: 56d81822ca2106d9a45610dc91f114ebe57f19ca MD5sum: 15a043e010d61bdfa422de491612069d Description: SecuBox Auth Guardian Authentification avancée : OAuth2 (Google/GitHub), vouchers, sessions, portail splash. . Port Debian bookworm de luci-app-auth-guardian (SecuBox OpenWrt / CyberMind.fr). Package: secubox-authelia Version: 1.0.9-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 96 Depends: secubox-core (>= 1.0), secubox-users (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, python3-yaml, openssl, curl, jq Recommends: secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-authelia/secubox-authelia_1.0.9-1~bookworm1_all.deb Size: 23610 SHA256: 10adac5e95494d6135b690b96966aa8a9768c9af00004f38bd55e0424aca9fed SHA1: b18d0c97718edc0c6f37c6402bc9c4b6c210e396 MD5sum: fc450cd25c1270560484c1855ed56235 Description: SecuBox Authelia — SSO IdP (AUTH-BRIDGE layer) Hosts Authelia in a Debian bookworm LXC at 10.100.0.20 on br-lxc. File-backend identity provider reading /etc/secubox/users.json (the same argon2-hashed user store already managed by secubox-users) so the canonical SecuBox identity is the single source of truth for SSO. . OIDC clients pre-provisioned for the three native admin UIs that already support OIDC: Grafana, Gitea, Nextcloud. YaCy/RustDesk-web/mitmproxy-web (no native OIDC) get nginx `auth_request` integration to the same Authelia. . Health-banner injected on the Authelia login page via nginx sub_filter so the operator sees the SecuBox system health bar even on the SSO screen. Package: secubox-avatar Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 95 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, python3-pil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-avatar/secubox-avatar_1.0.0-1~bookworm1_all.deb Size: 17646 SHA256: 8d5b34b6c67cd7c63c3aa1f74d6b85671eaf4eb88b1e369c0b0998c7dec493e2 SHA1: dff6118c1a16be1eb87f1656138624d45d762350 MD5sum: 00ff546c683f709b920c87f038c729d4 Description: SecuBox Identity and Avatar Manager Identity and avatar management module for SecuBox services. Provides unified identity management across Gitea, Nextcloud, Mail, Matrix. . Features: avatar upload, identity sync, service integration, P31 Phosphor theme. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-backup Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 92 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-backup/secubox-backup_1.0.1-1~bookworm1_all.deb Size: 16244 SHA256: e7ef9920369d4df06b6a642f1ca5207e8f71c251e8c20264dd86294ea8742ae8 SHA1: 8da0c5dd82051d1f87126cc12f6b8e7e912fc8dd MD5sum: 178428eabae337a9fa581d8a0f2e32cf Description: SecuBox Backup — config + LXC-container backup manager Backup manager covering SecuBox configs (/etc/secubox, nginx, wireguard, haproxy, nftables), service data (/var/lib/secubox, nextcloud, gitea), and LXC containers with automatic stop/start around snapshots. Web dashboard with stats and history. Package: secubox-c3box Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 66 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-c3box/secubox-c3box_1.0.0-1~bookworm1_all.deb Size: 11042 SHA256: 1d7322199366655730aeed636405653ee2d855bccf64d5303520cb02b1dad4ed SHA1: 14de50f6eb2c5bf405d3ea6a8464ac3597a213b7 MD5sum: ceac9785b6521a74c354495527407cba Description: SecuBox C3box Module C3Box Services Portal Package: secubox-cdn Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 132 Depends: secubox-core (>= 1.0), nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-cdn/secubox-cdn_1.0.4-1~bookworm1_all.deb Size: 22998 SHA256: 8d2e54747326182b3e8f4257c1d93b0a76646ef96f300a3fc16588ef92d47881 SHA1: 009ee86d36c8842cecf00afa9ad3a2625c534f61 MD5sum: 4c47eb66da73f39dae32f40e9ae3dd0d Description: SecuBox CDN Cache Cache CDN local : économies bande passante, politiques par domaine/extension, stats hit ratio. . Port Debian bookworm de luci-app-cdn-cache (SecuBox OpenWrt / CyberMind.fr). Package: secubox-certs Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: secubox-core (>= 1.0.0), python3, python3-fastapi, python3-uvicorn, python3-pydantic, certbot Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-certs/secubox-certs_1.0.0-1~bookworm1_all.deb Size: 16900 SHA256: 5b828eeae7ef2947c5a075199d364e5d1cd1cd42d5514f2c4fe47ab43f4c6aea SHA1: dd8afc9c868082230a3241ad01aff6a9dff6d00e MD5sum: a039605bca9a4edd85f41f32922dab65 Description: SecuBox ACME / TLS certificate manager FastAPI control plane managing the HAProxy certificate bundle at /data/haproxy/certs/, certbot renewals, and the WebUI surface at /certs/ on the canonical hub vhost. Reconstructed from the running deployment on gk2 (closes #306 follow-up — the module existed but had no source-side package). Package: secubox-cloner Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 58 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Priority: optional Section: admin Filename: pool/main/s/secubox-cloner/secubox-cloner_1.0.0-1_all.deb Size: 9476 SHA256: 3a98ecaf5c0f864fb143cf9d483032bcd570d9406a31bbf853ecd4c883f2adbf SHA1: 4ae4bd852671ff343af592000c0ac6d9f2759578 MD5sum: 0b8aa65c8975a7b671fb65632f33fb8a Description: SecuBox Cloner - System backup and restore System backup and restore for SecuBox. Create, manage, and restore compressed backups of system configuration and data. Package: secubox-config-advisor Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 67 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-config-advisor/secubox-config-advisor_1.0.1-1~bookworm1_all.deb Size: 11752 SHA256: b44be0c399c0d6fecb502a9bc1e523f249e8ca85cc3694d7f2d5283b702b88cd SHA1: 4ce2ee498637c730a5080da103db1b4929cbab06 MD5sum: 7ffc8da90117ae46ed392ca4db4a3174 Description: SecuBox Config Advisor — security configuration audit + recommendations Scans installed SecuBox config (nftables rules, nginx vhosts, systemd unit hardening, AppArmor profiles, file permissions) and surfaces deviations from the CSPN-aligned baseline. Read-only; produces an actionable recommendations report rather than auto- applying fixes. Package: secubox-console Version: 1.2.0-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 144 Depends: python3 (>= 3.11), python3-httpx | python3-pip, python3-rich Recommends: secubox-core (>= 1.1.0), python3-pip Suggests: secubox-hub, secubox-watchdog, secubox-soc-gateway Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-console/secubox-console_1.2.0-1_all.deb Size: 24890 SHA256: 9681786c332409c5b3ee7294331b07a260a55d0b5df746069273268ac63832b3 SHA1: 5da818be2dfbb47d8f20763d6a95dce6baf96391 MD5sum: 159eea801b1a3e25491da484ec23b689 Description: SecuBox Console TUI — Terminal Dashboard Terminal-based dashboard for SecuBox appliances using Python Textual. Provides system monitoring, service management, and network status via a TUI that auto-starts on TTY1 when GUI kiosk is disabled. . Features: - Live system metrics (CPU, memory, disk) - Service management with start/stop/restart - Network interface status with WAN/LAN classification - Real-time log viewer with filtering - Vim-style keyboard navigation - Board-specific theming (MOCHAbin, ESPRESSObin, etc.) . Port Debian bookworm de SecuBox-DEB (CyberMind.fr). Package: secubox-cookies Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 105 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: secubox-mitmproxy Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-cookies/secubox-cookies_1.0.0-1~bookworm1_all.deb Size: 15958 SHA256: 42524c280cbd5f65dc73a3706d2f51bba9e230579204b9bdc76d73ab03f74b63 SHA1: 972693b018953c066270a4dcde8fd018c700c1df MD5sum: 530208cf639a6e4758eeff0b8c4de0ef Description: SecuBox Cookie Tracker Cookie tracking, analysis, and privacy compliance monitoring. Provides third-party cookie detection, tracker identification, GDPR compliance checking, policy enforcement, and alerts. Package: secubox-core Version: 1.1.10-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 255 Depends: python3:any, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jose, python3-httpx | python3-pip, nginx, nftables, openssl Recommends: crowdsec, wireguard-tools Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-core/secubox-core_1.1.10-1~bookworm1_all.deb Size: 58848 SHA256: 6ebb73d5d97445f92c15864750dcbed2d5f288f01c7b5ef7121173a79105f0bf SHA1: 640b927865671dd2d7d3eb6a94e46988ad187be3 MD5sum: afdfac87bfc50d7f39c33c79a77bd072 Description: SecuBox-DEB — bibliothèque centrale et infrastructure Bibliothèque Python partagée (JWT auth, config TOML, logging structuré), configuration nginx reverse proxy, et scripts d'initialisation firstboot. . Ce paquet est requis par tous les modules secubox-*. Port Debian bookworm du cœur de SecuBox OpenWrt (CyberMind.fr). Package: secubox-crowdsec Version: 1.0.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 304 Depends: secubox-core (>= 1.0), crowdsec Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-crowdsec/secubox-crowdsec_1.0.7-1~bookworm1_all.deb Size: 54032 SHA256: acff260af3020688a5df7484a06855709d49a200a6151360c996125ab2091497 SHA1: a80e4a3fb256242ac96b628bca4cc57e8670556b MD5sum: d10053e58a84ba26ef70eb9e1f615cba Description: SecuBox CrowdSec Dashboard Tableau de bord CrowdSec : décisions, alertes, bouncers, métriques géographiques. . Port Debian bookworm de luci-app-crowdsec-dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-cve-triage Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 97 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-cve-triage/secubox-cve-triage_1.0.1-1~bookworm1_all.deb Size: 17124 SHA256: bcfc9844a24a29a47e9d1f7e9781c9e1a7d2eb46f385e3d8188e2efc69d9ea58 SHA1: 03b87314538edda0666057ebfbe2ad2f49bf7848 MD5sum: c82f9a12c08d0508296144ddede6e40f Description: SecuBox CVE Triage — vulnerability assessment workflow CVE triage dashboard: pull advisories, score against the installed package set, track remediation. Maintains its own data store under /var/lib/secubox/cve-triage/. . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella alert dashboard (CrowdSec + Suricata + WAF), not vulnerability-focused. - secubox-threat-analyst — AI agent for CrowdSec scenarios. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables IP blocklist enforcement. - secubox-network-anomaly — DNS-log anomaly detection. - secubox-openclaw — OSINT / reconnaissance. Package: secubox-cyberfeed Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 81 Depends: secubox-core (>= 1.0.0), python3-httpx | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-cyberfeed/secubox-cyberfeed_1.0.0-1~bookworm1_all.deb Size: 13858 SHA256: 38015e24ff2434c56ae3a20dadb3e4ba5fc06a7ed6a58f69e715ac58f4121ba5 SHA1: 6af414e1189f321b96a418f6bf79d0c760808ce2 MD5sum: 76b37065d0050528736a79cff94b0b4a Description: SecuBox CyberFeed - Threat Intelligence Feed Aggregator Aggregates threat feeds from multiple sources (abuse.ch, Spamhaus, etc.) and provides unified blocklist management for IPs, domains, and IoCs. . Features: - Multi-source threat feed aggregation - IP and domain blocklist management - Threat indicator (IoC) tracking - Scheduled feed updates - Feed health monitoring - Export to nftables, unbound, dnsmasq formats Package: secubox-daemon Version: 0.1.0-1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 11289 Depends: wireguard-tools Recommends: secubox-core Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-daemon/secubox-daemon_0.1.0-1_arm64.deb Size: 3328404 SHA256: 7c188943022995912cee9a077a79906cecec444aae23354898811bdd7e2b8621 SHA1: a7022f7e0bcf849626002e7bc8e37ba27a8b8ae9 MD5sum: 7f827bef30a0b379c739093200dec973 Description: SecuBox Mesh Daemon - WireGuard mesh with ZKP authentication Go-based mesh networking daemon for SecuBox featuring: - mDNS peer discovery - WireGuard mesh topology with automatic mesh gate election - GK-HAM-2025 Zero-Knowledge Proof authentication with 24h PFS - SQLite telemetry with metrics collection Includes secuboxd daemon, secuboxctl CLI, and c3box dashboard. Package: secubox-daemon-c3box Source: secubox-daemon Version: 0.1.0-1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 4892 Depends: secubox-daemon Conflicts: secubox-c3box (<< 1.1~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-daemon/secubox-daemon-c3box_0.1.0-1_arm64.deb Size: 1713854 SHA256: 6563c2ac24bda690f53ee399165a25e9bcc6fb26e95bddfc1a65c20c2a08261c SHA1: 64cee26a937b2cded793d6a2e4192b9c70b1ddbf MD5sum: 85ca6748e71dac8803caa93fa0f76b4c Description: SecuBox C3BOX - Situational Awareness Dashboard (Go variant) Web-based situational awareness dashboard for SecuBox mesh networks. Visualizes mesh topology, node status, and ZKP credentials. Connects to secuboxd via Unix socket. . This is the Go-built variant shipped alongside secubox-daemon. It conflicts with the older Python secubox-c3box package; install only one of the two on a given host. Package: secubox-defaults Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 15 Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-defaults/secubox-defaults_1.0.0-1~bookworm1_all.deb Size: 2360 SHA256: 41d2bb07dc1f75a9167cf705bebc572f4794ac84f3b52b2bbed7a3ba2344d60c SHA1: 825ebf511149db46f3d47a02d231e11d69082320 MD5sum: 6b534bcf7834a54950d36314e8fc864b Description: SecuBox board identity defaults Ships /etc/default/secubox, the single source of truth for SECUBOX_HOSTNAME and SECUBOX_DOMAIN_SUFFIX. Other SecuBox packages depend on this for the canonical admin URL pattern admin... Package: secubox-device-intel Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-device-intel/secubox-device-intel_1.2.2-1~bookworm1_all.deb Size: 17950 SHA256: 2ba08b546047d31999e89a63145bbbb83b8fc9868b05088680ceb7cfcdf03c09 SHA1: 75b4139610ae283cbf9bea7011e993f609e4b42f MD5sum: e1f780c90b8ed251de7f25d0472135d2 Description: SecuBox Device Intel — network asset discovery + fingerprinting Scans the LAN for connected devices, fingerprints them (OS, vendor, SecuBox/OpenWrt theme markers, LuCI version), and tracks asset inventory over time. Distinct from secubox-watchdog (which monitors *known* services for health, not unknown devices). . Distinct from sibling packages in the monitoring cluster: - secubox-watchdog — LXC + service + HTTP health monitor. - secubox-health-doctor — vital-services check. - secubox-netdata, secubox-glances, secubox-metrics — system metrics dashboards. Package: secubox-dns Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 83 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-dns/secubox-dns_1.0.1-1~bookworm1_all.deb Size: 13700 SHA256: 28522c1d2bc4fec3b6a859963215fa60dbf9a4b821214c2a4b0bb6ccebc38989 SHA1: b3a5fb6304c7dfb51c38a21306bc74f5f3905044 MD5sum: b01c6a723c0777b8d7f0fc524cbf9faa Description: SecuBox DNS — authoritative BIND zone manager BIND zone management dashboard for SecuBox: create, edit, and serve authoritative DNS records you own. . Distinct from sibling packages in the DNS cluster: - secubox-dns-provider — external registrar API (OVH, Cloudflare, Gandi, Route53). Install if you publish records *at a registrar*. - secubox-vortex-dns — recursive DNS firewall with RPZ + threat feeds (unbound-backed). - secubox-dns-guard — DNS anomaly detection (dnsmasq-backed). - secubox-ad-guard — ad/tracker DNS blocking with per-device stats. Package: secubox-dns-guard Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 60 Depends: secubox-core (>= 1.0.0) Recommends: dnsmasq Priority: optional Section: admin Filename: pool/main/s/secubox-dns-guard/secubox-dns-guard_1.0.1-1~bookworm1_all.deb Size: 11566 SHA256: 7afcad5d946f9bb157991b5aaa33818bc7eabe65daf7989d257489d99e21e083 SHA1: 87797a8d74b9341af976f6cd20671dc4798e1758 MD5sum: 276f501653ee2a376523f3fc727b3d4f Description: SecuBox DNS Guard — anomaly detection + dnsmasq blocking Watches recursive DNS resolution for anomalous patterns and pushes blocklists to dnsmasq via /etc/dnsmasq.d/secubox-blocklist.conf. . Distinct from sibling packages in the DNS cluster: - secubox-vortex-dns — full recursive DNS firewall with RPZ (unbound-backed; inline blocking before resolution). - secubox-ad-guard — ad/tracker-specific blocking with per-device stats. - secubox-dns — authoritative BIND zone manager (publishing). - secubox-dns-provider — external registrar API. Package: secubox-dns-provider Version: 1.0.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 125 Depends: secubox-core (>= 1.0.0), python3-httpx | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-dns-provider/secubox-dns-provider_1.0.3-1~bookworm1_all.deb Size: 21866 SHA256: 20d51bb8cc92a7e9fc949c5e8c404a9f8694b8f6fe210c6356f020532145537e SHA1: cbf388c905887999d447fe44be576c3154d2a4f8 MD5sum: 0526c0a5bb46f66e18e5126647c7f578 Description: SecuBox DNS Provider Module Multi-provider DNS API management for SecuBox. Supports OVH, Gandi, Cloudflare, and AWS Route53. Features ACME DNS-01 challenge support, Dynamic DNS, zone import/export, and comprehensive audit logging. Package: secubox-domoticz Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 102 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip Priority: optional Section: net Filename: pool/main/s/secubox-domoticz/secubox-domoticz_1.0.0-1~bookworm1_all.deb Size: 16064 SHA256: 81640045388a18c9a20a6dd1bd0a076572a13bcbb0a67e9746a5e4c6748a32d3 SHA1: 3b213d74680ca7af7ad1fdf4f87905061df0986a MD5sum: a5a4c2540d14473a318d081a9e28f6a3 Description: Domoticz Home Automation for SecuBox Debian bookworm port providing Domoticz home automation management. Provides FastAPI backend on /api/v1/domoticz/ via Unix socket. . Features: - Docker/Podman container management for Domoticz - Device management (switches, sensors, lights) - Room/scene organization - Hardware protocol support (Z-Wave, Zigbee, 433MHz) - Event logging and graphs - Notification configuration - CRT-light P31 phosphor theme with cyan accents Package: secubox-dpi Version: 1.1.4-1~bookworm1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 2217 Depends: secubox-core (>= 1.0), iproute2, libndpi-bin Recommends: netifyd, secubox-netifyd Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-dpi/secubox-dpi_1.1.4-1~bookworm1_arm64.deb Size: 779884 SHA256: 7172e82216d1cdb3485406158f9aa5fa5888b7f8facb492b8804e03d0a512f60 SHA1: fd84d831d843c46cfa29f88f02ce268007a6a0bc MD5sum: 52e864feb0217e55bc9f175510644d78 Description: SecuBox DPI Analytics — netifyd-backed app/protocol classification Analytics layer on top of netifyd: top applications, top protocols, bandwidth-by-app, bandwidth-by-device, talkers, and risk visualization. Configures tc mirred to ifb0 for inline inspection. . Complements secubox-netifyd, which manages the netifyd daemon lifecycle (start/stop/config/alerts). Install both for the full daemon-control + analytics experience. For TLS fingerprinting and nDPId-engine analysis, install secubox-ndpid instead — it covers a different DPI engine and is not provided by this package despite historical "dual-stream" framing. . Port Debian bookworm de luci-app-netifyd-dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-droplet Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 115 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-aiofiles, secubox-metablogizer (>= 1.2), rsync, unzip, python3 Priority: optional Section: net Filename: pool/main/s/secubox-droplet/secubox-droplet_1.1.1-1~bookworm1_all.deb Size: 22098 SHA256: 5410b7c67efbdf076c7ec734abc1e872aa6478b7d46b6bf4804fd7d2bf36820f SHA1: 4b5bddf36f17adf9056a96a8781ae8de2aea0323 MD5sum: 1c15d9a40fb60ef1a706380a0e1ca2ad Description: SecuBox Droplet File Publisher Dashboard pour la publication de fichiers et sites statiques. Port Debian bookworm de luci-app-droplet (SecuBox OpenWrt). Package: secubox-exposure Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 87 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: tor Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-exposure/secubox-exposure_1.0.0-1~bookworm1_all.deb Size: 15018 SHA256: aa5f2ecc1d8df52581296d5ac25c40c7f88f0a57112975650351ff79c4e9b880 SHA1: bce55b22943008c6327b8ca250d43c08a812c55b MD5sum: 4012f3cd196a14c266288a13ed2e0d51 Description: SecuBox Exposure Manager Service exposure management for SecuBox. Provides Tor hidden services, SSL backends, DNS registration, and mesh network exposure capabilities. Package: secubox-eye-remote Version: 2.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 230 Depends: secubox-core (>= 1.0), python3, python3-fastapi, python3-uvicorn, python3-websockets, python3-qrcode, dnsmasq-base Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-eye-remote/secubox-eye-remote_2.1.0-1~bookworm1_all.deb Size: 41050 SHA256: c19a51b4d7f4036407cdd49bbcd8418b711ab7fbc9c1ba6ed0aa0a54445427c3 SHA1: ca373c38e0f87e45c0e8d39e5df8870e5a3617e8 MD5sum: 4bc18b62c2185768cf77075b115cecdf Description: SecuBox Eye Remote Management Module Management API and WebUI for Eye Remote devices (HyperPixel 2.1 Round on Raspberry Pi Zero W). . Features: - Device pairing with QR codes - Real-time metrics streaming - Remote commands (screenshot, reboot, OTA) - Serial console passthrough Package: secubox-eye-square Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 119 Depends: secubox-core, secubox-eye-remote, python3-pil, python3-evdev, python3-fastapi, python3-uvicorn, python3-websockets, python3-httpx, apparmor-utils Priority: optional Section: admin Filename: pool/main/s/secubox-eye-square/secubox-eye-square_1.0.4-1~bookworm1_all.deb Size: 25612 SHA256: 746f778031df2532e023824d493a055341fceb8edc62f58731867b4b2f9f89a9 SHA1: cf698275551f99167dc73379cf202ea395c60a77 MD5sum: 5ddf689407c20a0064ed04a1247e58d0 Description: SecuBox Eye Remote — Square variant (Pi 4B / Pi 400 + 7" 800x480) Pillow-on-framebuffer single-process kiosk. Renders the SecuBox dashboard directly to /dev/fb0 — no X server, no Qt, no Chromium. Companion to the round/ Pi Zero W variant (also Pillow+fb). . Includes a privileged Helper FastAPI on a Unix socket (SO_PEERCRED) for USB gadget mode switching, service restart, lockdown (nftables atomic swap), and console streaming. Package: secubox-fmrelay Version: 0.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 86 Depends: secubox-core (>= 1.0), python3-uvicorn, python3-fastapi, rtl-sdr, ffmpeg, icecast2, curl Recommends: secubox-sentinelle-gsm (>= 0.4) Homepage: https://cybermind.fr/secubox Priority: optional Section: sound Filename: pool/main/s/secubox-fmrelay/secubox-fmrelay_0.1.0-1~bookworm1_all.deb Size: 19282 SHA256: 96a8b326abf93aa40c06161e1013459062d5ee5340fbdf2a12a577484e5790e1 SHA1: 86b0a27680e3882f2fc4fbaa10bf7fef7675315c MD5sum: 85b8eaaf7bf6a2155288786351bb06e3 Description: SecuBox FM Relay — rtl_fm to Icecast MP3 mount with live RDS metadata Captures FM broadcast audio with rtl_fm, encodes it to MP3 with ffmpeg (libmp3lame), and feeds an Icecast2 mount that the SecuBox webradio module serves and that Lyrion can ingest as a Favourite remote URL. . A parallel rtl_fm | redsea pipeline decodes the 57 kHz RDS subcarrier (PI / PS / RT) and POSTs each RadioText update to Icecast2's admin metadata endpoint so HTTP listeners see "Artist - Title" change live in their player. . Shares the RTL-SDR with secubox-sentinelle-gsm. Don't run a GSM scan or RDS sweep while a relay is active — the bus contention will crash both. Cross-package device-claim coordination is a planned v0.2 follow-up. Package: secubox-full Version: 1.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-core (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-system (>= 1.0), secubox-crowdsec (>= 1.0), secubox-waf (>= 1.0), secubox-vortex-firewall (>= 1.0), secubox-auth (>= 1.0), secubox-nac (>= 1.0), secubox-wireguard (>= 1.0), secubox-mesh (>= 1.0), secubox-p2p (>= 1.0), secubox-netmodes (>= 1.0), secubox-dpi (>= 1.0), secubox-qos (>= 1.0), secubox-traffic (>= 1.0), secubox-vhost (>= 1.0), secubox-haproxy (>= 1.0), secubox-cdn (>= 1.0), secubox-dns (>= 1.0), secubox-vortex-dns (>= 1.0), secubox-meshname (>= 1.0), secubox-netdata (>= 1.0), secubox-mediaflow (>= 1.0), secubox-device-intel (>= 1.0), secubox-watchdog (>= 1.0), secubox-metrics (>= 1.0), secubox-soc (>= 1.0), secubox-roadmap (>= 1.0), secubox-mail (>= 1.0), secubox-mail-lxc (>= 1.0), secubox-webmail (>= 1.0), secubox-webmail-lxc (>= 1.0), secubox-users (>= 1.0), secubox-gitea (>= 1.0), secubox-nextcloud (>= 1.0), secubox-droplet (>= 1.0), secubox-streamlit (>= 1.0), secubox-streamforge (>= 1.0), secubox-metablogizer (>= 1.0), secubox-publish (>= 1.0), secubox-c3box (>= 1.0), secubox-backup (>= 1.0), secubox-tor (>= 1.0), secubox-exposure (>= 1.0), secubox-zkp (>= 1.0), secubox-mitmproxy (>= 1.0), secubox-repo (>= 1.0), secubox-hardening (>= 1.0) Recommends: crowdsec, netdata, wireguard-tools, netifyd, tor, mitmproxy, yggdrasil Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-full/secubox-full_1.2.0-1~bookworm1_all.deb Size: 2142 SHA256: acf463a5674efb4d633cce385de4bc1e69f012f5fb74648e2769493ab29aef80 SHA1: 91ad950af46fec8cd2e6671b379434254568881d MD5sum: 4e014c396c5ffb5b491fa6ad031ff064 Description: SecuBox Full — All 49 modules Metapackage installing all SecuBox modules for full functionality. Recommended for MOCHAbin and other devices with 4GB+ RAM. . Core: hub, portal, system Security: crowdsec, waf, vortex-firewall, auth, nac, hardening, mitmproxy Network: wireguard, mesh, p2p, netmodes, dpi, qos, traffic, vhost, haproxy, cdn DNS: dns, vortex-dns, meshname Monitoring: netdata, mediaflow, device-intel, watchdog, metrics Dashboard: soc, roadmap Privacy: tor, exposure, zkp Services: mail, webmail, users, gitea, nextcloud Publishing: droplet, streamlit, streamforge, metablogizer, publish, c3box Infrastructure: backup, repo Package: secubox-gitea Version: 1.4.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 170 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-gitea/secubox-gitea_1.4.3-1~bookworm1_all.deb Size: 33638 SHA256: a6589256b5ec35d46f6ce5a2ea97770ae996a529cf64811bbdf92e6ef3bea467 SHA1: f890d0ab00bff7c44b19b4a039cb6ac9d95163fd MD5sum: df864c05ae2100b0981af82ad3cbbc5c Description: SecuBox Gitea — self-hosted Git server (LXC) Manages a Gitea Git server (private repositories, issues, PRs) running in its own LXC container. SecuBox wires up nginx vhost, ACME TLS, backup integration, and a web management dashboard around the upstream Gitea install. Package: secubox-glances Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 90 Depends: secubox-core (>= 1.0), glances, python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-glances/secubox-glances_1.0.0-1~bookworm1_all.deb Size: 15804 SHA256: c3127796d20e77037d07c381e2f249f425eca8a07069a32b0e70abbc4d66c8e5 SHA1: e98e40ba8d4e1c2b82c3fe7e55236de69c3457cf MD5sum: 53f2d93740fd67de225c5e200f169b0e Description: SecuBox Glances Dashboard System monitoring module wrapping the Glances monitoring tool. Provides real-time CPU, memory, disk, network stats with P31 Phosphor theme. . Features: hardware sensors, process list, historical data, service control. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-gotosocial Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 104 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-gotosocial/secubox-gotosocial_1.0.0-1~bookworm1_all.deb Size: 16418 SHA256: 2b4fc8660125b6f8ec72897a63d261232cd2c0ceeee4e59634ac68da370f1021 SHA1: d0e1ff408de0c9ded1734c515226366b05909d2d MD5sum: 63e2fc0f3cff4757d5e2ea8cbf6e97f7 Description: GoToSocial Fediverse server management SecuBox module for managing GoToSocial ActivityPub server via Docker/Podman. Provides container management, account management, federation controls, media storage, moderation tools, and emoji management. . GoToSocial is a fast, lightweight ActivityPub social network server, compatible with Mastodon and the wider Fediverse. . Provides FastAPI backend on /api/v1/gotosocial/ via Unix socket. Package: secubox-grafana Version: 1.0.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 80 Depends: secubox-core (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq Recommends: secubox-mitmproxy, secubox-metrics Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-grafana/secubox-grafana_1.0.7-1~bookworm1_all.deb Size: 16480 SHA256: 7f7083131c5b83251dab866aa1ba4dea0aea6b1b4cf1196fc033797b5553e43a SHA1: 37e4beb48c753113ca52ba1c637fd70c2cae25ba MD5sum: f9cb2fa9d1192de54171f1eb78590381 Description: SecuBox Grafana — security metrics dashboards Hosts Grafana OSS in a Debian LXC at 10.100.0.70 on br-lxc, with pre-provisioned dashboards for the SecuBox security stack: nftables, crowdsec, suricata, cookie-audit, mitmproxy WAF and per-service systemd health. . The host-side FastAPI control plane runs on /run/secubox/grafana.sock and is exposed by nginx at /api/v1/grafana/. The native Grafana UI is iframe- embedded under /grafana/ (proxy_pass to the LXC). . grafanactl exposes the canonical SecuBox three-fold introspection (components/status/access) plus dashboard/datasource/alert/user/api-key nouns matching the OPS MONITORING layer of the CTL grammar. Package: secubox-haproxy Version: 1.3.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 257 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, secubox-defaults Recommends: haproxy, secubox-waf Priority: optional Section: net Filename: pool/main/s/secubox-haproxy/secubox-haproxy_1.3.1-1~bookworm1_all.deb Size: 43178 SHA256: 9eba0ca8e19e2d17be1ccc87c6db0106ce65e1e660496f61e562eae339ed4824 SHA1: bce16dc0132da59f229f0f5f9c3c8a9adb908370 MD5sum: b8c65a05cc5e773ab5e500ecf38a5447 Description: SecuBox HAProxy Dashboard Dashboard HAProxy avec gestion des vhosts et backends. Port Debian bookworm de luci-app-haproxy (SecuBox OpenWrt). . Features: - WAF integration for MITM traffic inspection - Per-vhost WAF bypass controls - CrowdSec ban synchronization - Dynamic route syncing with WAF module Package: secubox-hardening Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 85 Depends: secubox-core, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Recommends: auditd Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-hardening/secubox-hardening_1.0.2-1~bookworm1_all.deb Size: 15616 SHA256: a8cb323065af7fa18ea5b5202be2ec06d5b050911dbf622ab8c541238d88bc0b SHA1: d6cc6eaf29412cf3eb4e5bbe624a06181048c1b4 MD5sum: 80f08929a9dfb9b3ec6eedb7ca527694 Description: SecuBox Kernel and System Hardening Kernel and system hardening for SecuBox appliances. . Features: - Kernel sysctl hardening (ASLR, kptr_restrict, etc.) - Network hardening (SYN cookies, reverse path filter) - Module blacklist (uncommon protocols, filesystems) - Security benchmark tool . Based on ANSSI/CIS benchmark recommendations. Package: secubox-health-doctor Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 42 Depends: python3:any, secubox-core (>= 1.1), python3-uvicorn, python3-fastapi, lxc, systemd Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-health-doctor/secubox-health-doctor_1.0.1-1~bookworm1_all.deb Size: 9198 SHA256: 24de222510fe4eafe30d9122c95c48f0a5c4f20d7a0d0021b01213b5e38d9873 SHA1: 6995814d165eef589a68ea0b27aebdfdf67a3f9b MD5sum: 0451253d0c0bbdad127a4fcce7a7bad2 Description: SecuBox vital-services health monitor Daemon + CLI (healthctl) + FastAPI that runs periodic checks against the vital services on a SecuBox board (haproxy, mitmproxy LXC, gitea LXC, nginx, mail LXC, metrics socket, cookie-audit ledger freshness, crowdsec, filesystems, act-runner). State transitions emit CSPN-compatible journal events. Read-only API consumed by the portal banner. Package: secubox-hexo Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 116 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: web Filename: pool/main/s/secubox-hexo/secubox-hexo_1.0.0-1~bookworm1_all.deb Size: 17514 SHA256: b64919af5d2d83be161039c2bc5871e792ca9e8297abf8fabcfe98405f51bae2 SHA1: 608772fe56f3810aebdb60feb9e8c082f48c1b37 MD5sum: 8621fa7f789343253a3278a1af8b53e9 Description: Hexo static blog generator management SecuBox module for managing Hexo static site generator via Docker. Provides blog creation, theme/plugin management, post editing, and deployment to various targets. . Features: - Multiple blog management - Theme gallery and installation - Plugin management (sitemap, RSS, etc.) - Post editor with markdown preview - Preview server with live reload - Deploy to Git, rsync, SFTP . Provides FastAPI backend on /api/v1/hexo/ via Unix socket. Package: secubox-homeassistant Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 107 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip Recommends: docker.io | podman, lxc Priority: optional Section: net Filename: pool/main/s/secubox-homeassistant/secubox-homeassistant_1.0.0-1~bookworm1_all.deb Size: 16262 SHA256: 2c10b7ac82350d9054d16c7b8557febc7564e50e3ef04ad39d370fdb75a476df SHA1: c0aabd607c8ef1c41b3867876bb0894a7741dca2 MD5sum: 7b25f4af2f7f11e98e40a846612df3f8 Description: Home Assistant IoT Hub for SecuBox Debian bookworm port of Home Assistant integration module. Provides FastAPI backend on /api/v1/homeassistant/ via Unix socket. . Features: - Docker/Podman/LXC container management for Home Assistant - Entity and device browser with controls - Automation management with enable/disable toggles - Scene management and activation - HACS (Home Assistant Community Store) integration - Backup and restore functionality - CRT-light P31 phosphor theme with HA blue accents Package: secubox-hub Version: 1.5.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 1023 Depends: secubox-core (>= 1.0), fonts-noto-color-emoji Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-hub/secubox-hub_1.5.0-1~bookworm1_all.deb Size: 168602 SHA256: da4aa238021d20d32098b00ce41f64058f85654572c6963fc4f04446fd0e027b SHA1: 4f8f9766691ab7d615805716bafc941fd2fb6bf4 MD5sum: e991b99f64fcbe9b8eaae02bce14b249 Description: SecuBox Hub — Tableau de bord central Hub central SecuBox : lanceur de modules, état des services, alertes consolidées. . Port Debian bookworm de luci-app-secubox (SecuBox OpenWrt / CyberMind.fr). Package: secubox-identity Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-identity/secubox-identity_1.0.1-1~bookworm1_all.deb Size: 12828 SHA256: e1a0fc678eca06874673ffb8c807cafc27365beac699eaee734949970dbb914b SHA1: ce037f35d501da47fb7b1234256e4d9b5eeebb40 MD5sum: 079df1b64e4e7166b466a1c2afbaa464 Description: SecuBox Identity — decentralized identity management Decentralized identity (DID) management for SecuBox: identity issuance, verification, and lifecycle. Distinct from user-account management (which is secubox-users' job). . Distinct from sibling packages in the identity stack: - secubox-users — local user accounts (Argon2id hashes, TOTP, RBAC). - secubox-auth — JWT auth guardian / session middleware. - secubox-portal — web login portal. - secubox-authelia — Authelia SSO IdP (LXC). - secubox-avatar — profile image + display-name manager. Package: secubox-interceptor Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 93 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: secubox-mitmproxy, secubox-waf, openssl Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-interceptor/secubox-interceptor_1.0.0-1~bookworm1_all.deb Size: 14590 SHA256: dde256e55be0e3885b55a374aad0ef2b4c7aebfd7252eb6dc7486e1acdbc60d4 SHA1: b4231809009c83c729d5421413737dbf46af0975 MD5sum: f05c66ac131d8d7ba22cc8b6a0462013 Description: SecuBox Traffic Interceptor HTTP/HTTPS traffic interception and analysis module. Provides SSL/TLS inspection, request/response modification, traffic recording, protocol analysis, content filtering, and WAF integration. Package: secubox-iot-guard Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-iot-guard/secubox-iot-guard_1.0.1-1~bookworm1_all.deb Size: 18102 SHA256: 5de1bcc6cf1b7f5b5aff4a7283b8039787e86381a7c8a0b18549b0ce2fcdec24 SHA1: 147504bbbb4b598960512ced0dd1d1fd85c9ad40 MD5sum: 5d209b600deab5c6ce3a44df9386be73 Description: SecuBox IoT Guard — IoT device discovery + segmentation Inventories IoT devices on the LAN (vendor MAC OUI, mDNS/SSDP/MQTT fingerprints), classifies them by type, and applies nftables micro-segmentation policies to keep IoT traffic isolated from trusted hosts. Package: secubox-ipblock Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 86 Depends: secubox-core (>= 1.0.0), nftables, curl Priority: optional Section: admin Filename: pool/main/s/secubox-ipblock/secubox-ipblock_1.0.0-1~bookworm1_all.deb Size: 14806 SHA256: c05fb7f2ef456f31c00597ae5f65d165f10f844fb101304d24626f9175f26f5e SHA1: e9a6e398f2ad4c3a9c5392f47cf3cd8b0f8e97c5 MD5sum: 596ccc3420b30dd57b644a5423def8e4 Description: SecuBox IP Blocklist Manager IP blocklist management module for SecuBox. Features include: - Multiple blocklist sources (Spamhaus, AbuseIPDB, FireHOL, etc.) - Custom blocklist rules - nftables set integration - Whitelist management - Auto-update scheduling - Block statistics and history - Import/export lists Package: secubox-jabber Version: 1.0.0-1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 54 Depends: secubox-core, python3, python3-uvicorn | python3-pip, python3-fastapi | python3-pip, nginx Recommends: prosody Priority: optional Section: net Filename: pool/main/s/secubox-jabber/secubox-jabber_1.0.0-1_all.deb Size: 8688 SHA256: a5ed32b7edc7c54c58661e37cfa237b5b78b261b9dbb0bcefa53abaf3a3198e6 SHA1: 938ab454c10e7b60e9c19182b50e1a0d4d888e84 MD5sum: 52b2c5b7c81fef46709354f857fd71e8 Description: SecuBox Jabber XMPP Server Prosody XMPP server management for SecuBox. User accounts, virtual hosts, and federation. Package: secubox-jellyfin Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 80 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-jellyfin/secubox-jellyfin_1.0.0-1~bookworm1_all.deb Size: 12918 SHA256: 0c132225908104ef23458dc52c012fb8a792e22a30e5b581006ac83a40c97ebe SHA1: 06e066ee1315340a235380eb77ace2e3a269d3ef MD5sum: 201518526862dd87bf8788542a834a9b Description: Jellyfin media server management SecuBox module for managing Jellyfin media server via Docker. Provides container management, library configuration, backup/restore, and hardware acceleration support. . Ported from OpenWRT luci-app-jellyfin. Provides FastAPI backend on /api/v1/jellyfin/ via Unix socket. Package: secubox-jitsi Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 98 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman, docker-compose | podman-compose, nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-jitsi/secubox-jitsi_1.0.0-1~bookworm1_all.deb Size: 17532 SHA256: 6d30884df80906694cbd9d9f1974eab977a4280be63d4e502a51eb9973a6d8d0 SHA1: 85cb6da90423a865ff1d624377a0a690bd641474 MD5sum: 6d9323e6439536f7a489cf53ec49df6c Description: SecuBox Jitsi Meet - Video Conferencing Docker-based Jitsi Meet video conferencing for SecuBox. Provides secure, scalable video meetings with screen sharing. . Features: - Full Jitsi Meet Docker stack (Web, Prosody, Jicofo, JVB) - JWT, LDAP, or internal authentication - Jibri recording and streaming support - SRTP/SRTCP encryption - Breakout rooms and lobby - CRT-light P31 phosphor theme dashboard . Ported from OpenWRT luci-app-jitsi concept. Provides FastAPI backend on /api/v1/jitsi/ via Unix socket. Package: secubox-ksm Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 62 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-ksm/secubox-ksm_1.0.0-1~bookworm1_all.deb Size: 10656 SHA256: 5dbab7b7fc8bc39f420c48b82ccc4e79f9d17bff21e308fc92422f0c09c75737 SHA1: 1344dec776b4a002fc2fb1d57a48372d83e34b81 MD5sum: 6c028e2081827eac1da396d63ac45c78 Description: SecuBox KSM Memory Optimization Dashboard Kernel Same-page Merging (KSM) management module. Provides web UI and API for KSM controls to optimize memory in VMs and containers. . Features: enable/disable KSM, configure pages_to_scan and sleep_millisecs, view memory savings statistics. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-led-heartbeat Version: 2.1.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 87 Depends: python3, secubox-core, device-tree-compiler, i2c-tools Recommends: secubox-heartbeat Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-led-heartbeat/secubox-led-heartbeat_2.1.2-1~bookworm1_all.deb Size: 17616 SHA256: a1c1c71a598567785da89585a1d78606b0524b50713fa07e5c4420dea315f7d0 SHA1: f199859a1ef51b04eda65b3b50d133f66b03c611 MD5sum: b7998f74f88c8da82830f3819543a214 Description: SecuBox LED heartbeat status indicator Visual system health indicator using MOCHAbin RGB LEDs. . Displays system health, security status, and resource usage via the IS31FL3199 I2C LED controller (3 RGB LEDs). . LED mapping: - LED 1: Health status (pulsing green/yellow/red) - LED 2: Security status (steady, flashing on threat) - LED 3: Capacity (CPU/memory load) Package: secubox-lite Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7 Depends: secubox-core (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-crowdsec (>= 1.0), secubox-wireguard (>= 1.0), secubox-netmodes (>= 1.0), secubox-nac (>= 1.0), secubox-system (>= 1.0), secubox-hardening (>= 1.0) Recommends: crowdsec, wireguard-tools Suggests: secubox-netdata, secubox-qos, secubox-auth, secubox-watchdog, secubox-backup Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-lite/secubox-lite_1.1.0-1~bookworm1_all.deb Size: 1560 SHA256: 6c7ce732bb789243492cacdca4530da6e8b92926e0fc3d22f300b1b658136cc0 SHA1: acf2174312ece40205850f8ec8fcd2e4f4f1ff60 MD5sum: 9a6509ccaba23d141e7f88200905bb38 Description: SecuBox Lite — Essential modules for low-RAM devices Metapackage installing essential SecuBox modules for ESPRESSObin and other devices with 1-2GB RAM. . Includes: Hub, CrowdSec, WireGuard, Network Modes, NAC, and System. DPI, QoS, CDN and other heavy modules are excluded. Package: secubox-localai Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 73 Depends: secubox-core, python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-httpx | python3-pip, nginx, lxc, lxc-templates Priority: optional Section: admin Filename: pool/main/s/secubox-localai/secubox-localai_1.0.0-1~bookworm1_all.deb Size: 12696 SHA256: b068583d1370b7acb5c770d3c6f171e057628024ec37fbdf6ed9b065f6ceaded SHA1: a3a29695a836c10147a82e9752872d1f64c94ab7 MD5sum: d2c19a033fc7020a37588eaa7d839ee8 Description: SecuBox LocalAI - Self-hosted LLM inference Alternative to Ollama with OpenAI-compatible API. Features container management, model gallery, and chat interface. Package: secubox-localrecall Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 58 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-localrecall/secubox-localrecall_1.0.1-1~bookworm1_all.deb Size: 10838 SHA256: 525fc8ee25fa52aa8509563e94dc16b00c4bef6babcb055d118029d5da556aa7 SHA1: 36ee381fd140255e841ad1bc651be2fcbfdb8aea MD5sum: 7a267ecfd4c0140519be9f170a5724b2 Description: SecuBox LocalRecall — on-box AI memory store Long-term, on-box memory store for AI assistants: conversation history, learned operator preferences, project context. Local storage only — nothing leaves the box. Pairs with secubox-mcp-server if exposing memory contents to MCP-compatible AI clients. Package: secubox-lyrion Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 88 Depends: secubox-core (>= 1.0), secubox-users (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, python3-yaml, openssl, curl, jq Recommends: secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-lyrion/secubox-lyrion_1.1.0-1~bookworm1_all.deb Size: 23084 SHA256: 0f5465c09cd5d57bb8429867c5ff017692fdb3bcd46281d250e50b786e722580 SHA1: b3d9189d7507982416f767b5f4a100732fbbd557 MD5sum: e4de57b1fbab325065e97855b8b77b30 Description: SecuBox Lyrion — Music server (HOSTING layer) Hosts Lyrion in a Debian bookworm LXC at 10.100.0.100 on br-lxc. File-backend identity provider reading /etc/secubox/users.json (the same argon2-hashed user store already managed by secubox-users) so the canonical SecuBox identity is the single source of truth for SSO. . OIDC clients pre-provisioned for the three native admin UIs that already support OIDC: Grafana, Gitea, Nextcloud. YaCy/RustDesk-web/mitmproxy-web (no native OIDC) get nginx `auth_request` integration to the same Lyrion. . Health-banner injected on the Lyrion login page via nginx sub_filter so the operator sees the SecuBox system health bar even on the SSO screen. Package: secubox-mac-guard Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: secubox-core (>= 1.0), nftables, nginx, ieee-data Recommends: nmap, arp-scan Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mac-guard/secubox-mac-guard_1.0.0-1~bookworm1_all.deb Size: 15888 SHA256: b08c8d940b9f6cd603502c847638a4efac569992844c656524b697231d52d2b2 SHA1: 8ed2c172f7190c611857d3d5f3f844a5bf98da3b MD5sum: c9ba065f2ec328da05505a1aca33fc6a Description: SecuBox MAC Guard - MAC Address Control MAC-based network access control with device discovery, vendor lookup, whitelist/blacklist management, and nftables integration. . Features: - MAC address whitelist/blacklist management - Device discovery and tracking via ARP/DHCP - OUI vendor lookup (ieee-data) - Device naming and tagging - Alert on unknown devices - nftables MAC filtering integration - Real-time device monitoring . Port Debian bookworm SecuBox module (CyberMind.fr). Package: secubox-magicmirror Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 66 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: nodejs, npm, xserver-xorg, chromium, git Breaks: secubox-mmpm (<< 1.1) Replaces: secubox-mmpm (<< 1.1) Priority: optional Section: web Filename: pool/main/s/secubox-magicmirror/secubox-magicmirror_1.1.1-1~bookworm1_all.deb Size: 11690 SHA256: e53a77c980312b464118d3f974c3807ed615bb9435e87a1ff28f9b3a8434cd27 SHA1: 679f58337f24d85568192d20649b44587742a459 MD5sum: 48a3058ee88be238f77527262e708a62 Description: SecuBox MagicMirror management Smart display platform management for SecuBox. Provides API and web UI for MagicMirror² configuration, module management, and display controls. . As of 1.1, the MagicMirror Package Manager (MMPM) frontend and endpoints are folded into this package and reachable at /magicmirror/mmpm/ and /api/v1/magicmirror/mmpm/* respectively. The standalone secubox-mmpm package is now a transitional shell and can be removed via apt autoremove after upgrade. Package: secubox-mail Version: 2.3.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 243 Depends: secubox-core (>= 1.0.0), lxc, debootstrap, openssl, python3-httpx Suggests: acme.sh Breaks: secubox-mail-lxc (<< 2.2), secubox-webmail (<< 2.2), secubox-webmail-lxc (<< 2.2) Replaces: secubox-mail-lxc (<< 2.2), secubox-webmail (<< 2.2), secubox-webmail-lxc (<< 2.2) Priority: optional Section: admin Filename: pool/main/s/secubox-mail/secubox-mail_2.3.2-1~bookworm1_all.deb Size: 47170 SHA256: c127baeaf96238a12c9c26c7ff01ec04d02c732f3cb857383006f6cd417ac97e SHA1: 495b2649f61f762c978a7ec7b10da4fdb8eb2a1e MD5sum: 4658e5943eeeed0e558636dc0257f552 Description: SecuBox Mail Module Complete email server management API and dashboard. Postfix/Dovecot mail server and Roundcube webmail in Debian LXC containers. . Features: - User/alias management via mailctl - DKIM/SPF/DMARC configuration - ACME certificate automation (Let's Encrypt) - Service monitoring - Webmail integration (Roundcube in LXC) - Three-fold architecture (components, status, access) . For Let's Encrypt certificates, install acme.sh: curl https://get.acme.sh | sh Package: secubox-mail-lxc Version: 2.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 10 Depends: secubox-mail (>= 2.2) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-mail-lxc/secubox-mail-lxc_2.2.1-1~bookworm1_all.deb Size: 1986 SHA256: e48312fe703bb710233501f97a7a98fa36dff2f9667d8d028ed214450dfb20bd SHA1: 0a591f4bf58bc8d2de11501c8f1d8d6f7378ffc6 MD5sum: 9a18c592878a4f107c6901559fc0fcf1 Description: Transitional package — mail LXC functionality moved to secubox-mail The single consolidated mail LXC is now installed and driven by secubox-mail (>= 2.2). This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-master-link Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 10 Depends: secubox-p2p (>= 1.7) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-master-link/secubox-master-link_1.1.0-1~bookworm1_all.deb Size: 2178 SHA256: 34f15d6543d4a8a76a4ee9987d41e2fe8dbe76d51c267577859dad263331a1d1 SHA1: 69df6faddb8e9314ebb7c69cb271c7c42b939dbd MD5sum: 384e3b9d87a469e74a7cf9ad6b2c4149 Description: Transitional package — master-link folded into secubox-p2p Mesh node enrollment lives inside secubox-p2p (>= 1.7), reachable at /master-link/ and /api/v1/p2p/master-link/*. This package ships no files. Safe to apt-get autoremove after upgrade. . Pre-1.1 secubox-master-link installs were never reachable via nginx — the standalone service ran on /run/secubox/master-link.sock but no nginx config routed to it. Operators saw secubox-p2p's master-link UI all along. . The pre-1.1 state directory at /var/lib/secubox/master-link/ is preserved on upgrade so any direct-socket clients can retrieve their token/peer data manually. Delete it after migration. Package: secubox-matrix Version: 1.0.0-1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 114 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, lxc, lxc-templates Recommends: nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-matrix/secubox-matrix_1.0.0-1_all.deb Size: 18282 SHA256: 96dd1d172f02b22d50c9be9e487edc25ed31b84cf5f3c716fd4699905c1486fc SHA1: 00ad1ac27eaea27402d49788312948150c79de10 MD5sum: 2646cc6e92e95fc74012c903d3ceed39 Description: SecuBox Matrix Synapse - Federated Chat Server LXC-based Matrix Synapse homeserver for SecuBox. Provides federated, encrypted messaging with Element web client support. . Features: - Full Matrix Synapse homeserver in LXC container - User and room management via web UI - Bridge support (Telegram, Discord, Signal, etc.) - Element web client installation - Federation support - Backup/restore functionality Package: secubox-mcp-server Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 73 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-mcp-server/secubox-mcp-server_1.0.1-1~bookworm1_all.deb Size: 13544 SHA256: 9d75aeca8cd29994063b59c0ffd796072d9caea3cddf1251e1660f71cabef0fa SHA1: 8eab7b043c64fecd00f5218d48e8690f2919287b MD5sum: b7f347a55a21b9496e0d979ea24fd8ed Description: SecuBox MCP Server — Model Context Protocol server for AI tools Hosts a Model Context Protocol (MCP) server exposing SecuBox telemetry, config, and operations to MCP-compatible AI clients (Claude Desktop, Cursor, etc.). Operator-controlled tool surface with per-client authentication. . Distinct from sibling packages in the AI cluster: - secubox-ai-gateway — request router with sovereignty policy. - secubox-ai-insights — ML-based threat detection. - secubox-localai — self-hosted LocalAI LLM runtime. - secubox-ollama — Ollama LLM runtime wrapper. Package: secubox-mediaflow Version: 2.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 173 Depends: secubox-core (>= 1.0), secubox-dpi Recommends: ffmpeg, yt-dlp, curl Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mediaflow/secubox-mediaflow_2.2.0-1~bookworm1_all.deb Size: 34696 SHA256: 45708d8d4866dbae3f4781175cd111f2b10a7ce010804678684915d9351f16c9 SHA1: a52b9b3f208a0cc3e2bfad555315f826366d56fc MD5sum: f730cc796ec40543c79c17ae27f2b029 Description: SecuBox Media Flow Détection trafic streaming et VoIP : Netflix, YouTube, Zoom, Spotify, qualité d'expérience. . Port Debian bookworm de luci-app-media-flow (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mesh Version: 2.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 78 Depends: secubox-core (>= 1.0), python3 (>= 3.11), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jinja2, python3-pydantic, iw, hostapd, wpasupplicant, wireless-regdb, adduser Breaks: secubox-mesh (<< 2.0.0~) Replaces: secubox-mesh (<< 2.0.0~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mesh/secubox-mesh_2.0.4-1~bookworm1_all.deb Size: 18060 SHA256: 90b5d996d78bcfa70b053bba015727ea5ffafabb9e3975d737444759f3e3363b SHA1: 9b815e411b3212c37ed904cae03dcb1a5e8d17ff MD5sum: 7e874c0af12694ffbe382605be210ae2 Description: SecuBox-DEB MESH module (802.11s + Passpoint AP, OPAD) Plan de contrôle FastAPI pour le module mesh : 802.11s/HWMP backhaul (ath10k_pci QCA9880 par défaut), AP Passpoint HS2.0 via hostapd, et client mesh USB (mt76x2u / ath9k_htc). Verrou régulatoire FR au postinst, posture OPAD passive par défaut. . Référence spec : CM-MESH-MPCIE-2026-06 v0.2.1. Package: secubox-meshname Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 62 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-meshname/secubox-meshname_1.0.1-1~bookworm1_all.deb Size: 10810 SHA256: 109ed646ed7ffe60def7edb02aa47cade03e73afcda28fb0c0529d9ee9764d51 SHA1: 36ae2ac948f8c2bd15726db2d19130121a9322f8 MD5sum: 1c2745381f53604dd154c3aec23c12df Description: SecuBox Meshname — Yggdrasil-overlay DNS resolver Meshname DNS resolver: maps RFC-compliant `.ygg` domains to Yggdrasil IPv6 addresses for mesh-internal name resolution. Provides node and mapping CRUD via the web dashboard. . Distinct from sibling packages in the mesh cluster: - secubox-mesh — Yggdrasil mesh daemon control (peers, sessions, services). Different layer: meshname is the DNS overlay on top of mesh's daemon control. - secubox-p2p — P2P hub + master-link enrollment (canonical after #384). - secubox-daemon — Go-built mesh daemon (different runtime). Package: secubox-metablogizer Version: 1.2.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 159 Depends: secubox-core, python3, nginx, python3-jsonschema Priority: optional Section: admin Filename: pool/main/s/secubox-metablogizer/secubox-metablogizer_1.2.2-1~bookworm1_all.deb Size: 33748 SHA256: 323a1bca9936f97fe6975eca46d10c26c49f1f233071036a0cac48419da0d8d1 SHA1: 24ba14806c314efa84f88706e45d4a810361bafc MD5sum: 4f99212232c008d788818761c6579715 Description: SecuBox MetaBlogizer - Static Site Publisher Static site publishing and management for SecuBox. Package: secubox-metabolizer Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 92 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-metabolizer/secubox-metabolizer_1.0.0-1~bookworm1_all.deb Size: 16094 SHA256: e76885f7f9305fa3e08816afc5c4d4c2621f17f6a9ebf10fcbafd5ab958e882e SHA1: 93d7ead4b6fa9b4e363052d587785343873ce64d MD5sum: c047809fcc1dee7cf9e44b9c45579142 Description: SecuBox Metabolizer - Log processor and analyzer Log processing module that analyzes journalctl logs, extracts patterns, calculates statistics, and monitors log rotation for SecuBox. Features include pattern detection, error trend analysis, and service log aggregation. . Port Debian bookworm de SecuBox (CyberMind.fr). Package: secubox-metacatalog Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-metacatalog/secubox-metacatalog_1.0.0-1~bookworm1_all.deb Size: 15432 SHA256: f5d7e2fa5ca51f45a2ef6c9aa5e443f520593fa45d24abf335115d029326f73c SHA1: 08821d149b7ed6ebdd8fb978d9b91484942c2d7f MD5sum: ac10498d3f859d2ba61a944478cc28aa Description: SecuBox Metacatalog - Service catalog and registry SecuBox module for discovering and monitoring installed SecuBox services. Provides a centralized view of all services, their health status, dependencies, and API endpoints. . Features: - Catalog of installed SecuBox services - Service health status tracking - Dependency mapping between services - API endpoint documentation - Service metadata (version, ports, sockets) - P31 Phosphor light theme frontend . Part of the SecuBox security appliance suite. Package: secubox-metoblizer Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 15 Depends: python3, python3-fastapi, python3-uvicorn, python3-httpx, secubox-core Priority: optional Section: admin Filename: pool/main/s/secubox-metoblizer/secubox-metoblizer_1.0.0-1~bookworm1_all.deb Size: 2150 SHA256: aa0624fc4d395507efef8a49af4d2d3436daa337f34b12a3a423f084fee6d2b6 SHA1: 37123c170fef2a763457652c561cb79f53a9faa3 MD5sum: e36843ecc41017445bf257f61d807579 Description: SecuBox centralized log aggregator Metoblizer aggregates logs and events from SecuBox modules (netdata, glances, streamlit, etc.) and provides unified querying, presence events, and banner injection. Package: secubox-metrics Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 122 Depends: secubox-core, python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-maxminddb | python3-pip, python3-cryptography, nftables Recommends: geoipupdate Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-metrics/secubox-metrics_1.0.4-1~bookworm1_all.deb Size: 23488 SHA256: 104b2a533da1f427795e9dc5690127161689e847e8b59553155b0e1dd3bc4f20 SHA1: d757beec24c965baefeb03b2dfaabd10fa4fca41 MD5sum: 6c12ff3cd7199b1c6f02363f86548ba3 Description: SecuBox Metrics Dashboard Real-time system metrics dashboard with caching. Provides overview stats, WAF metrics, connection counts, and service status monitoring. Package: secubox-mirror Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 71 Depends: secubox-core (>= 1.0), nginx, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, curl Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mirror/secubox-mirror_1.0.0-1~bookworm1_all.deb Size: 12378 SHA256: 9659351c172d5d2d0a2b78e5b0e6999ee7f7997d55ac63e707a9277ec9926c51 SHA1: 3c9697c4e6a2c1bcab7595e3358a0f95d6724e63 MD5sum: 817e4c173c7c9b645cfb9a54550492ee Description: SecuBox Mirror/CDN Cache Local mirror and CDN caching service for APT repositories and other content. Features nginx caching proxy, mirror sync status, cache statistics, and bandwidth optimization through edge caching. . Part of SecuBox-DEB security appliance (CyberMind.fr). Package: secubox-mitmproxy Version: 1.0.10-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 274 Depends: secubox-core (>= 1.0), secubox-haproxy, lxc, lxc-templates, xz-utils, python3-uvicorn, python3-toml Recommends: secubox-crowdsec Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mitmproxy/secubox-mitmproxy_1.0.10-1~bookworm1_all.deb Size: 53674 SHA256: 06870326ce1db071bc0097926e6f52908f6d6eaf2cf9940552744121a7de5150 SHA1: 1d441677bdcd9ea37d587ff153e6c19d1fe0a9b6 MD5sum: fcb776b42c81029435d4c466047ea3a9 Description: SecuBox Mitmproxy WAF — Web Application Firewall HTTP traffic inspection for HAProxy-hosted services with threat detection and CrowdSec integration for automatic IP banning. . Features: - LXC-isolated mitmproxy instance - 90+ threat detection patterns (SQLi, XSS, RCE, etc.) - HAProxy integration for vhost inspection - CrowdSec JSONL output for auto-banning - WebUI dashboard with real-time stats . Port Debian bookworm de luci-app-mitmproxy (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mmpm Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-magicmirror (>= 1.1) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-mmpm/secubox-mmpm_1.1.0-1~bookworm1_all.deb Size: 1592 SHA256: ac0e68bbad27897bb178188e5d08752440f64537cf18fe3fcec2507ec59f2f06 SHA1: b854a9f1ad52b89d37799ee42f8c333055ae4f21 MD5sum: da98087a95b0c04684bffc678c660ddb Description: Transitional package — mmpm folded into secubox-magicmirror The MagicMirror Package Manager API and frontend now live inside secubox-magicmirror (>= 1.1), reachable at /magicmirror/mmpm/ and /api/v1/magicmirror/mmpm/* respectively. This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-modem Version: 1.0.0-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 169 Depends: secubox-core (>= 1.0), modemmanager, libqmi-utils, libmbim-utils, picocom, python3-serial Recommends: usb-modeswitch, usb-modeswitch-data Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-modem/secubox-modem_1.0.0-1_all.deb Size: 29412 SHA256: 4a91cd4beb16c42dcdacf8d9a69c72bf114d2c557c43ae5d54fe8956d35119a8 SHA1: 56a5664f37e7f6fa15d72cd2cd5b3f61aa5277b4 MD5sum: cc8e218186d6c44505d5589242fe6770 Description: SecuBox LTE/5G Modem Management Quectel LTE/5G modem management interface for SecuBox. . Features: - Auto-detect any plugged Quectel modem (EC25, RM500Q, etc.) - Data connection management (APN, connect/disconnect) - SMS send/receive via WebUI - AT command console (interactive WebSocket terminal) - Signal strength monitoring with real-time graphs - Firmware/device info display - Hybrid approach: ModemManager + qmicli . Port Debian bookworm de luci-app-modem (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mqtt Version: 2.4.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 74 Depends: secubox-core (>= 1.0), lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mqtt/secubox-mqtt_2.4.0-1~bookworm1_all.deb Size: 16652 SHA256: 83fabdfcdc99092a07a7363d7ab9b4b396a4b480f422b036436647977780d6cd SHA1: 334d85fbc9c5394515fdab724e1050edff331d0f MD5sum: 6b4449830be22be7bc6ac34d944f660f Description: SecuBox MQTT — Mosquitto broker (WALL layer) Hosts a hardened Mosquitto 2.x broker in a Debian bookworm LXC at 10.100.0.110 on br-lxc. . No anonymous access (allow_anonymous false). Per-service authentication via mosquitto_passwd-managed credentials and per-topic ACL — z2m, sentinelle, domoticz and the SecuBox internal API each get their own user with a randomly-generated password stored under /etc/secubox/secrets/mqtt-* (mode 0600, owner root:secubox). . Host-side control plane: FastAPI on Unix socket /run/secubox/mqtt.sock + nginx route /api/v1/mqtt/ on the canonical hub vhost. CTL grammar: mqttctl components / status / access + install / reload + topic / client / acl / user nouns. Package: secubox-nac Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 195 Depends: secubox-core (>= 1.0), dnsmasq, nftables, nginx Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-nac/secubox-nac_1.0.4-1~bookworm1_all.deb Size: 33416 SHA256: e634a3fd795f1f3eb9e69e136fc7fabdd56b7fe1abf1ec09ba609537dd2a10e8 SHA1: 4bf4e98ce99a12bc9135773238f3a01c3f92b051 MD5sum: e605550ce1401f9b85ccc38068caf936 Description: SecuBox NAC / Client Guardian Contrôle d'accès réseau : zones nftables, portail captif, contrôle parental, quarantaine. . Port Debian bookworm de luci-app-client-guardian (SecuBox OpenWrt / CyberMind.fr). Package: secubox-ndpid Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 91 Depends: secubox-core (>= 1.0.0), ndpid | ndpi-reader, python3-zmq Recommends: secubox-dpi Priority: optional Section: admin Filename: pool/main/s/secubox-ndpid/secubox-ndpid_1.0.1-1~bookworm1_all.deb Size: 15676 SHA256: 07b3c64d2b36b2c8f2a65ecc777ae0f786ba2f2f08ae0298973f7fe11865771f SHA1: d50edb365473cf271c32ed4f652279c87175b281 MD5sum: 72e5df8569567d1e374d26149f8cff04 Description: SecuBox nDPId — DPI dashboard with JA3/JA4 TLS fingerprinting nDPId-backed deep packet inspection dashboard: JA3/JA3S/JA4 TLS fingerprinting, protocol detection, application classification, risk scoring, and SQLite flow database. . Distinct from sibling packages in the DPI cluster: - secubox-netifyd — netifyd daemon lifecycle dashboard (different DPI engine). - secubox-dpi — netifyd-backed analytics layer (top apps, bandwidth, mirred setup) — see #382 for the layered model. - secubox-mediaflow — streaming/VoIP classifier consuming DPI. Package: secubox-netdata Version: 1.0.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 169 Depends: secubox-core (>= 1.0), netdata Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netdata/secubox-netdata_1.0.4-1~bookworm1_all.deb Size: 28052 SHA256: 413970d1d6c066a1834c7d2e1636a39651025a4043f5e721c3e663ab321bc8d8 SHA1: f5116aea8cd6444c98ba20b7aac77ea04150fb59 MD5sum: f27c27ba8d9c2d19c73ec4143bf2794c Description: SecuBox Netdata Dashboard Monitoring temps réel via Netdata REST v2 : CPU, RAM, réseau, température, processus. . Port Debian bookworm de luci-app-netdata-dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-netdiag Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 100 Depends: secubox-core (>= 1.0), iputils-ping, traceroute, dnsutils, whois, mtr-tiny, nmap, net-tools, iproute2 Recommends: iperf3 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netdiag/secubox-netdiag_1.0.0-1~bookworm1_all.deb Size: 15938 SHA256: 96a025479cf07458db37bc47988c519a44a8279e9ba6d1f21243acf252e85183 SHA1: c556260ca7a7919acad6128636bf45ef5cb9f6ea MD5sum: ebf112d5120bb0bd7266312360af4495 Description: SecuBox Network Diagnostics — Troubleshooting Tools Network diagnostics module for SecuBox providing various troubleshooting tools including ping, traceroute, DNS lookup, WHOIS, MTR, port scanning, and network interface analysis. . Features: - Ping with RTT statistics - Traceroute with hop analysis - DNS lookup (A, AAAA, MX, NS, TXT, CNAME, SOA) - WHOIS domain/IP lookup - MTR (My Traceroute) - Port scanning (local network only) - Network interface listing - Routing table display - ARP table - Active connections (netstat-like) - Bandwidth testing (iperf3) . Part of SecuBox Debian edition. Package: secubox-netifyd Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 85 Depends: secubox-core (>= 1.0), netifyd Recommends: iproute2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netifyd/secubox-netifyd_1.0.0-1~bookworm1_all.deb Size: 13946 SHA256: d5322ae400334c4963601b704acaa00fddb6a43951d962c5fb87fea6e69db05d SHA1: e41837f361b29054021fcde2f0228e6cab4a5629 MD5sum: d48ec4f90526243b1a6082c316b4c57e Description: SecuBox Netifyd - Network Intelligence Daemon Dashboard Deep Packet Inspection daemon management for netifyd. Provides a web dashboard for network flow analysis, protocol detection, application classification, and device discovery. . Features: - Real-time network flow visualization - Protocol and application breakdown - Device/host discovery and tracking - Bandwidth monitoring per app/device - DPI alerts and notifications . Port Debian bookworm from SecuBox OpenWrt netifyd integration. Package: secubox-netmodes Version: 1.0.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 279 Depends: secubox-core (>= 1.0), netplan.io, iproute2, bridge-utils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netmodes/secubox-netmodes_1.0.5-1~bookworm1_all.deb Size: 46436 SHA256: d967227ea594ce055ae7002bd54a9f11a307b730157a2d6990be3f056672a4e1 SHA1: 6003e3d850aa72d740fdf94c677eb8851e39228c MD5sum: 252d6ffb8d4ea382e6036d9574098af6 Description: SecuBox Network Modes Commutation de modes réseau : router, sniffer-inline, sniffer-passif, AP, relay. Templates netplan par mode. . Port Debian bookworm de luci-app-network-modes (SecuBox OpenWrt / CyberMind.fr). Package: secubox-nettweak Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 85 Depends: secubox-core (>= 1.0), python3-fastapi | python3-pip, procps Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-nettweak/secubox-nettweak_1.0.0-1~bookworm1_all.deb Size: 14264 SHA256: 774deebfc2d051650fbcd609fe869103a6411ff3b6c57d2478e47198809199a1 SHA1: 11501b293c871cd66dcf4b8338a5e2ae72b51ce0 MD5sum: 760a59a9131d4251805838c2aa057d6a Description: SecuBox Network Tuning Dashboard Network tuning module for sysctl and TCP/IP stack optimization. Provides web UI and API for managing kernel network parameters. . Features: tuning profiles (default, performance, low-latency, security), TCP settings, network stack settings, persistent configuration. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-network-anomaly Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 57 Depends: secubox-core (>= 1.0.0) Recommends: dnsmasq Priority: optional Section: admin Filename: pool/main/s/secubox-network-anomaly/secubox-network-anomaly_1.0.1-1~bookworm1_all.deb Size: 11106 SHA256: 4cb4c6a867976dbd7c34f10b59c60961cb310286143935616a7ccc6319e381db SHA1: 4a8e78d1de28f4cdd821133f44d1434a18da91e3 MD5sum: 1580abdfd1bb7cc24d2f4eea46c528c4 Description: SecuBox Network Anomaly — DNS-log anomaly detection Reads /var/log/dnsmasq.log and flags lookups that deviate from baseline patterns (volume, novelty, NXDOMAIN bursts, suspicious TLDs). . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella dashboard (CrowdSec + Suricata + WAF alerts). - secubox-threat-analyst — AI agent that writes CrowdSec scenarios. - secubox-cve-triage — CVE vulnerability triage. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables-driven IP blocklist enforcement. - secubox-openclaw — OSINT / reconnaissance. . For DNS-layer blocking (rather than detection only), see secubox-dns-guard or secubox-vortex-dns. Package: secubox-newsbin Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 107 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-newsbin/secubox-newsbin_1.0.0-1~bookworm1_all.deb Size: 16698 SHA256: a99a26fe0bb69b90c3273097608e1c5fd533a96e20b6de0bf67e8a17b2fb8fff SHA1: 73eb875596f0b7e6e8faf6fca753ada25379e292 MD5sum: cc240b3ccee02f0ead5bc3c17661c954 Description: Usenet downloader management for SecuBox SecuBox module for managing SABnzbd Usenet downloader via Docker. Provides NZB download management, queue control, Usenet server configuration, categories, and post-processing support. . Features: - SABnzbd container management (Docker/Podman) - NZB file/URL handling - Download queue with pause/resume - Usenet server configuration - Category organization - Download history and statistics . Provides FastAPI backend on /api/v1/newsbin/ via Unix socket. Package: secubox-nextcloud Version: 1.4.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 110 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-nextcloud/secubox-nextcloud_1.4.1-1~bookworm1_all.deb Size: 23676 SHA256: 8b3c7a4382a044ea315670391b3d5ebdeade7a6bf59400aa78fb2bd4a1e84cf4 SHA1: b1d38b60d6fe9b2040e87b74a1403573c5ed8489 MD5sum: da7bc4af24a28d8f52dbbcb3d695f86f Description: SecuBox Nextcloud — self-hosted file sync + collaboration (LXC) Manages a Nextcloud server (file sync, calendar, contacts, collaborative editing) running in its own LXC container. SecuBox wires up nginx vhost, ACME TLS, SSO via secubox-authelia (SSO cookie scope per #272), backup integration, and a web management dashboard around the upstream Nextcloud install. Package: secubox-ollama Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 78 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-ollama/secubox-ollama_1.0.0-1~bookworm1_all.deb Size: 13098 SHA256: 547519090a1f5cb681b542c738f3142463485cf842929ae100dc03a64e7be54c SHA1: f682d70d590db18c787c71e16806df8f198a4be4 MD5sum: 2ee2dc4c909d087c2a76850c2b6094e8 Description: Local AI inference with Ollama SecuBox module for managing local LLM inference via Ollama. Provides container management (Docker/Podman), model pulling, chat completion, and text generation APIs. . Ported from OpenWRT luci-app-ollama. Provides FastAPI backend on /api/v1/ollama/ via Unix socket. Package: secubox-openclaw Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 98 Depends: secubox-core (>= 1.0.0), dnsutils, whois, curl Recommends: nmap Priority: optional Section: admin Filename: pool/main/s/secubox-openclaw/secubox-openclaw_1.0.1-1~bookworm1_all.deb Size: 17356 SHA256: 197a3f43110b40e6dcee2a88e2218afedecb29bfc248634c267549b868585a03 SHA1: ea19d1a1c9e22a7e18b23d35b1509048867292a7 MD5sum: 44b1ad8c6e7f1f0e97c86d6ea539ec97 Description: SecuBox OpenClaw OSINT Module Open Source Intelligence (OSINT) tool for reconnaissance and information gathering. Features include: - Domain reconnaissance with DNS enumeration - IP intelligence and port scanning - Email harvesting detection - Subdomain discovery - Certificate transparency lookups - WHOIS information gathering - Shodan/Censys/VirusTotal integration Package: secubox-ossec Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 61 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: ossec-hids | ossec-hids-agent Priority: optional Section: admin Filename: pool/main/s/secubox-ossec/secubox-ossec_1.0.0-1_all.deb Size: 9484 SHA256: 49439a20f38f14563aecf3c6951ad511f721f4cf0e4d0289a7b41e04f48512ee SHA1: 2e6a035beb0b77f8641a369459cf91f58798dfa5 MD5sum: 844e38b08da2bbef47ecdd0619992a8a Description: SecuBox OSSEC HIDS integration OSSEC Host-based Intrusion Detection System integration. Provides management interface for OSSEC services, alert viewing, file integrity, and rootkit detection. Package: secubox-p2p Version: 1.7.5-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 185 Depends: secubox-core (>= 1.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, avahi-daemon, avahi-utils Breaks: secubox-master-link (<< 1.1) Replaces: secubox-master-link (<< 1.1) Priority: optional Section: admin Filename: pool/main/s/secubox-p2p/secubox-p2p_1.7.5-1~bookworm1_all.deb Size: 34216 SHA256: 85e87fce24e57f8bcbd3c4d7fb665e2f7a518fb72eaf6d64eccdd3eb6a4c166f SHA1: 30f204864e8cf83cfe4367d647aae572cc606dd9 MD5sum: 19cf24c873d13142dcf80d6339c328bc Description: SecuBox P2P - Peer-to-Peer Network Hub P2P network management with peers, services, mesh visualization, and threat intel. Includes master-link enrollment (token issuance, peer approval, join workflow) served at /master-link/ and /api/v1/p2p/master-link/*. . As of 1.7, this package absorbs the master-link role that was previously shipped as a separate (but never nginx-reachable) secubox-master-link package. Operators who had secubox-master-link installed see it autoremoved on apt full-upgrade. Package: secubox-peertube Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 164 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl Priority: optional Section: net Filename: pool/main/s/secubox-peertube/secubox-peertube_1.1.0-1~bookworm1_all.deb Size: 32488 SHA256: 425f2b792d5dbaad97dd6f35560ed3e7072bbbe2320beadcd0126fb84dfc2be7 SHA1: 5a22bcc0b19c9acd9807a2d762c9433962fe9f39 MD5sum: 42d4fd5390cbbd0a4a145cfc192e59ef Description: SecuBox PeerTube — federated video platform (native LXC) Dashboard + FastAPI backend for a PeerTube video-hosting instance installed NATIVELY inside a dedicated Debian LXC (its own peertube.service: Node 22 + PostgreSQL 15 + Redis + ffmpeg). The API daemon on the host is lightweight (always reachable to serve the dashboard); `peertubectl install` provisions the LXC and the PeerTube stack on demand. . PeerTube runs native-in-LXC rather than Docker/Podman: an unprivileged LXC cannot reliably bring up a podman CNI bridge on the Marvell arm64 boards, so the native systemd-managed install is the supported path. . Features: - LXC lifecycle via peertubectl (install, status, start, stop, restart, logs) - Public nginx vhost (:9080 → LXC :9000) bypassing the WAF (gitea pattern) - Video and channel management - User creation and role assignment (admin/moderator/user) - Federation (ActivityPub) — follow/followers - Transcoding settings (HLS, WebTorrent, resolutions) - Plugin installation from NPM - Storage usage monitoring . Distinct from sibling federated/streaming/media SecuBox packages: - secubox-matrix — Matrix Synapse (chat federation, not video). - secubox-jitsi — Jitsi Meet (real-time conferencing, not VOD). - secubox-jellyfin — Jellyfin (local media library, not federated). - secubox-gotosocial — GoToSocial (microblog ActivityPub, not video). - secubox-simplex — SimpleX Chat (decentralized chat). . Reachable at /peertube/ (frontend) and /api/v1/peertube/* (API) via Unix socket /run/secubox/peertube.sock. Package: secubox-photoprism Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 129 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl Priority: optional Section: net Filename: pool/main/s/secubox-photoprism/secubox-photoprism_1.1.0-1~bookworm1_all.deb Size: 24948 SHA256: 1af0d322e8dc22f53aa8ef42891de8e8b5be688bda71ef8bf68a092dea193807 SHA1: df95233f2b84ab1bf67a6c1b552a955e346232b3 MD5sum: 16d5f90d413ba39cec03fd713c6160ec Description: PhotoPrism photo management for SecuBox (native LXC) SecuBox module for a PhotoPrism photo server running as a podman container inside a dedicated Debian LXC (--network=host). `photoprismctl install` provisions the LXC + container on demand; the host dashboard daemon stays lightweight and always reachable. . Photos live on /data/shared/photos, also mounted by Nextcloud as the "PhotoLibrary" external storage — phone → Nextcloud → /data/shared/photos → PhotoPrism originals (indexed by a 15-min timer, since PhotoPrism's built-in auto-index only fires for its own UI uploads). . Features: - LXC lifecycle via photoprismctl (install/status/start/stop/restart/index) - Public nginx vhost (:9080 → LXC :2342) bypassing the WAF (gitea pattern) - AI-powered face recognition, library indexing, album management - Import workflow + Nextcloud photo integration - CRT-light P31 phosphor theme . Provides FastAPI backend on /api/v1/photoprism/ via Unix socket. Package: secubox-picobrew Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 125 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Priority: optional Section: net Filename: pool/main/s/secubox-picobrew/secubox-picobrew_1.0.0-1~bookworm1_all.deb Size: 18618 SHA256: a82ae60d7a61d8566b990a0083d527d9147b1ee91a30c128074499e44bf8f778 SHA1: 9b84459b2a264223033320fe1e6582515ea8cf43 MD5sum: efb1f29aca54229b3d3c47a406e9292a Description: Homebrew/Fermentation Controller for SecuBox SecuBox-DEB Phase 9 IoT module for homebrewing and fermentation. Provides FastAPI backend on /api/v1/picobrew/ via Unix socket. . Features: - Temperature monitoring via GPIO/I2C/USB sensors (DS18B20, DHT22, BME280) - Fermentation profile management with temperature schedules - Brew session logging with continuous temperature tracking - Recipe management and library - Temperature deviation alerts - Support for Tilt/iSpindel hydrometers - CRT-light P31 phosphor theme with amber accents frontend Package: secubox-podcaster Version: 1.0.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 80 Depends: secubox-core (>= 1.0), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip Priority: optional Section: sound Filename: pool/main/s/secubox-podcaster/secubox-podcaster_1.0.3-1~bookworm1_all.deb Size: 18366 SHA256: c504fbe665c9e0c1a28f2d4f1ad7f51b78d5f0a22bb22d069d158e48248f148d SHA1: 4e736d60cba2c73c57d6ff63b1aea2d53e71c157 MD5sum: 2d2aa80679d39add8ef187e261860977 Description: Modern podcast manager for SecuBox Subscribe to podcast feeds, download episodes locally, and re-publish a shareable RSS feed (LAN by default, public via HAProxy / secubox-exposure). FastAPI backend on /api/v1/podcaster/ over a Unix socket; SQLite store; an asyncio download queue. Feed parsing is pure stdlib (no feedparser dep). . Features: - Subscribe by RSS URL or OPML import - Local download queue with per-episode progress - Generated shareable RSS of the local library (relay/share to the web) - In-UI service status + TOML config - Modern C3BOX cyberpunk WebUI with inline player Package: secubox-portal Version: 2.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 90 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-jwt Priority: optional Section: admin Filename: pool/main/s/secubox-portal/secubox-portal_2.2.0-1~bookworm1_all.deb Size: 18870 SHA256: 43f91b47062566b3e272726dbb52395793893adeb30d94f937644c2792ac904d SHA1: 60291f84dbb7f9a897136aab9c3c7cfad7a991b5 MD5sum: 35df5fc72487691c0253cc7f189a4520 Description: SecuBox Portal - Web Authentication Centralized web authentication for all SecuBox modules. . Features: - JWT token-based authentication - Session management - Login/logout endpoints - User management - Password recovery Package: secubox-publish Version: 2.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 159 Depends: secubox-core (>= 1.0.0), python3-httpx | python3-pip Recommends: secubox-streamlit, secubox-streamforge, secubox-droplet, secubox-metablogizer Priority: optional Section: admin Filename: pool/main/s/secubox-publish/secubox-publish_2.0.0-1~bookworm1_all.deb Size: 27906 SHA256: ea6763cbce28c1b641a4c95e49663ef894bf0b66d93931aa49f6bbb7a949574e SHA1: a9aa17f0a428cdb4f0f31c77ad3ea72741addad3 MD5sum: 0f42af72d686b3acdf70cf57a0f05128 Description: SecuBox Publishing Platform Unified Layer 2 dashboard for all publishing modules. . Aggregates and orchestrates: - Streamlit (data apps) - StreamForge (app templates) - Droplet (file publishing) - MetaBlogizer (static sites) . Provides quick-publish actions and unified overview. Package: secubox-qos Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 334 Depends: secubox-core (>= 1.0), iproute2, nftables Recommends: vnstat Suggests: python3-pyroute2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-qos/secubox-qos_1.1.0-1~bookworm1_all.deb Size: 51652 SHA256: 9503253cc76a849f1f4c79c4702c5b6530c63f3e6149bd096eedb4dbe99ef63e SHA1: a7f0da67c1666a883db5e83046f8341e89355d69 MD5sum: 802b06daf62f9202151cb5b07d1dfc20 Description: SecuBox QoS / Bandwidth Manager QoS avancé : classes HTB pyroute2, quotas par client, planification horaire, détection média. . Port Debian bookworm de luci-app-bandwidth-manager (SecuBox OpenWrt / CyberMind.fr). Package: secubox-rbs-sensor Version: 0.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.0), python3-uvicorn, python3-fastapi, python3-serial, python3-toml, usbutils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-rbs-sensor/secubox-rbs-sensor_0.1.0-1~bookworm1_all.deb Size: 15286 SHA256: 6929773b854ae216342a07fb763a6e6af3cc5f41eabc5e9a4625aaf9dbba302c SHA1: ca0bdf248dd84c4112df74948a7cccc426cdc98c MD5sum: 1909d4c8ac32691c4b03c28d5aa284cc Description: SecuBox RBS Sensor — Rogue Base Station sensor (WALL layer) Host-resident module that drives a Quectel EP06-E mPCIe LTE modem as a cellular telemetry sensor for false-base-station detection. Follows the SecuBox OPAD doctrine (Off-Path Active Defense, OODA loop): . OBSERVE — broadcast cell identifiers + own-modem RX measurements only. ORIENT — local verdict engine scores LIKELY_ROGUE / SUSPECT / OK. DECIDE — operator policy or auto-mitigation. ACT — local off-path mitigation: RAT lock (refuse 2G), RF detach. . The sensor NEVER captures third-party subscriber identifiers (IMSI/TMSI). The CellObservation / NeighbourObservation dataclasses have no fields that could carry such data — proof verifiable via `GET /api/v1/rbs-sensor/status` which returns `captures_subscriber_identifiers: false`. . v0.1.0 is a scaffold: framework + EP06 driver shape + AT command allowlist + service plumbing. The full LTE/GSM cell parser and verdict engine land in v0.2 once a real EP06 is connected. Package: secubox-redroid Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 53 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: docker.io, adb Priority: optional Section: web Filename: pool/main/s/secubox-redroid/secubox-redroid_1.0.0-1_all.deb Size: 8100 SHA256: b233d0b7516d14e855f51e3430c11ecbdffa12dc21488c5740b0bb085dc98ed1 SHA1: 881a5c291e14d70ee4bdb0b183dcf19cbb33bbfb MD5sum: 7b8ee6429c7aabc908ed115a58c37d00 Description: SecuBox Redroid - Android in container Android container management for SecuBox. Run Android instances in Docker containers with ADB access for app installation and debugging. Package: secubox-repo Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-aiofiles, reprepro, gnupg, rsync Recommends: nginx, certbot Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-repo/secubox-repo_1.0.1-1~bookworm1_all.deb Size: 16450 SHA256: c86975559e016d954bf2c043d0a6bd1c6a25cf0adc6fdd0a2dba63c3cb004155 SHA1: 61650cf45a4c476cf4ed6c8391acb837eff12803 MD5sum: d2f9a50f204874b621b081e48157a91c Description: SecuBox APT Repository Manager Management interface for the SecuBox APT repository (apt.secubox.in). . Features: - Package management (add, remove, list) - GPG key generation and signing - Multiple distribution support (bookworm, trixie) - Remote sync via rsync - Web interface for repository status . This is the control plane for apt.secubox.in. Package: secubox-reporter Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 93 Depends: secubox-core (>= 1.0), python3-weasyprint | wkhtmltopdf Recommends: python3-weasyprint Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-reporter/secubox-reporter_1.0.0-1~bookworm1_all.deb Size: 15890 SHA256: 075c6fe1434fc3638947287aa0e965a8f127e31fa7d82ce8b869c04c8cd8dc78 SHA1: 2cb5835cc13148cd4f5ccc90f0e5ffa7fee5b286 MD5sum: f78835fadab5e40254ff66aabe4e183d Description: SecuBox Reporter - System report generation System reporting module that generates PDF/HTML reports for SecuBox. Supports daily, weekly, security, and network report types. Features scheduled report generation with cron expressions. . Port Debian bookworm de SecuBox (CyberMind.fr). Package: secubox-rezapp Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 75 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-psutil, secubox-core Recommends: docker.io | docker-ce, containerd Suggests: lxc Priority: optional Section: admin Filename: pool/main/s/secubox-rezapp/secubox-rezapp_1.0.0-1_all.deb Size: 12108 SHA256: c05440818605d3ce74bc0ca06fbeaafed53d338b6d6f8ab0531e82847bf4e002 SHA1: 4ce99a39d3fdb9735485f7a89bb5dd499266c44d MD5sum: ae5f6c1b7555519ba0a1c9589d289430 Description: SecuBox RezApp - Application deployment and management Application deployment and management module for SecuBox. Deploy and manage containerized applications using Docker or LXC. Features include application templates, resource management, log viewing, and health monitoring. Package: secubox-roadmap Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 69 Depends: secubox-core (>= 1.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-roadmap/secubox-roadmap_1.1.0-1~bookworm1_all.deb Size: 10546 SHA256: 3d3ad88a25506df73f9b8f51d4c21d78bf7f0a18045c952b20f94132395e9597 SHA1: 9ee39f5f27382d309b917bfdef04f81b055c1cca MD5sum: 6e173dbb7ef589f56e67a12b80d9dd29 Description: SecuBox Roadmap - Migration tracking dashboard Tracks migration progress from OpenWRT LuCI apps to SecuBox Debian packages. Shows complete, in-progress, and planned modules with category breakdown. Package: secubox-routes Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 83 Depends: secubox-core (>= 1.0), iproute2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-routes/secubox-routes_1.0.0-1~bookworm1_all.deb Size: 12930 SHA256: 71a73ff6365f8f3b0f017cc5d7dffdc37480ff3b7feea4a8e7af98f0d3904bf0 SHA1: 265686ac62de668ecd899f07e1c20fdff8b3f191 MD5sum: 3c3c72cb26f1e1de8f2dc1e3391dbddd Description: SecuBox Routes - Routing table viewer and manager SecuBox module for viewing and managing routing tables, policy routing rules, and ARP/NDP neighbors. . Features: - View IPv4 and IPv6 routes - Add/delete routes dynamically - Policy routing rules management - ARP/NDP neighbor table viewer - Route cache flush capability . Part of the SecuBox security appliance suite. Package: secubox-rtty Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 92 Depends: secubox-core, rtty Priority: optional Section: net Filename: pool/main/s/secubox-rtty/secubox-rtty_1.0.0-1~bookworm1_all.deb Size: 14768 SHA256: bd725f16104451cb83c5a6190a6b875c3c318bb8b0f17b8740a49c2030290037 SHA1: 39c06e0f27e6174ac8a3d6c9e1e87cddf3d0f635 MD5sum: e33cc22afa5339ff22af892aaa0aa5f2 Description: SecuBox Remote Terminal Access (rtty) Web-based remote terminal access module for SecuBox. Features: - rtty service control (start/stop/restart) - Active terminal session monitoring - Access token generation and management - Configuration editor (port, SSL, auth) - Embedded terminal web interface - Three-fold architecture (Components/Status/Access) Package: secubox-rustdesk Version: 1.0.8-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 69 Depends: secubox-core (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq, iproute2, nftables Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-rustdesk/secubox-rustdesk_1.0.8-1~bookworm1_all.deb Size: 15224 SHA256: a380a48f2fad45fd5f720ea3a225ec4c42edeeed6b47bd47b95600cc78d498a5 SHA1: 7b231fe5e0307550a8af91a8e5a03ab6642d18bb MD5sum: 4d5df099ad6835a41467c58b584d8005 Description: SecuBox RustDesk — self-hosted remote desktop relay Hosts RustDesk hbbs (signal) and hbbr (relay) servers in a Debian LXC at 10.100.0.90 on br-lxc. Two separate systemd units inside the LXC for the two daemons; rustdeskctl components surfaces both as independent. . Public exposure does not use mitmproxy (it cannot inspect the raw UDP NAT-traversal traffic on 21116/udp). HAProxy stream-mode handles 21115/tcp, 21116/tcp, 21117/tcp; nftables DNAT handles 21116/udp. . rustdeskctl exposes the canonical SecuBox three-fold introspection plus peer/relay/key/session nouns matching the REMOTE-ACCESS layer of the CTL grammar (sister to OPS MONITORING / SEARCH). Package: secubox-saas-relay Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 95 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-cryptography Priority: optional Section: net Filename: pool/main/s/secubox-saas-relay/secubox-saas-relay_1.0.0-1~bookworm1_all.deb Size: 16088 SHA256: 00901fce9130cf51d8df9e2e6c973219fd7a0d561271dc1565705a60c2acb8ff SHA1: 3fd09360c3512d727f0f45213cc4108dbc8d177a MD5sum: 84e9ddc05a5200fd9acbf41d5a7550d4 Description: SecuBox SaaS/API Proxy Relay Secure proxy relay for external SaaS APIs with encrypted key storage. Port Debian bookworm de SecuBox-DEB Phase 9. . Features: - Proxy configuration for external SaaS APIs - API key management (encrypted storage with Fernet) - Rate limiting and quota tracking per service - Request/response logging - Health checks for proxied services - P31 Phosphor light theme dashboard Package: secubox-security-posture Version: 2.0.1-1 Architecture: all Maintainer: CyberMind Installed-Size: 117 Depends: python3, python3-fastapi, python3-uvicorn, python3-httpx Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: net Filename: pool/main/s/secubox-security-posture/secubox-security-posture_2.0.1-1_all.deb Size: 26014 SHA256: f7ba7cd364d670c2890e7e0e92361b0c9ba9a4f33240b4414dece23ca93c2d08 SHA1: b84715b01da94ad402dc8ea4f8ba9080e9b4ecb0 MD5sum: 6da3ba83159a305a73623468c60247e7 Description: SecuBox Security Posture - honest board-truthful scorecard SecuBox Security Posture computes a single security score (mapped to a DEFCON 5-1 dial) from real, provenance-tracked signals collected over public sibling module sockets, CrowdSec Prometheus and unprivileged /proc reads. . Every indicator records where its value came from; signals that cannot be measured render as UNKNOWN or MANUAL and are excluded from the score rather than faked. Indicators are grouped by the six SecuBox module-domains (AUTH/WALL/BOOT/MIND/ROOT/MESH). . Features: * Overall posture score with DEFCON level and per-domain coverage * Repaired ANSSI CSPN compliance backbone (real checks, manual flagged) * Real TPN media-protection overlay (anti-piracy DNS, TLS coverage) * Actionable findings with remediation commands and module deep-links * Background 60s cache; read-only REST API on a unix socket Package: secubox-sentinelle-gsm Version: 0.4.0-1~bookworm1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 994 Depends: secubox-core (>= 1.0), python3-uvicorn, python3-fastapi, python3-toml, python3-scapy, librtlsdr0, rtl-sdr, usbutils, libliquid1, libsndfile1 Recommends: gr-gsm, python3-numpy Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-sentinelle-gsm/secubox-sentinelle-gsm_0.4.0-1~bookworm1_arm64.deb Size: 277202 SHA256: 74c232db1d49a7ec15256127add9c7d89cfb5cb057aaf1ceae94f2051badecce SHA1: 191ae8bb27a43c953e18eb9cedaaf24339c1086e MD5sum: b5a1a994f4fc0fa512bce3d09ae09f7f Description: SecuBox SENTINELLE-GSM — passive rogue-BTS sensor (MIND layer) Host-resident module that drives an RTL-SDR USB dongle as a passive GSM broadcast receiver for false-BTS (IMSI-catcher) detection. Follows the SecuBox OPAD/MIND doctrine: off-path by construction (RX only, no RF emission, no traffic decryption), feeds alerts into WALL/OPAD for correlation + reaction. . Privacy-by-design (spec §6.2): subscriber identifiers (IMSI/IMEI/TMSI), when present in flight, are HMAC-SHA256-truncated using a locally generated key (PROD mode, default). Plaintext observation is gated behind explicit PROD→LAB mode flip + consent acknowledgement + audit log, intended only for owned SIMs / consented devices. . The dataclass that flows from the GSMTAP parser into the scoring engine has NO field that could carry a plaintext IMSI. Auditor-visible via `GET /api/v1/sensor/gsm/status` returning `captures_plaintext_imsi_in_prod: false` and `rx_only: true`. . v0.1.0 ships the privacy framework + 8/8 invariant tests + service plumbing. The GSMTAP listener + the 8 scoring heuristics + gr-gsm orchestration land in v0.2 once an RTL-SDR is connected. Package: secubox-simplex Version: 1.0.0-2 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 92 Depends: secubox-core, python3, python3-uvicorn | python3-pip, python3-fastapi | python3-pip, python3-pydantic, nginx, openssl Recommends: docker.io | podman Suggests: certbot Priority: optional Section: net Filename: pool/main/s/secubox-simplex/secubox-simplex_1.0.0-2_all.deb Size: 15066 SHA256: 0adb8e0b9e93d4f7051831c603ddd414bf88a64f5a9b6eac108f9195d88b7009 SHA1: e491b539b3120f4203bf897abfeceb5712a9e476 MD5sum: 2495af9d2d209bba04148ab417559995 Description: SecuBox SimpleX Chat Server Privacy-focused SimpleX SMP/XFTP server management for SecuBox. . Features: - SimpleX Chat SMP relay server - Zero-knowledge messaging infrastructure - No user identifiers or metadata - Docker/Podman container deployment - TLS certificate management - Backup and restore functionality - Connection statistics - Queue management . SimpleX is a decentralized messaging protocol that provides strong privacy guarantees without relying on user identifiers. Package: secubox-smtp-relay Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 74 Depends: secubox-core (>= 1.0), postfix | msmtp Recommends: libsasl2-modules, ca-certificates Homepage: https://cybermind.fr/secubox Priority: optional Section: mail Filename: pool/main/s/secubox-smtp-relay/secubox-smtp-relay_1.0.0-1~bookworm1_all.deb Size: 13040 SHA256: 845b171ea2b0273d5b4abd8acab9dbb589160cb459ba6a159827f1cde68877d5 SHA1: 48c3f70b9869eaef1721962c737ba9093a005eff MD5sum: aef683ee63440bbf72f79a911c5c7a81 Description: SecuBox SMTP Relay — Email forwarding through smarthost SMTP relay module for SecuBox that configures outbound email forwarding through a smarthost (upstream SMTP server). . Features: - Smarthost configuration with SASL authentication - TLS encryption support (mandatory TLS or opportunistic) - Mail queue management (view, flush, delete) - Delivery statistics and real-time log viewing - P31 Phosphor light theme web interface . Port Debian bookworm de luci-app-smtp-relay (SecuBox OpenWrt / CyberMind.fr). Package: secubox-soc Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 161 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-soc/secubox-soc_1.0.2-1~bookworm1_all.deb Size: 27508 SHA256: f46efe7075bf8bc0f5ab2971ebb7bff0e1497d35015a6f1280989773bd289789 SHA1: d0545076fb93260ff996e2d3b435be0690d57c5e MD5sum: dca98a1cdaaa6e382a145180b102542d Description: SecuBox SOC — Security Operations Center aggregator Aggregates alerts, threat-map data, and P2P intel from Hub, WAF, and CrowdSec into a single Security Operations Center dashboard. Read-only consumer of the existing alert sources. . Distinct from sibling packages in the SOC cluster: - secubox-soc-agent — edge node agent reporting up to a gateway. - secubox-soc-gateway — central fleet-monitoring hub (multi-board aggregator). - secubox-soc-web — React-based browser dashboard frontend. Package: secubox-soc-agent Version: 1.0.0-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 72 Depends: python3 (>= 3.11), secubox-core (>= 1.1.0), python3-httpx | python3-pip, python3-fastapi | python3-pip, uvicorn Suggests: secubox-watchdog, crowdsec Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-soc-agent/secubox-soc-agent_1.0.0-1_all.deb Size: 12132 SHA256: a2f9dfd4b1c4e69d6e892d5aa8817afe92f0521346ce8b4539df5dccfd3d8017 SHA1: 91b8249106d3bf3ae7215c5a0348516b903a240f MD5sum: c968158d811eea22bccb192f7c349563 Description: SecuBox SOC Agent — Edge Node Agent for SOC Integration Edge node agent that collects system metrics and security alerts, then pushes them to an upstream SOC gateway for centralized monitoring. . Features: - System metrics collection (CPU, memory, disk, network) - Security alert aggregation (CrowdSec, Suricata, WAF) - HMAC-SHA256 signed metric push to upstream SOC - Remote command execution with signature validation - Automatic enrollment with SOC gateway - Command audit logging . Part of the SecuBox hierarchical SOC architecture. Package: secubox-soc-gateway Version: 1.1.0-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 129 Depends: python3 (>= 3.11), secubox-core (>= 1.1.0), python3-httpx | python3-pip, python3-fastapi | python3-pip, python3-websockets, uvicorn Suggests: secubox-soc-agent, secubox-watchdog Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-soc-gateway/secubox-soc-gateway_1.1.0-1_all.deb Size: 20836 SHA256: bdc3ffa939ebe698cdcbd765e2ba916fe5ed84797e4cc9fea6bedca9d65725b7 SHA1: c563a64fcfc41ee55f22ff2664e1b14bf3644571 MD5sum: 28a7281e5fe60e0c37e5ed9ef32a1abf Description: SecuBox SOC Gateway — Central Fleet Monitoring Hub Central SOC aggregation gateway that receives metrics from edge nodes, provides unified alert streams, correlates threats across the fleet, and enables remote node management. . Features: - Node registration with enrollment tokens - Fleet-wide metrics aggregation - Unified alert stream from all nodes - Cross-node threat correlation - Remote command execution - WebSocket real-time updates - Hierarchical deployment support (regional/central) . Part of the SecuBox hierarchical SOC architecture. Package: secubox-soc-web Version: 1.1.1-1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 256 Depends: nginx Suggests: secubox-soc-gateway Homepage: https://cybermind.fr/secubox Priority: optional Section: web Filename: pool/main/s/secubox-soc-web/secubox-soc-web_1.1.1-1_all.deb Size: 67452 SHA256: 600085b4033a26367a9583327e1e3246d3ff6bc7c39bea912c79a93398eb541e SHA1: 4567e6af5b33253c1c248d63b3b41cb20888792f MD5sum: c7c0291be7eb559502984f5fedc5f2df Description: SecuBox SOC Web Dashboard — Browser-based Fleet Monitoring React-based web dashboard for the SecuBox Security Operations Center. Provides real-time fleet monitoring, alert visualization, and remote node management through a modern web interface. . Features: - Fleet overview with node health grid - Real-time alert stream via WebSocket - Cross-node threat correlation visualization - Remote service management (start/stop/restart) - Threat intelligence map - Cyberpunk-themed responsive UI . Part of the SecuBox hierarchical SOC architecture. Package: secubox-streamforge Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 75 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-psutil Recommends: streamlit Priority: optional Section: net Filename: pool/main/s/secubox-streamforge/secubox-streamforge_1.0.2-1~bookworm1_all.deb Size: 14496 SHA256: 0a716776237069fe524346eff75ddd4772e277fca9bc7135a8f6ace4bab089a3 SHA1: 898353bcfeb226a32e67577dbd656e0caf565e9c MD5sum: 8d8b9db4075ea6f6fa66de6c3cd5d6f4 Description: SecuBox Streamlit Forge Gestionnaire d'applications Streamlit avec templates. Port Debian bookworm de luci-app-streamlit-forge (SecuBox OpenWrt). Package: secubox-streamlit Version: 1.2.4-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 150 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-psutil, lxc, debootstrap Recommends: streamlit Priority: optional Section: net Filename: pool/main/s/secubox-streamlit/secubox-streamlit_1.2.4-1~bookworm1_all.deb Size: 28340 SHA256: 980ba248f7e92887f19744a67c6a50e7b92a0114208a57dd1fe4c6c47417d780 SHA1: b5bd017064e9b52cc52d01b242b35f45f125e3aa MD5sum: fb26ebeea59a72f2b1f6c505bc759487 Description: SecuBox Streamlit Platform Plateforme d'applications Streamlit avec support LXC. Port Debian bookworm de luci-app-streamlit (SecuBox OpenWrt). Package: secubox-system Version: 1.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 498 Depends: secubox-core (>= 1.0), python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-system/secubox-system_1.2.0-1~bookworm1_all.deb Size: 85192 SHA256: c4494b71ea5c865d738005916d8d37b19ca9b88b3a8c923c29f604fe5a386699 SHA1: e4419b9ef68c192401f0306a66e6e34f2e49d22a MD5sum: 26673717e9c9d3d30609f6ccc33c2a7f Description: SecuBox System Hub Centre de contrôle système : santé, services systemd, logs journald, diagnostics, backup. . Port Debian bookworm de luci-app-system-hub (SecuBox OpenWrt / CyberMind.fr). Package: secubox-system-hub Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 43 Depends: secubox-core (>= 1.0), python3-psutil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-system-hub/secubox-system-hub_1.0.0-1~bookworm1_all.deb Size: 8046 SHA256: 5f271361c957bdcf8937ead91a87c715122bd4650ba9dc3607a570b33c1707fb SHA1: 69c4be313304cc8fde9b319c53e732599af5544f MD5sum: 1a1df4cf81ebb8b868106d0899f3674b Description: SecuBox System Hub Dashboard System control center: health, systemd services, journald logs, diagnostics. . Debian bookworm port of luci-app-system-hub (SecuBox OpenWrt / CyberMind.fr). Package: secubox-system-tuning Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 23 Depends: systemd, util-linux, python3 Recommends: lxc Priority: optional Section: admin Filename: pool/main/s/secubox-system-tuning/secubox-system-tuning_1.0.0-1~bookworm1_all.deb Size: 5758 SHA256: cb78dcee5ccb088cf6bf7e725eeb18056144c6b4b8788d62c6beed04480b1d35 SHA1: b46cf837f010fb584cc98a42709aa91661dbd565 MD5sum: bbaec3ee7caac99df414eacf7c21013d Description: SecuBox System Tuning — swap + cgroup MemoryHigh caps for LXC containers Per-board memory tuning for SecuBox: configures a swap file in /data (boards typically ship with 0 swap and exhaust real memory under LXC load), and applies per-LXC-container cgroup MemoryHigh soft caps to throttle (not OOM-kill) runaway containers. . Captures the by-hand fix applied on gk2 on 2026-05-27 (#391) so other boards inherit it automatically. Idempotent: re-running the tuning script after editing the TOML config only diffs the deltas. . Configuration lives at /etc/secubox/tuning/{config.toml, lxc-memory-high.toml}. Apply with secubox-tuning-apply or wait for the next package upgrade. . Distinct from secubox-hardening (kernel sysctl + AppArmor + module blacklist for *security*) — this package is *performance* tuning: swap and cgroup soft limits. Package: secubox-threat-analyst Version: 1.4.6-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 99 Depends: secubox-core (>= 1.0.0) Recommends: crowdsec Priority: optional Section: admin Filename: pool/main/s/secubox-threat-analyst/secubox-threat-analyst_1.4.6-1~bookworm1_all.deb Size: 24538 SHA256: 432476edd98593d19d9fdd54be7f91a05386cfd6d004f047ff12ca8ee30945ff SHA1: 219000b317bfe1f3a66dfaef8ef2624bc4c9f75a MD5sum: 84dd6810759fef7bf92d2a528f7d59dc Description: SecuBox Threat Analyst — AI agent that writes CrowdSec scenarios AI-assisted threat analysis: ingests recent alerts, proposes new CrowdSec scenarios, and writes them under /etc/crowdsec/scenarios/ for operator review and reload. . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella dashboard aggregating CrowdSec + Suricata + WAF alerts (read-only). - secubox-cve-triage — CVE vulnerability triage workflow. - secubox-network-anomaly — DNS-log anomaly detection. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables-driven IP blocklist enforcement. - secubox-openclaw — OSINT / domain reconnaissance. Package: secubox-threatmesh Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 56 Depends: secubox-core (>= 1.0), python3, python3-uvicorn | python3-pip, secubox-vortex-firewall | secubox-toolbox Recommends: secubox-p2p, crowdsec Priority: optional Section: net Filename: pool/main/s/secubox-threatmesh/secubox-threatmesh_1.0.0-1~bookworm1_all.deb Size: 11484 SHA256: 3b67f398318380cf1e0598fac44b848bafa054c50e17ddc6b4febc3b5b776a06 SHA1: 9f37f3ebecf8bf3916813cd750f986b266d1b5ec MD5sum: 63a0a7cd5ceed72deea733076c8905d3 Description: Sovereign threat-intel mesh for SecuBox (CrowdSec CAPI replacement) Replaces the CrowdSec Central API with self-sourced free public blocklists (Phase 1) and peer-to-peer MESH distribution of locally-detected decisions over the SecuBox WireGuard mesh (Phase 2), plus a status/aggregate/bouncer-compatible API and dashboard (Phase 3). All IOCs flow into the shared threat_intel table that secubox-blacklist-sync drains into the nft blacklist. No central account, no enrollment, no paywall, no IP-blocklisting by a third party. Package: secubox-threats Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 82 Depends: secubox-core (>= 1.0.0), python3-tomli Recommends: secubox-crowdsec, suricata Priority: optional Section: admin Filename: pool/main/s/secubox-threats/secubox-threats_1.1.0-1~bookworm1_all.deb Size: 14822 SHA256: 89d532523f16a98e83af217a3b1f5eb9a7204303b479ead3d869c738d114b2b0 SHA1: 07b724a5f1e5eda99b83f8d34e20501510089fb6 MD5sum: 51ff1785590e264c12876ced974aba82 Description: SecuBox Unified Threats Dashboard Unified security threats dashboard aggregating alerts from CrowdSec, Suricata, and WAF. Features threat intelligence, IOC management, risk scoring, incident tracking, and report generation. Package: secubox-toolbox Version: 2.8.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 1337 Depends: secubox-core (>= 1.0), python3 (>= 3.11), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jinja2, python3-pydantic, python3-httpx, python3-qrcode, python3-fpdf2 | python3-pip, nftables, iproute2, hostapd, dnsmasq, mitmproxy, jq, openssl, adduser, fonts-dejavu-core, fonts-symbola, fonts-noto-color-emoji, python3-yaml, python3-geoip2 | geoipupdate, lxc, debian-archive-keyring Recommends: bridge-utils, tor, python3-socksio Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-toolbox/secubox-toolbox_2.8.0-1~bookworm1_all.deb Size: 353366 SHA256: a2a4e1c1560fe4f5f082689defc7be2c66690e5e7591f0667984070273ec6d85 SHA1: 03920823b8449045f438487b24c3ee80d19d96bf MD5sum: 8dcf71a7e5c007a560095661749e8836 Description: SecuBox-DEB ToolBoX — Gondwana Cabine Numérique (captive AP + MITM analyzer) Phase 1 du parent #474 (ToolBoX Pipeline). Productionize le PoC captive portal en package dédié : splash + consent R2 + CA distribution iOS (mobileconfig) + nftables TPROXY → mitmproxy transparent + addons (cookies/dpi/avatar/ja4/soc-relay) → modules SecuBox existants. . Conforme CSPN (R2 opt-in explicite, MAC hashing avec sel rotatif daily, retention 24h défaut). Cible : borne publique cabine téléphonique numérique. Package: secubox-toolbox-ng Version: 0.1.26-1~bookworm1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 8751 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-toolbox-ng/secubox-toolbox-ng_0.1.26-1~bookworm1_arm64.deb Size: 2967218 SHA256: 6087b51bf9bb82e7cc877774a37bb7b157940739f732aca8abac642b8bc4c61f SHA1: f1125b5221a7f953ce8cebe41c40720371708a60 MD5sum: 1148313424b9557ed4d184922b8765c4 Description: SecuBox-Deb — Go MITM engine (migration target, DARK) Multi-core Go re-implementation of the R3 toolbox MITM engine (#662), ported off the GIL-bound Python mitmproxy worker fleet. Ships the standalone sbxmitm binary plus a DISABLED systemd template unit. . This package is the Phase-6-cutover migration target. The unit is NOT enabled or started by the maintainer scripts — the live R3 tunnel keeps running on the Python workers until the cutover is performed manually. Installing this package changes NO runtime behaviour (no service start, no nft DNAT). Package: secubox-tor Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 76 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-tor/secubox-tor_1.0.1-1~bookworm1_all.deb Size: 13608 SHA256: 2359569ab0cffa8b8ecb9999b8aa26d46a9cb44036ba18bbea75453b98740c65 SHA1: 01c1151f24d0d587cfd384e885e2e8c0a2153596 MD5sum: c4ceb6367bbdf0b46a6643ebe7b685df Description: SecuBox Tor — Tor relay + hidden-services manager Manages a local Tor daemon: transparent-proxy + SOCKS modes, hidden-service publishing, circuit monitoring, identity rotation, DNS-over-Tor, and kill-switch enforcement. Pairs with secubox-exposure when publishing hidden services for SecuBox vhosts. Package: secubox-torrent Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 112 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-torrent/secubox-torrent_1.0.0-1~bookworm1_all.deb Size: 18104 SHA256: 2756b1af23898d281c2f1147ca52c55398f66cb905bc5611144118fdf7088b5d SHA1: 4937705f379985fc191c3d3dcb0f8842429bf680 MD5sum: c31d2d1de21b1b22859fb0eadfab413f Description: BitTorrent client management for SecuBox SecuBox module for managing BitTorrent downloads via Transmission. Provides Docker container management, torrent lifecycle (add/remove/ pause/resume), RSS feed subscriptions, category management, and speed limiting. . Features: - Transmission daemon via Docker/Podman - Torrent add via magnet links, URLs, or .torrent files - Download/upload speed limiting with scheduling - RSS feed subscriptions for automatic downloads - Category/label management - P31 Phosphor light theme web UI . Provides FastAPI backend on /api/v1/torrent/ via Unix socket. Package: secubox-traffic Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 79 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core, iproute2 Recommends: linux-image-amd64 (>= 5.4) | linux-image-arm64 (>= 5.4) Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-traffic/secubox-traffic_1.0.0-1~bookworm1_all.deb Size: 13488 SHA256: 8f6d8a0d18fb6283bba03ffb2a441af7737ea520661abb9ef34737ddfbce013c SHA1: 1ebfa26917657cac7f9e4e5e71eaab353d02c034 MD5sum: 4167c838ea98a9daab575a7d1a387cbc Description: SecuBox Traffic Shaper Advanced QoS traffic control with TC/CAKE. Provides traffic classification, bandwidth management, priority-based shaping, and preset configurations. Package: secubox-turn Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: secubox-core, coturn Priority: optional Section: net Filename: pool/main/s/secubox-turn/secubox-turn_1.0.0-1~bookworm1_all.deb Size: 14300 SHA256: 611acc1565b4860fecaa371f830f1f45b30510944038d9f34882bbb70250fcfe SHA1: 81f88c7cc88139ca8c84a7c7eb7e51a779c5852f MD5sum: 2c45f757bb4c7cd6f4a70272292bc6e3 Description: SecuBox TURN/STUN Server Management TURN/STUN server management interface for SecuBox WebRTC. Features: - coturn service control (start/stop/restart) - User management with turnadmin integration - Temporary credential generation (HMAC) - Active session monitoring - Configuration editor - Three-fold architecture (Components/Status/Access) Package: secubox-ui-manager Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 126 Depends: python3 (>= 3.11), kbd, xinit, xserver-xorg-core, chromium | chromium-browser, unclutter, x11-xserver-utils Recommends: python3-textual, secubox-console Suggests: xserver-xorg-video-vmware, xserver-xorg-video-qxl Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-ui-manager/secubox-ui-manager_1.0.0-1~bookworm1_all.deb Size: 23714 SHA256: 9ae0408fafbd943b0c49dbe4c1e5141610a82ee28850e1d12e402641340e890b SHA1: 4c455ea841591d74c23d0aa1afc7fdda3dae904d MD5sum: ecdafee8a37c3d78f2644da55a087760 Description: SecuBox Unified UI Manager Manages the SecuBox user interface with automatic mode selection and graceful fallback support. . Features: - KUI: Kiosk UI mode (X11 + Chromium fullscreen) - TUI: Terminal UI mode (Textual-based console) - Console: Fallback to standard getty login - Automatic hypervisor detection (VirtualBox, QEMU/KVM, VMware) - Per-hypervisor graphics optimization - Modular debug system with 6 verbosity levels - Health monitoring with automatic fallback on failure . This package is part of the SecuBox security appliance. Package: secubox-users Version: 1.4.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 147 Depends: python3-fastapi, python3-uvicorn, python3-argon2, python3-pyotp, python3-qrcode, python3-jsonschema, python3-tomli | python3 (>= 3.11), secubox-core (>= 1.0), jq Priority: optional Section: admin Filename: pool/main/s/secubox-users/secubox-users_1.4.2-1~bookworm1_all.deb Size: 28478 SHA256: 2a178aaa354d871bf81283158e7baa183e8d4ceb6800ef1ce41154a673ca3989 SHA1: c7727bb2cd404c1a9a749b0a58868e04480da149 MD5sum: 058502db7e3e8750c970cf61acf7c9a4 Description: SecuBox Users — local account manager (Argon2id + TOTP + RBAC) Unified user-account management for SecuBox: account create/disable/ enable, password reset (Argon2id hashes), TOTP enrollment with backup codes, session management, and role-based access control. . Distinct from sibling packages in the identity stack: - secubox-identity — decentralized identity (DID) management. - secubox-auth — JWT auth guardian / session middleware (consumes secubox-users state). - secubox-portal — web login portal. - secubox-authelia — Authelia SSO IdP (LXC). - secubox-avatar — profile image + display-name manager. Package: secubox-vault Version: 1.0.0-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 58 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-cryptography, secubox-core Recommends: vault Priority: optional Section: admin Filename: pool/main/s/secubox-vault/secubox-vault_1.0.0-1_all.deb Size: 9166 SHA256: 96465aa359ecab2ab1a99763bbf172de423b3e31466775658140479d9d6047ca SHA1: 3208090cfa27498b53e7d2c235a7f69c28431b76 MD5sum: 4b823ff48a4ee244e63754761880cb4a Description: SecuBox Vault - Secrets management Encrypted secrets storage for SecuBox. Provides secure storage for API keys, passwords, and credentials with audit logging and rotation support. Package: secubox-vhost Version: 1.1.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 106 Depends: secubox-core (>= 1.0), nginx, python3-jinja2 Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-vhost/secubox-vhost_1.1.1-1~bookworm1_all.deb Size: 19034 SHA256: 662fe977eddb921be9dc40062195b1b8bc9aad4042bf6fdcaec5564cde861cd9 SHA1: 5fa7e751229ab434e436bcca5233d60116e4701d MD5sum: 66ce55170584fe93c3fc4a61d4dc50bc Description: SecuBox Virtual Host Manager Gestion des hôtes virtuels nginx et SSL : Let's Encrypt, autosigné, reverse proxy, redirections. . Port Debian bookworm de luci-app-vhost-manager (SecuBox OpenWrt / CyberMind.fr). Package: secubox-vm Version: 1.0.1-1 Architecture: all Maintainer: SecuBox Team Installed-Size: 68 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: libvirt-daemon-system, qemu-system-x86, virtinst, lxc Priority: optional Section: admin Filename: pool/main/s/secubox-vm/secubox-vm_1.0.1-1_all.deb Size: 11186 SHA256: 5a9d5d5fcce89edf0eb60761f0e691701da9fb75dd8337f48c3da1059610d2d3 SHA1: d102f71ffe237a25a1612c829eec9c50cf34e7d5 MD5sum: a52a15983c60f1528881431246aa98c0 Description: SecuBox VM Manager - Virtualization management Virtual machine and container management for SecuBox. Supports KVM/QEMU virtual machines via libvirt and LXC containers. Package: secubox-voip Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 108 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip Recommends: docker.io | podman Priority: optional Section: net Filename: pool/main/s/secubox-voip/secubox-voip_1.0.0-1~bookworm1_all.deb Size: 16742 SHA256: 8143a79f16c36a7dd3a23db0efd579be1f18ffdbaa06b731f8afc0226bec8650 SHA1: 69c7eb906106cbfc78a99ee8aa0fcd84f2a8429b MD5sum: b806d3be24e4b642d8d2ffd91a2db9cf Description: VoIP/PBX management module for SecuBox SecuBox module for managing Asterisk/FreePBX PBX system via Docker. Provides extension management, trunk configuration, call routing, IVR menus, voicemail, and call detail records. . Features: - Docker/Podman container management - Extension and voicemail management - SIP trunk configuration - Inbound/outbound route management - IVR menu builder - Call detail records (CDR) - SIP peer status monitoring . Ported from OpenWRT luci-app-voip pattern. Provides FastAPI backend on /api/v1/voip/ via Unix socket. Package: secubox-vortex-dns Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 58 Depends: secubox-core (>= 1.0.0) Recommends: unbound, dnsmasq Priority: optional Section: admin Filename: pool/main/s/secubox-vortex-dns/secubox-vortex-dns_1.0.1-1~bookworm1_all.deb Size: 10758 SHA256: 3f2109fdc7d6ca067def491b4b7f100c80361304d5360499604120818b99e9de SHA1: fead9212fd4d911922896f0744d01ef565200baf MD5sum: 9aa6767da35643c0506ca4da6965d336 Description: SecuBox Vortex DNS — recursive firewall with RPZ + threat feeds Recursive DNS firewall: aggregates threat-feed blocklists into RPZ zones and pushes them to unbound (preferred) or dnsmasq. Inline blocking happens before resolution, so policy-violating lookups never leave the box. . Distinct from sibling packages in the DNS cluster: - secubox-dns-guard — post-resolution anomaly detection (dnsmasq-only). - secubox-ad-guard — ad/tracker-specific lookups with per-device stats. - secubox-dns — authoritative BIND zone manager (publishing). - secubox-dns-provider — external registrar API. Package: secubox-vortex-firewall Version: 1.0.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 64 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-vortex-firewall/secubox-vortex-firewall_1.0.2-1~bookworm1_all.deb Size: 11872 SHA256: 21b5f27fc32ab8cc4137476d86b19cb0535e6934e7decd328c6b9db218e444f2 SHA1: f808928c5cc6d813b7ac9dedc1a5d42dab6cfb1e MD5sum: 08d169f4707fb4fe8faac2b35628075d Description: SecuBox Vortex Firewall — nftables threat-feed enforcer Subscribes to threat feeds (Spamhaus, AbuseIPDB, FireHOL, internal SecuBox blocklists) and compiles them into nftables sets for inline drop/log enforcement. Complements secubox-vortex-dns (which handles DNS-layer blocking via RPZ). Package: secubox-waf Version: 1.2.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 7284 Depends: secubox-core (>= 1.0.0), lxc, jq, curl Recommends: crowdsec, secubox-crowdsec, secubox-haproxy Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-waf/secubox-waf_1.2.7-1~bookworm1_all.deb Size: 6649444 SHA256: a12b08d5be32e7d8e53338f4fd3d5765b48fd852be4111d59a05778c9efef96e SHA1: 0c874d13fb5de889a41c4f674e19c555fd48d523 MD5sum: b4d947f4715773785ff6d1d778254007 Description: SecuBox Web Application Firewall (mitmproxy LXC) LXC-contained mitmproxy WAF for HTTP/HTTPS traffic inspection. All HAProxy traffic routes through mitmproxy for deep inspection. . Features: - LXC container isolation (mitmproxy in 10.100.0.60) - Host-based routing via haproxy-routes.json - X-SecuBox-WAF header tagging for inspected traffic - 300+ threat detection rules across 14+ categories - SQL injection, XSS, RCE, LFI detection - wafctl control script (status/install/start/stop/routes) - CrowdSec integration for centralized banning - HAProxy reverse proxy integration Package: secubox-waf-ng Version: 1.0.0-1~bookworm1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 6989 Depends: adduser, apparmor Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-waf-ng/secubox-waf-ng_1.0.0-1~bookworm1_arm64.deb Size: 2535664 SHA256: 4f45640636e694106c29ca277e6adfa2e6526401279162d6dd23388ef915528e SHA1: d4a428bae83f17dfb9d196e8b3e94ca23ab38f27 MD5sum: abe0bc9bea178284f1d756c4195607d6 Description: SecuBox-Deb — Go WAF reverse-proxy engine (host-native sbxwaf) Host-native Go WAF reverse-proxy replacing mitmproxy/mitmdump for the SecuBox-DEB WAF layer (#744). Ships the standalone sbxwaf binary plus hardened systemd worker template units (secubox-waf-ng-worker@{1,2}). . Features: TLS-forging reverse proxy, hot-reloadable WAF rules engine, graduated WARNING/BAN responses, threat log (NDJSON), CrowdSec LAPI bridge, RGPD Set-Cookie ledger, media response cache, themed error pages. . CSPN-compliant: dedicated secubox-waf unprivileged user, AppArmor enforce profile, NoNewPrivileges, ProtectSystem=strict, RuntimeDirectoryPreserve=yes (avoids the /run/secubox socket-wipe cascade, #741). Package: secubox-watchdog Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 77 Depends: secubox-core (>= 1.0.0) Priority: optional Section: admin Filename: pool/main/s/secubox-watchdog/secubox-watchdog_1.0.1-1~bookworm1_all.deb Size: 13788 SHA256: da2eb4168ff17d039a3093a86f767068e34441ef306ef895cbcc5ad6b25e6f9a SHA1: 21b138ba11f02e585337f5d921beeb6a4e6b4b57 MD5sum: 418042db2f10e6f257a3e6c6c43658e0 Description: SecuBox Watchdog — LXC + service + HTTP health monitor Health monitor for LXC containers, systemd services, and HTTP endpoints with auto-restart for failed targets. Real-time dashboard with 30-second auto-refresh. . Distinct from sibling packages in the monitoring cluster: - secubox-health-doctor — vital-services health check (different target set: focuses on SecuBox-internal critical services). - secubox-device-intel — asset discovery + device fingerprinting (network-side, not service-side). - secubox-netdata, secubox-glances, secubox-metrics — system metrics dashboards (different upstreams: Netdata vs Glances vs Prometheus). Package: secubox-wazuh Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: SecuBox Team Installed-Size: 57 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: wazuh-agent | wazuh-manager Priority: optional Section: admin Filename: pool/main/s/secubox-wazuh/secubox-wazuh_1.0.1-1~bookworm1_all.deb Size: 10136 SHA256: 3cf2e5bd19589c14995309899f07f917905cea904e33a40ede390f9ae0a43ab2 SHA1: 054a3293612223b503a9597cd6fb522482bf8a9d MD5sum: 38a36a9726731040b0057e38840c0cbf Description: SecuBox Wazuh SIEM integration Wazuh SIEM integration for SecuBox. Provides management interface for Wazuh agent/manager, alert viewing, and security monitoring. Package: secubox-webmail Version: 2.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-mail (>= 2.2) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-webmail/secubox-webmail_2.2.0-1~bookworm1_all.deb Size: 1386 SHA256: 5b81d2ab13933d33e245bc6fd796cbd5c6492bbffc6f13889d6e48d1f72da330 SHA1: 4832c42406ed15fb1dd1cd4909ba4f69acc4903e MD5sum: 95ed4d234e8a149ab6d7814869caf73a Description: Transitional package — webmail admin folded into secubox-mail The webmail admin API is now part of secubox-mail (>= 2.2). This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-webmail-lxc Version: 2.2.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-mail (>= 2.2) Priority: optional Section: oldlibs Filename: pool/main/s/secubox-webmail-lxc/secubox-webmail-lxc_2.2.0-1~bookworm1_all.deb Size: 1520 SHA256: 7de2ed4ecf8abfad0577c281dc3eb601fbccfb26bf8290251d62631aa66ab46e SHA1: 1a8bc22aefb54e779f2311767fc261a851ccb038 MD5sum: cc421bd2b212693c708eb7ba8aadcb8e Description: Transitional package — webmail LXC functionality moved to secubox-mail Roundcube webmail now lives inside the single 'mail' LXC managed by secubox-mail (>= 2.2). This package ships no files. Safe to apt-get autoremove after upgrade. Package: secubox-webradio Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 104 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip Recommends: ffmpeg, podman | docker.io Priority: optional Section: sound Filename: pool/main/s/secubox-webradio/secubox-webradio_1.0.0-1~bookworm1_all.deb Size: 16486 SHA256: 7f5858ecccb7265fac283c60e3dabfcc658527e50f2ccf311bd0a99b70f9e48e SHA1: 5c6174ccce52b1ab3a2200d2556753e91f8fe060 MD5sum: 65bc79879c31748a3d45974d2b6a3760 Description: Internet Radio Streaming for SecuBox Debian bookworm port of internet radio management module. Provides FastAPI backend on /api/v1/webradio/ via Unix socket. . Features: - Internet radio station management and favorites - Icecast/Liquidsoap streaming server via containers - Recording functionality (MP3, OGG, AAC) - Schedule programming for playback and recording - Docker/Podman container management - Audio visualizer in web player - CRT-light P31 phosphor theme frontend with violet accents Package: secubox-wireguard Version: 1.0.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 344 Depends: secubox-core, wireguard-tools, qrencode Priority: optional Section: net Filename: pool/main/s/secubox-wireguard/secubox-wireguard_1.0.0-1~bookworm1_all.deb Size: 57454 SHA256: 7d61a26e7f538dbe92deca462072a48b0945fd4147398fc63cd16723eea15c9c SHA1: fc627d580c2809b4d24c1abc846082adc4ff1e0e MD5sum: a8994efcfa8f60fb4443d7313b7948b0 Description: SecuBox WireGuard VPN Dashboard WireGuard VPN management interface for SecuBox. Features: - Interface management (up/down/status) - Peer management with auto-config and QR codes - Traffic statistics and monitoring - Migration from OpenWrt - Three-fold architecture (Components/Status/Access) Package: secubox-yacy Version: 1.0.11-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 70 Depends: secubox-core (>= 1.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq Recommends: secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-yacy/secubox-yacy_1.0.11-1~bookworm1_all.deb Size: 17128 SHA256: bc039aa10a7c73d6806d31e68089cf4078c4d6c31668f3d686ab49e01fbe9bee SHA1: 01582a43a04a928f438537b7542bd2bc9b7338b7 MD5sum: 1931021479820ca5f004b1e1c34050ec Description: SecuBox YaCy — peer-to-peer search engine Hosts YaCy in a Debian LXC at 10.100.0.80 on br-lxc with a sovereign, decentralised search index that does not depend on any third-party search provider. Peer-to-peer discovery, configurable crawl profiles, user-managed blacklist. . The host-side FastAPI control plane runs on /run/secubox/yacy.sock and is exposed by nginx at /api/v1/yacy/. The native YaCy admin UI is iframe-embedded under /yacy/ (proxy_pass to the LXC). . yacyctl exposes the canonical SecuBox three-fold introspection plus peer/index/query/blacklist/crawler nouns matching the SEARCH layer of the CTL grammar (sister to OPS MONITORING / healthctl / grafanactl). Package: secubox-yggdrasil Version: 1.1.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 97 Depends: secubox-core (>= 1.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Conflicts: secubox-mesh (<= 1.999.0) Replaces: secubox-mesh (<= 1.999.0) Provides: secubox-mesh-yggdrasil Priority: optional Section: admin Filename: pool/main/s/secubox-yggdrasil/secubox-yggdrasil_1.1.0-1~bookworm1_all.deb Size: 16724 SHA256: af5cca7f92297bd43a4e515e3fc6bf6f2213aa8284a7357a9b625a521fa064ca SHA1: d7769ff6750a2a9510894b3e83d59f385b4b309d MD5sum: 9f876ea3956b2b9be68b5d9f9e51d076 Description: SecuBox Mesh DNS - Meshname DNS for mesh networks Meshname DNS management for Yggdrasil and mesh networks. Package: secubox-zigbee Version: 2.6.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 125 Depends: secubox-core (>= 1.0), secubox-mqtt (>= 2.4), lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, udev Recommends: secubox-iot-hub Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-zigbee/secubox-zigbee_2.6.0-1~bookworm1_all.deb Size: 33518 SHA256: 25428c0d38a7a36ddd465823ffe7c9b7b90cb6f13e680fc5eb524b5ea6949927 SHA1: 27f65f2c29f2c482434feac09565d0ad207cb656 MD5sum: fae606b0c8e075cf45a06f8528c9b72e Description: SecuBox Zigbee — Coordinator RF IoT (MIND layer) Hosts zigbee2mqtt 2.x in a Debian bookworm LXC at 10.100.0.111 on br-lxc. . Wraps the upstream zigbee2mqtt daemon (Apache-2.0) with a SecuBox host control plane: FastAPI on /run/secubox/zigbee.sock, reverse-proxied at /api/v1/zigbee/ on the canonical hub vhost. . The Sonoff Zigbee 3.0 USB Plus dongle (CC2652P, VID:PID 1a86:55d4) is detected by a shipped udev rule and exposed inside the LXC at /dev/secubox-zgb. ConBee II (1cf1:0030) and generic CP210x (10c4:ea60) are also recognized. . zigbee2mqtt is wired to the SecuBox broker (secubox-mqtt v2.4) as user z2m on topic zigbee2mqtt/# — credentials are read from /etc/secubox/secrets/mqtt-z2m at install time and rendered into configuration.yaml. network_key and pan_id are GENERATEd by zigbee2mqtt on first run; never hard-coded. . zigbeectl follows the SecuBox CTL grammar: components / status / access + install / reload + device / network / topology / permit-join nouns (list-only in v2.4.0). Package: secubox-zkp Version: 1.0.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 65 Depends: secubox-core (>= 1.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Priority: optional Section: admin Filename: pool/main/s/secubox-zkp/secubox-zkp_1.0.1-1~bookworm1_all.deb Size: 11604 SHA256: cc413b0a4ea5f925b68721400510eadcfcccc780394d7b67bedfc2ce8e480cca SHA1: f3e023de6bf0f5d7f6d74fe04460dd1f1449bc0f MD5sum: 3835d446a40420d52308ea888570e307 Description: SecuBox ZKP - Zero-Knowledge Proof Dashboard Zero-Knowledge Proof Hamiltonian management for SecuBox.