Package: gabriel-mood Source: sbxos-audio-mood Version: 0.10.6-1~trixie1 Architecture: all Maintainer: Gerald Kerma Installed-Size: 25 Depends: sbxos-audio-mood Homepage: https://secubox.in Priority: optional Section: oldlibs Filename: pool/main/s/sbxos-audio-mood/gabriel-mood_0.10.6-1~trixie1_all.deb Size: 15540 SHA256: 01a864ad97a95a337b5312e790f46d879b2a988e2dd4d67b19275cdba208edbd SHA1: 2afd549c2f7deb91324b507cbe8ef09a9fba8f40 MD5sum: 827c735da930ff9ccf38b85f44e9b765 Description: transitional package — renamed sbxos-audio-mood gabriel-mood s'appelle désormais sbxos-audio-mood (convention : secubox-* pour le système, sbxos-* pour l'interface). Ce paquet transitionnel n'installe rien ; il peut être retiré. Package: sbxos Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox, secubox-service-hall Recommends: secubox-service-assistant, secubox-fonction-correspondance, secubox-fonction-nuage, secubox-fonction-media, secubox-fonction-publication, secubox-fonction-veille, secubox-fonction-maison Suggests: secubox-fonction-ia, secubox-fonction-provision Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/sbxos_0.1.42-1~trixie1_all.deb Size: 4000 SHA256: eea3aa05c329523ce83c1365b6c4c3b42697ecb13c8f32f1cbabc6f4809c4d70 SHA1: 0a49f84446cbd284fe6e41844a7742b49c3dd0db MD5sum: 2edb66ee32c14bab7f3259b5b0770952 Description: SecuBox — racine « SBX OS » Le Hall et tous ses composants, posés sur la box : l'environnement complet. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: sbxos-audio-mood Version: 0.10.6-1~trixie1 Architecture: arm64 Maintainer: Gerald Kerma Installed-Size: 9276 Depends: adduser, secubox-core (>= 1.5.39~) Recommends: nginx Breaks: gabriel-mood (<< 0.10.0~) Replaces: gabriel-mood (<< 0.10.0~) Homepage: https://secubox.in Priority: optional Section: sound Filename: pool/main/s/sbxos-audio-mood/sbxos-audio-mood_0.10.6-1~trixie1_arm64.deb Size: 3366782 SHA256: 8f6838b1693a81973140831456e7f289dd79c2b4a3795ca93107cd8eb9bb5a01 SHA1: 9685a5ab2a722f5fdc08d5760c24dfa5a6d1ed42 MD5sum: ad1c48a1d8ad62ba6222df95e0187e13 Description: SecuBox — indices prosodiques de la voix, analyses localement Audio Mood mesure ce qu'une voix fait entendre : hauteur, energie, debit, irregularite de periode et d'amplitude, couleur spectrale. Il en tire des INDICES, presentes comme tels. . Il ne lit pas les emotions. La litterature etablit solidement que ces grandeurs suivent l'ACTIVATION — on parle plus haut, plus fort et plus vite quand on est active, quelle qu'en soit la cause — et n'etablit pas la valence : rien dans le signal ne distingue de facon fiable la joie de la colere. Le module le dit dans son interface, dans son API, et le tient dans son code : la confiance est plafonnee, et sans etalon personnel aucun etat n'est affirme. . Le micro est celui du navigateur. L'audio traverse le reseau local, est analyse sur la board, et disparait : aucun echantillon n'est ecrit sur le disque. Seuls des agregats par minute sont conservés, avec une purge automatique et un geste d'effacement. Package: secubox Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-fonction-socle, secubox-fonction-reseau, secubox-fonction-bouclier Recommends: secubox-fonction-supervision Suggests: secubox-fonction-mesh Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox_0.1.42-1~trixie1_all.deb Size: 3948 SHA256: 39e2d836b86a60bd095d4637c15000c2ffebca36b2e1163631447d099edcbeeb SHA1: f6a9a38effd8f3963e61206fcfec56d97ca12fe1 MD5sum: 1c027a164cdce452b2d07f5ee964677c Description: SecuBox — racine « SecuBox » La box : socle, réseau d'opérateur et bouclier, sans interface grand public. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-ad-guard Version: 1.14.4-1~trixie1 Architecture: all Maintainer: SecuBox Installed-Size: 564 Depends: secubox-core (>= 1.7.10), secubox-aggregator (>= 0.4.1), unbound, python3-httpx | python3-pip, dns-root-data Recommends: python3-maxminddb, secubox-toolbox Priority: optional Section: admin Filename: pool/main/s/secubox-ad-guard/secubox-ad-guard_1.14.4-1~trixie1_all.deb Size: 133748 SHA256: eb600c85f85e77e8f023b2edf616894afd94aab4a6df7714bf0be54b306fd66b SHA1: c3d8e90ccf508ba66b09b9b7cd97fe2659089bb7 MD5sum: 98f540f4c960ae2b91e5da3752d08315 Description: SecuBox Ad Guard Module Ad and tracker detection with per-device statistics. Features blocklist management, delayed blacklisting workflow, and device-type classification (IoT, phones, smart TVs, etc.). . Provides a board-wide DNS ad/tracker sinkhole (#740): compiles the modular filter-list resource (EasyList/EasyPrivacy/OISD/HaGeZi/NoScript) and renders it as Unbound always_nxdomain local-zones, refreshed weekly by timer. Package: secubox-aggregator Version: 0.4.2-1~bookworm1 Architecture: all Maintainer: CyberMind FR Installed-Size: 97 Depends: python3:any, python3-httpx, python3, python3-fastapi, python3-uvicorn, secubox-core Breaks: secubox-groupd (<< 0.3.1~) Replaces: secubox-groupd (<< 0.3.1~) Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: net Filename: pool/main/s/secubox-aggregator/secubox-aggregator_0.4.2-1~bookworm1_all.deb Size: 27118 SHA256: 6cbb9b776f1acd50406629af8a81df87053c01fa4d9d48a4267332d97fc5806c SHA1: 47cf69339b96025fcd59579acb9bbc3d524279eb MD5sum: 2a7c464616c8811a4bb34803fb37ee92 Description: SecuBox API gateway — master ASGI process Mounts SecuBox module FastAPIs as sub-apps under /api/v1/, eliminating the duplicated Python interpreter overhead of running each module as its own uvicorn process. . Pilot mounts (per /etc/secubox/aggregator.toml) save ~30 MB RAM per migrated module versus a per-module systemd unit. Full migration of the ~100 SecuBox modules would free ~3 GB on a typical install. Package: secubox-ai-gateway Version: 1.5.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 214 Depends: secubox-core (>= 1.4.0) Breaks: secubox-localrecall (<< 1.1.4~), secubox-mcp-server (<< 1.1.8~) Replaces: secubox-localrecall (<< 1.1.4~), secubox-mcp-server (<< 1.1.8~) Priority: optional Section: admin Filename: pool/main/s/secubox-ai-gateway/secubox-ai-gateway_1.5.0-1~trixie1_all.deb Size: 38194 SHA256: 935102e46898f8a866fe98649f449b5349ce328604409f591ccdf88e1aa22070 SHA1: 452d621429f38c53e77572aa6fb455712e7a8518 MD5sum: 7c118582afb60360b0b1dd4c441f728b Description: SecuBox AI Gateway — data-sovereignty router for AI requests Routes AI inference requests across the available backends with per-request policy enforcement (sovereignty constraints, cost caps, data-class rules). Tracks egress + redirects sensitive prompts to local backends. . Distinct from sibling packages in the AI cluster: - secubox-ai-insights — ML-based threat detection. - secubox-mcp-server — Model Context Protocol server. Package: secubox-annuaire Version: 0.14.4-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 645 Depends: secubox-core (>= 1.5.24), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-pydantic, python3-cryptography, python3-tomli-w, gnupg, gpg-agent, adduser, util-linux Breaks: secubox-openpgp (<< 0.3.1~) Replaces: secubox-openpgp (<< 0.3.1~) Priority: optional Section: admin Filename: pool/main/s/secubox-annuaire/secubox-annuaire_0.14.4-1~trixie1_all.deb Size: 143294 SHA256: 7b5c1a8745a9daacf18d0ec6f916d8919d801fe5525bb71d0f51159a19176c7e SHA1: 14fa678a29ea02d837a1d7792b64966b4085c3a5 MD5sum: aa40d59fdfc6c6538444e344055be7ea Description: SecuBox Annuaire-Miroir — federated self-certifying trust substrate The Annuaire-Miroir is the trust directory for SecuBox-DEB, providing a BLAKE2b-chained, CONIKS-style append-only audit journal with four protocols: AUTO-ADD (provisional discovery), INVITE (capability-based membership), PROPOSAL (anti-plutocratic governance), and EMANCIPATE (staged anchor removal). All objects are Ed25519-signed, RFC 3339-timestamped, and access-gated by the can() resolver. Served on /run/secubox/annuaire.sock, JWT-gated. Package: secubox-antirootkit Version: 0.1.0-1~bookworm1 Architecture: all Maintainer: Gérald Kerma Installed-Size: 122 Depends: auditd, debsums, sudo, nftables, python3, python3-fastapi | python3-pip Recommends: aide, rkhunter, chkrootkit Priority: optional Section: admin Filename: pool/main/s/secubox-antirootkit/secubox-antirootkit_0.1.0-1~bookworm1_all.deb Size: 27904 SHA256: dd56c8a2177f893d326186fb02b71cd50769917a5945ac5fef8569394335b596 SHA1: 75ee757107b4b2b8ee64d7eb3a40ceff50d9944c MD5sum: b6951d67bf947811bfa0915a754d7519 Description: SecuBox Anti-Rootkit - host-IDS anti-escape + exec scanner Host-based intrusion detection, v1 scope. LIVE: an auditd-fed exec-surveillance scanner that jails unknown/non-dpkg-backed executables into an egress-blocked cgroup (anti-escape), an append-only exec forensic log, a web panel, and an alert-only manual quarantine workflow (never auto-deletes or auto-chmods a suspect binary — it only emits an operator-reviewable plan). . Targeted auditd watches (low volume by design) cover the common unbacked exec surface: /usr/local/bin, /usr/local/sbin, /tmp, /dev/shm, /opt, /usr/lib/jvm and /home. . SCAFFOLDED (v1.1 follow-up, not yet scheduled): debsums/aide/rkhunter/ chkrootkit integrity scanning — the wrapper module (api/integrity.py) and the Recommends below exist, but no timer wires it up automatically yet. Package: secubox-appstore Version: 0.9.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 405 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, sudo Breaks: secubox-metacatalog (<< 1.2.5~) Replaces: secubox-metacatalog (<< 1.2.5~) Priority: optional Section: admin Filename: pool/main/s/secubox-appstore/secubox-appstore_0.9.0-1~bookworm1_all.deb Size: 72170 SHA256: 5b4dab4f6e79765c9e05fbf04e392e1ca895405ea6407de57254a5053555dc81 SHA1: f2d95a6f89e53c29a7771e043ddffdc443e55a66 MD5sum: c1371fa047a41c7d4759f801ce99671e Description: SecuBox App Store — module catalog & lifecycle (Phase A) Categorized, tiered, searchable catalog of SecuBox modules with live install/run state, served as a hub web UI. Phase A is read-only; install, enable/disable, preferences and profiles arrive in later phases via a privileged worker. Package: secubox-assist Version: 0.3.2-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 165 Depends: python3:any, python3-fastapi, python3-uvicorn, secubox-core (>= 1.4.0), secubox-annuaire (>= 0.10.11~), secubox-p2p, sudo, adduser Recommends: python3-websockets Priority: optional Section: net Filename: pool/main/s/secubox-assist/secubox-assist_0.3.2-1~trixie1_all.deb Size: 42666 SHA256: 896afdf4cf60faf5c071aeb316f51ccd0fd7bcd9dac2daf9adc6bb39e11ec0b6 SHA1: c173bdb666d5cd30c317cbb97fd4ca6c594a38e4 MD5sum: 13f6840733d71df7812a5fc22dfec8b7 Description: SecuBox assistance request — real-time help sessions . python3-websockets is a Recommends, not a Depends: the WS daemon needs the websockets library, but on boards where a newer websockets is provided out of band (pip, to satisfy a uvicorn version skew) the apt package is deliberately absent — a hard Depends would then block dpkg install. apt still pulls it on a normal install; dpkg -i does not enforce it. Consent-gated, audited, revocable live assistance sessions between a box and a federated center, over the wg-mesh, with a bounded action catalog and double-consent console escalation. Package: secubox-auth Version: 1.8.6-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 921 Depends: python3-aiosqlite, python3-fastapi, python3-uvicorn, python3-argon2, python3-pyotp, python3-jwt, secubox-core (>= 1.5.47~), python3-qrcode, python3-jsonschema, python3-tomli | python3 (>= 3.11), jq, python3, python3-cryptography, secubox-aggregator Recommends: secubox-webos (>= 1.0.338), secubox-annuaire (>= 0.10.11~) Breaks: secubox-oidc (<< 0.1.3~), secubox-sbxid (<< 0.4.20~), secubox-users (<< 1.8.18~) Replaces: secubox-oidc (<< 0.1.3~), secubox-sbxid (<< 0.4.20~), secubox-users (<< 1.8.18~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-auth/secubox-auth_1.8.6-1~trixie1_all.deb Size: 206824 SHA256: 0b1886b57b3c57b544bff4ed6ce7e8dc54763b0cb645847c0148adbad95a491e SHA1: f0aa5f5006f022fee8ecad34d18a498d46695c64 MD5sum: 63878287f9cff60f4112f5a5940cf51f Description: SecuBox Auth Guardian Authentification avancée : OAuth2 (Google/GitHub), vouchers, sessions, portail splash. . Port Debian bookworm de luci-app-auth-guardian (SecuBox OpenWrt / CyberMind.fr). Package: secubox-autoload Version: 0.6.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 162 Depends: python3 (>= 3.11), secubox-core, wireguard-tools, nftables, adduser Recommends: apparmor Priority: optional Section: admin Filename: pool/main/s/secubox-autoload/secubox-autoload_0.6.1-1~bookworm1_all.deb Size: 39944 SHA256: 0d10b7f897d12c03cd4be3f1cbdf5b1893ac416858d3f6455c22515ec0d7449f SHA1: 96497414517f8ce84c8f84fd13bddbcad310e2e8 MD5sum: 8d1b08fbeb91cc7f1b9897b9ddf48232 Description: SecuBox — provisionnement réseau Auto-Load, côté infrastructure Jetons clients (un par box, à usage unique, stockés sous forme d'empreinte), statut d'abonnement avec échéance, révocation, préenregistrement par numéro de série, service d'enrôlement et panel, hub WireGuard (10.64.0.0/16, udp/51830). Parent #2182. Installé sur l'infrastructure (admin.gk2.secubox.in) seulement. Package: secubox-autoload-agent Version: 0.9.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 89 Depends: python3 (>= 3.11), wireguard-tools, gpgv, gnupg, secubox-premier-pas (>= 0.5.0), secubox-profiles Priority: optional Section: admin Filename: pool/main/s/secubox-autoload-agent/secubox-autoload-agent_0.9.0-1~bookworm1_all.deb Size: 22468 SHA256: f8640bed44d95167973f9eff32edbe73f0291e8140937137ca7377fe429e7a93 SHA1: c08c042574953d8eb81efa982883016a31a745e4 MD5sum: 03aa7956916d846e102274702d459018 Description: SecuBox — provisionnement réseau Auto-Load, côté box Agent de la box cliente : clé WireGuard générée sur la box, tunnel sortant vers l'infrastructure (admin.gk2.secubox.in), jamais de port entrant. Parent #2182. Package: secubox-avatar Version: 1.3.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 100 Depends: secubox-core (>= 1.4.0), python3-fastapi | python3-pip, python3-pil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-avatar/secubox-avatar_1.3.0-1~trixie1_all.deb Size: 23874 SHA256: 0dfa0d0d3308b271681cf422138ecd77817ce2b1203d3b9c467a5940d50cacf8 SHA1: 8d738779fd17ce9fcfc56cad50c17da32d42cf81 MD5sum: 97fbbe1a422e36c56b68fd1485000112 Description: SecuBox Identity and Avatar Manager Identity and avatar management module for SecuBox services. Provides unified identity management across Gitea, Nextcloud, Mail, Matrix. . Features: avatar upload, identity sync, service integration, P31 Phosphor theme. Port Debian bookworm for SecuBox (CyberMind.fr). Package: secubox-backup Version: 2.4.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 186 Depends: secubox-core (>= 1.4.0), age, python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Breaks: secubox-cloner (<< 1.1.2~) Replaces: secubox-cloner (<< 1.1.2~) Priority: optional Section: admin Filename: pool/main/s/secubox-backup/secubox-backup_2.4.0-1~trixie1_all.deb Size: 38836 SHA256: 92b7c0b78d17871f9747fdbbeb1a1bb1e61aec436a85dc148804ae2bee146de9 SHA1: 89802a2383eb515fb2a41caaf990fb36b2506df1 MD5sum: e3f2202dd192f2cdad343aaa35a93f0b Description: SecuBox Backup — config + LXC-container backup manager Backup manager covering SecuBox configs (/etc/secubox, nginx, wireguard, haproxy, nftables), service data (/var/lib/secubox, nextcloud, gitea), and LXC containers with automatic stop/start around snapshots. Web dashboard with stats and history. Package: secubox-bbs Version: 0.37.10-1~trixie1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 24669 Depends: adduser, acl Recommends: nginx, qrencode, secubox-core, chromium, python3-httpx Suggests: secubox-billets Homepage: https://cybermind.fr/secubox Priority: optional Section: web Filename: pool/main/s/secubox-bbs/secubox-bbs_0.37.10-1~trixie1_arm64.deb Size: 10733972 SHA256: cd4e6b71f387c2eb686a7e4c3af83c21ceaef240995d1cc2e24c0651a2cdbb65 SHA1: eaf85cad984405c9e5de981d8602ec485c870962 MD5sum: 99aea43d4bb6e8fd107c128ac48fe74b Description: SecuBox-Deb — BBS auto-heberge (forums, bibliotheque, publication) Un BBS moderne pour une SecuBox : salons, fils, bibliotheque de fichiers, messagerie interne, et publication d'un fil vers le module billets. . LE DISQUE FAIT FOI. Chaque message est un fichier Markdown sous content/ ; la base SQLite n'en est que l'index, entierement reconstructible. Le BBS tient donc dans un repertoire copiable a chaud par rsync, sans arreter le service, et reste lisible sans ce logiciel. . L'inscription se fait SUR INVITATION. Les mots de passe ne sont pas dans la base : ils vivent a part, hors de l'arborescence de contenu, pour qu'une archive de contenu ne les emporte jamais. Package: secubox-billets Version: 0.13.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 3894 Depends: secubox-core (>= 1.5.39~), python3 (>= 3.11), python3-venv, adduser, nginx Homepage: https://secubox.in Priority: optional Section: web Filename: pool/main/s/secubox-billets/secubox-billets_0.13.2-1~bookworm1_all.deb Size: 3489554 SHA256: 4f78b2d0704ecd760e389eb111e96dbe09d2f007e704d58842b0c16462932f03 SHA1: db38f8627e58903b474d3b2e89c5a0e76a10d844 MD5sum: 0293e94b2ae44f7516152e9df326dc59 Description: billets — micro-blog gateway inter-médias sociaux (SecuBox) Self-hosted micro-blog with an author admin, a public read feed with comments and emoji reactions, and inbound/outbound social-media gateway features: SSRF-guarded oEmbed ingestion (sanitized, iframe-allowlisted), OpenGraph link cards, Atom/JSON feeds, an outbound oEmbed endpoint and share intents. FastAPI + aiosqlite (WAL) + Jinja2, served on a Unix socket behind nginx. Every billet's content and style are versioned in a Gitea repo; every security decision is written to an append-only BLAKE2b-chained event log. Package: secubox-cdn Version: 1.5.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 194 Depends: secubox-core (>= 1.4.3), nginx, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, curl Breaks: secubox-mirror (<< 1.2.2~) Replaces: secubox-mirror (<< 1.2.2~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-cdn/secubox-cdn_1.5.1-1~trixie1_all.deb Size: 37138 SHA256: bd80d4190c8f150b59b6e5ba7cf19bb2f377edaee454ccf3ed8473ac6fbbaefb SHA1: 56529268c38aba4efba64caaca3948dfb7751370 MD5sum: 027fdbd2dedf0b756ca0f7d6bfa884c5 Description: SecuBox CDN Cache Cache CDN local : économies bande passante, politiques par domaine/extension, stats hit ratio. . Port Debian bookworm de luci-app-cdn-cache (SecuBox OpenWrt / CyberMind.fr). Package: secubox-certs Version: 1.3.4-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 123 Depends: secubox-core (>= 1.5.30), python3, python3-fastapi, python3-uvicorn, python3-pydantic, certbot Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-certs/secubox-certs_1.3.4-1~trixie1_all.deb Size: 29938 SHA256: 5ed8cb2976aecc617472573cabf01d993039d88b68e12c19a787a42b9c0a7f2c SHA1: 00dc8cc5fa12a58271e003bbbfac2be92bb6ae30 MD5sum: cc41a79f581172169539a0507da6c798 Description: SecuBox ACME / TLS certificate manager FastAPI control plane managing the HAProxy certificate bundle at /data/haproxy/certs/, certbot renewals, and the WebUI surface at /certs/ on the canonical hub vhost. Reconstructed from the running deployment on gk2 (closes #306 follow-up — the module existed but had no source-side package). Package: secubox-clamav Version: 0.1.3-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 44 Depends: lxc, python3, secubox-core (>= 1.4.0) Priority: optional Section: mail Filename: pool/main/s/secubox-clamav/secubox-clamav_0.1.3-1~trixie1_all.deb Size: 10146 SHA256: b8ab1df8ca918deaf63336e4a7db0570a1c7a2c69aec1a36b1dacff42c00bb02 SHA1: f293a167d5a4dee94a5c43685f12450c55ac2d6c MD5sum: 7ed668582c8db50cd33041325eea0282 Description: SecuBox ClamAV — antivirus dans un LXC dédié, éveillé à la demande clamd (1,2-1,5 Go) ne tient pas dans le budget mémoire du conteneur mail. Il vit dans un LXC « clamav », endormi tant que personne n'en a besoin : un mandataire à activation par socket (10.100.0.1:3310) le réveille à la première connexion de Rspamd et le rendort après dix minutes d'inactivité ; la base est mise à jour chaque semaine. Outil : clamavctl. Package: secubox-config-advisor Version: 1.2.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 91 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-config-advisor/secubox-config-advisor_1.2.0-1~trixie1_all.deb Size: 21178 SHA256: 183a7c521b8e97003dad0735cb0c6fc21fd28bf5b47a4b56ed8f015c54460fcc SHA1: bdf41e2d3658e62ea7b2f3ee2a818b5bd5485933 MD5sum: f564881f30ab7a8de91d10293cbc7156 Description: SecuBox Config Advisor — security configuration audit + recommendations Scans installed SecuBox config (nftables rules, nginx vhosts, systemd unit hardening, AppArmor profiles, file permissions) and surfaces deviations from the CSPN-aligned baseline. Read-only; produces an actionable recommendations report rather than auto- applying fixes. Package: secubox-console Version: 1.2.2-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 154 Depends: python3 (>= 3.11), python3-httpx | python3-pip, python3-rich Recommends: secubox-core (>= 1.1.0), python3-pip Suggests: secubox-hub, secubox-health, secubox-soc-gateway Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-console/secubox-console_1.2.2-1~trixie1_all.deb Size: 26310 SHA256: 273b2a11453fe2d930fc7ca07f7aab6767b4eea136f389cb66bff9ccb7a5ed3a SHA1: f8d0f63d332a30585f30fb0b026e8c24da95ec58 MD5sum: df87b10bc15831074306bf8aabe9fe74 Description: SecuBox Console TUI — Terminal Dashboard Terminal-based dashboard for SecuBox appliances using Python Textual. Provides system monitoring, service management, and network status via a TUI that auto-starts on TTY1 when GUI kiosk is disabled. . Features: - Live system metrics (CPU, memory, disk) - Service management with start/stop/restart - Network interface status with WAN/LAN classification - Real-time log viewer with filtering - Vim-style keyboard navigation - Board-specific theming (MOCHAbin, ESPRESSObin, etc.) . Port Debian bookworm de SecuBox-DEB (CyberMind.fr). Package: secubox-cookies Version: 1.4.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 135 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core (>= 1.4.3) Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-cookies/secubox-cookies_1.4.0-1~trixie1_all.deb Size: 30158 SHA256: 4fbdde7c04adc2af2ad906e937f53dbc0bc827d9a30116a6828ff8e9513302dc SHA1: 6d3dc1127c14ef1ef32786dec54bef5e22e39c42 MD5sum: 78c9d6834aa1e66a3e8136002bd2d58c Description: SecuBox Cookie Tracker Cookie tracking, analysis, and privacy compliance monitoring. Provides third-party cookie detection, tracker identification, GDPR compliance checking, policy enforcement, and alerts. Package: secubox-core Version: 1.7.10-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 823 Depends: python3:any, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jwt, python3-cryptography, python3-httpx | python3-pip, python3-python-multipart | python3-multipart | python3-pip, nginx, systemd-timesyncd | time-daemon, nftables, openssl Recommends: wireguard-tools Breaks: secubox-defaults (<< 1.0.3~), secubox-metrics (<< 1.12.9~) Replaces: secubox-defaults (<< 1.0.3~), secubox-metrics (<< 1.12.9~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-core/secubox-core_1.7.10-1~trixie1_all.deb Size: 191986 SHA256: 9ae7555f3bd2ef1fb2a2ccdff4f914a7a105503afe49b53b33343a72d1a3f9a0 SHA1: d5bfe7ec8f73c319c7b63cbbe38bdde10831fd0a MD5sum: 53d457528e3f72067931f6e9bbc88a0c Description: SecuBox-DEB — bibliothèque centrale et infrastructure Bibliothèque Python partagée (JWT auth, config TOML, logging structuré), configuration nginx reverse proxy, et scripts d'initialisation firstboot. . Ce paquet est requis par tous les modules secubox-*. Port Debian bookworm du cœur de SecuBox OpenWrt (CyberMind.fr). Package: secubox-courbes Version: 0.1.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: secubox-core (>= 1.7.10), secubox-aggregator (>= 0.4.1), python3, python3-psutil, python3-fastapi | python3-pip Breaks: secubox-metrics (<< 1.24.0~) Replaces: secubox-metrics (<< 1.24.0~) Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-courbes/secubox-courbes_0.1.0-1~trixie1_all.deb Size: 21950 SHA256: b1932d611c1760ffd9f0ebcabccf9e84e32d3599ed0cbe8c96e381ad0fce3f16 SHA1: bc8dd576c1ccacfc0018c53f97ed2eaf5b3e46ba MD5sum: 9c0366bdbe073bfddac5c661a2ca4a9a Description: SecuBox Courbes — historique de la box et système en direct (remplace Grafana et Glances) Courbes (/grafana/) : un relevé par minute, 7 jours, CPU, mémoire, charge, débit, connexions, disque. Glances (/glances/) : instantané système, CPU par cœur, disques, réseau, températures, top des processus. Bibliothèque standard et psutil seulement, servi par secubox-groupd : aucun processus de plus, aucun Grafana ni Glances. Package: secubox-daemon Version: 0.1.0-2~trixie1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 11288 Depends: wireguard-tools Recommends: secubox-core Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-daemon/secubox-daemon_0.1.0-2~trixie1_arm64.deb Size: 3329222 SHA256: aa4f7afb86cf7ca37c0b9544fdd34b95607773fd1ed283efc634e375fc90c89b SHA1: 1e6f70c1bc5ecd33130734e222eea17f5adc400c MD5sum: e865cd4a61be47850444b155f3c9eff5 Description: SecuBox Mesh Daemon - WireGuard mesh with ZKP authentication Go-based mesh networking daemon for SecuBox featuring: - mDNS peer discovery - WireGuard mesh topology with automatic mesh gate election - GK-HAM-2025 Zero-Knowledge Proof authentication with 24h PFS - SQLite telemetry with metrics collection Includes secuboxd daemon, secuboxctl CLI, and c3box dashboard. Package: secubox-daemon-c3box Source: secubox-daemon Version: 0.1.0-2~trixie1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 4892 Depends: secubox-daemon Conflicts: secubox-c3box (<< 1.1~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-daemon/secubox-daemon-c3box_0.1.0-2~trixie1_arm64.deb Size: 1714404 SHA256: 1453d5c5d8fcb82a5d9d44205b847401ff20dfb48388593f8a54196604adcac8 SHA1: 98f9dd7299e93e1d6717ba2cbe5d79d95a9104cb MD5sum: 9efb196f5e67af4c927f0716ca89f6b1 Description: SecuBox C3BOX - Situational Awareness Dashboard (Go variant) Web-based situational awareness dashboard for SecuBox mesh networks. Visualizes mesh topology, node status, and ZKP credentials. Connects to secuboxd via Unix socket. . This is the Go-built variant shipped alongside secubox-daemon. It conflicts with the older Python secubox-c3box package; install only one of the two on a given host. Package: secubox-dns Version: 1.5.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 244 Depends: secubox-core (>= 1.7.0), python3-httpx | python3-pip, python3 (>= 3.11) Recommends: systemd, unbound Breaks: secubox-dns-lan (<< 0.1.2~), secubox-dns-provider (<< 1.2.3~) Replaces: secubox-dns-lan (<< 0.1.2~), secubox-dns-provider (<< 1.2.3~) Priority: optional Section: admin Filename: pool/main/s/secubox-dns/secubox-dns_1.5.1-1~trixie1_all.deb Size: 45548 SHA256: 7a3bf61511a857ae69c62824649c50c0efae45e7f273c919d6b5fabdb9897aad SHA1: c4573b2809ea35ef268c3bc2e63a449a6bf72dbe MD5sum: bed51957dfb7402b0952c5a56d61a649 Description: SecuBox DNS — authoritative BIND zone manager BIND zone management dashboard for SecuBox: create, edit, and serve authoritative DNS records you own. . Distinct from sibling packages in the DNS cluster: - secubox-dns-provider — external registrar API (OVH, Cloudflare, Gandi, Route53). Install if you publish records *at a registrar*. - secubox-vortex-dns — recursive DNS firewall with RPZ + threat feeds (unbound-backed). - secubox-dns-guard — DNS anomaly detection (dnsmasq-backed). - secubox-ad-guard — ad/tracker DNS blocking with per-device stats. Package: secubox-dns-guard Version: 1.4.7-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 177 Depends: secubox-core (>= 1.7.10) Breaks: secubox-network-anomaly (<< 1.1.4~) Replaces: secubox-network-anomaly (<< 1.1.4~) Priority: optional Section: admin Filename: pool/main/s/secubox-dns-guard/secubox-dns-guard_1.4.7-1~trixie1_all.deb Size: 42620 SHA256: 8951bceeeccb16836fd48b31d491ef8e01b42cca3dcb7ee2bee395fd7edda9f2 SHA1: 12e7c5888670999c7db719d5cc5e08774e4ff1f9 MD5sum: a8221cb02235f65d7dcb1b91e5c489d2 Description: SecuBox DNS Guard — détection d'anomalies DNS Watches recursive DNS resolution for anomalous patterns and keeps the resulting list of suspicious domains. It does not block by itself: the only DNS engine is Unbound, driven by ad-guard and webfilter. . Distinct from sibling packages in the DNS cluster: - secubox-vortex-dns — full recursive DNS firewall with RPZ (unbound-backed; inline blocking before resolution). - secubox-ad-guard — ad/tracker-specific blocking with per-device stats. - secubox-dns — authoritative BIND zone manager (publishing). - secubox-dns-provider — external registrar API. Package: secubox-dpi Version: 1.14.3-1~trixie1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 2740 Depends: secubox-core (>= 1.4.3), iproute2, libndpi-bin, python3-geoip2, geoip-database, python3-zmq, secubox-ndpid-engine Recommends: ffmpeg, yt-dlp, curl Breaks: secubox-mediaflow (<< 2.4.5~), secubox-ndpid (<< 1.1.4~) Replaces: secubox-mediaflow (<< 2.4.5~), secubox-ndpid (<< 1.1.4~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-dpi/secubox-dpi_1.14.3-1~trixie1_arm64.deb Size: 893946 SHA256: d30b9984cdae8b8f5759c25df29657c28120b0b9926b83128d66bbacb08f1ed9 SHA1: 6a54557f24390a5ed11e3aef8bee8574822110ec MD5sum: 591d8b2c2d58d14a8b94b10ba2a60248 Description: SecuBox DPI Analytics — nDPId/sbxdpi app/protocol classification Analytics layer over the SecuBox DPI pipeline: top applications, top protocols, bandwidth-by-app, bandwidth-by-device, talkers, and risk visualization. . The live engine is full nDPId (nDPI 5.x → nDPIsrvd → sbxdpi, dpi-live.sock). See secubox-ndpid for the JA3/JA4 TLS-fingerprinting nDPId dashboard. . Port Debian bookworm du DPI dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-ephemeride Version: 0.1.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 122 Depends: python3, python3-fastapi, python3-uvicorn, python3-pydantic, adduser, tzdata, secubox-core (>= 1.6.0) Recommends: secubox-webos Homepage: https://cybermind.fr/secubox Priority: optional Section: web Filename: pool/main/s/secubox-ephemeride/secubox-ephemeride_0.1.0-1~trixie1_all.deb Size: 25644 SHA256: 73981f8aac5cc2e56ad4aa62be1f94bf784d43e107fae187391a2d8a28e10bc0 SHA1: 5a468dbe58161af5a82f29e276adaf2c1f3c2513 MD5sum: c39c1192fb6b00258ebb2f3c43d57042 Description: SecuBox Éphéméride — cardlet astronomique du Hall SBXOS Date, heure locale, saison, lever et coucher du soleil, phase de la lune, saint du jour, météo et qualité de l'air, et observations de l'utilisateur. L'astronomie et le calendrier sont calculés localement, sans réseau ; la météo (facultative) passe par un cache et la carte reste complète sans Internet. Package: secubox-exposure Version: 1.4.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 131 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: tor Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-exposure/secubox-exposure_1.4.3-1~bookworm1_all.deb Size: 27064 SHA256: 078f774419311e275b6e3df9c5d1793d1b1658fc072a464cb7a559e5fa76bcdc SHA1: 929b0b8237a9539d7aa408f66eeb8f2db59abcb3 MD5sum: 72ac71e461991ef8f4acca15b14d1e1f Description: SecuBox Exposure Manager Service exposure management for SecuBox. Provides Tor hidden services, SSL backends, DNS registration, and mesh network exposure capabilities. Package: secubox-eye-remote Version: 1.1.0-1~trixie1 Architecture: all Maintainer: Gérald Kerma Installed-Size: 325 Depends: dnsmasq-base, secubox-core (>= 1.4.0), python3-fastapi, python3-uvicorn, udev Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-eye-remote/secubox-eye-remote_1.1.0-1~trixie1_all.deb Size: 63750 SHA256: 59c3a1adb0e270011109bfaf96da1075e691347c972f6043b84252d516827293 SHA1: 9563e4e2bfd5d74bcaafcc7f3a37ad5a5045dd02 MD5sum: 95e369be478dffb12a57cbe33f017f46 Description: SecuBox Eye Remote USB Gadget Integration Host-side integration for SecuBox Eye Remote (Pi Zero W with HyperPixel 2.1 Round Touch display). . Features: - Auto-detection via udev when Eye Remote is connected - Network configuration (10.55.0.1/30) - FastAPI endpoint for metrics relay - WebUI control panel integration - Serial console passthrough . The Eye Remote provides: - Real-time dashboard display (480x480 circular) - USB gadget modes: OTG, Flash, Debug, TTY, Auth - Touch-based menu navigation - Serial console access to SecuBox Package: secubox-eye-square Version: 1.0.4-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 123 Depends: secubox-core, secubox-eye-remote, python3-pil, python3-evdev, python3-fastapi, python3-uvicorn, python3-websockets, python3-httpx, apparmor-utils Priority: optional Section: admin Filename: pool/main/s/secubox-eye-square/secubox-eye-square_1.0.4-1~trixie1_all.deb Size: 25620 SHA256: fadedabbe7940762a81db482bf0a02625fb23f092b0b27f6d91942ae92424638 SHA1: dbf09a51d0d5fd4d1f0e9d55b9155b669843284e MD5sum: e2e4f6ec577e8a69ea8c409becf310c0 Description: SecuBox Eye Remote — Square variant (Pi 4B / Pi 400 + 7" 800x480) Pillow-on-framebuffer single-process kiosk. Renders the SecuBox dashboard directly to /dev/fb0 — no X server, no Qt, no Chromium. Companion to the round/ Pi Zero W variant (also Pillow+fb). . Includes a privileged Helper FastAPI on a Unix socket (SO_PEERCRED) for USB gadget mode switching, service restart, lockdown (nftables atomic swap), and console streaming. Package: secubox-federation Version: 0.3.2-1~trixie1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 12198 Depends: secubox-core, git Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-federation/secubox-federation_0.3.2-1~trixie1_arm64.deb Size: 2853636 SHA256: 1f5530591d0ab932c3bf35d1028c11864eb0d211c6db997cc6c64915239801d6 SHA1: 5201a0f9c0ebed3765803e79773b7f520387cd57 MD5sum: 995011b303272af2aa85b322c808ecb2 Description: SecuBox — fédération SBX (GK2) : certificats et adhésion Phase 1 de la fédération SBX v2 : autorité de certification GK2, certificat SBX v2 signé Ed25519 (sujet = identité annuaire de la box, canonicalisation identique à secubox-annuaire), demandes d'adhésion signées, renouvellement avec preuve de clé, liste de révocation signée, niveaux d'abonnement configurables (/etc/secubox/federation.yaml). . La box reste autonome : sans fichier de configuration elle est hors fédération, et toute synchronisation est initiée par elle. . Fournit sbx-certd (API sur /run/secubox/federation.sock) et sbxctl. Package: secubox-fmrelay Version: 0.2.4-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 88 Depends: secubox-core (>= 1.4.0), python3-uvicorn, python3-fastapi, rtl-sdr, ffmpeg, icecast2, curl Recommends: secubox-sentinelle-gsm (>= 0.4) Homepage: https://cybermind.fr/secubox Priority: optional Section: sound Filename: pool/main/s/secubox-fmrelay/secubox-fmrelay_0.2.4-1~trixie1_all.deb Size: 20958 SHA256: fdf603ec254a60254ede79e8edf6356cffd6cd958cc001e0815f12a7cdd4cfce SHA1: d83dbb133f4f3fb4e57b55b6561497e0c87d6f59 MD5sum: 5606f4538900bd457887fc7b8b4bc6a5 Description: SecuBox FM Relay — rtl_fm to Icecast MP3 mount with live RDS metadata Captures FM broadcast audio with rtl_fm, encodes it to MP3 with ffmpeg (libmp3lame), and feeds an Icecast2 mount that the SecuBox webradio module serves and that Lyrion can ingest as a Favourite remote URL. . A parallel rtl_fm | redsea pipeline decodes the 57 kHz RDS subcarrier (PI / PS / RT) and POSTs each RadioText update to Icecast2's admin metadata endpoint so HTTP listeners see "Artist - Title" change live in their player. . Shares the RTL-SDR with secubox-sentinelle-gsm. Don't run a GSM scan or RDS sweep while a relay is active — the bus contention will crash both. Cross-package device-claim coordination is a planned v0.2 follow-up. Package: secubox-fonction-bouclier Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-service-waf Recommends: secubox-service-dpi, secubox-service-detection Suggests: secubox-service-soc, secubox-service-radio-veille Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-bouclier_0.1.42-1~trixie1_all.deb Size: 3976 SHA256: c5e5bfcdbbc10d3aa998266cd933c2963b5dd48025dfb62f9caf69d4cfffc7e6 SHA1: ef4da860af0fd12bb37d03d594c5e071cc0e754f MD5sum: 7f7f303f4bf1371f0b77e03fe35cc3a2 Description: SecuBox — fonction « Bouclier » Voir et arrêter ce qui frappe : pare-feu applicatif, inspection, détection. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-correspondance Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-service-mail, secubox-service-messagerie, secubox-service-fediverse Suggests: secubox-service-visio Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-correspondance_0.1.42-1~trixie1_all.deb Size: 3978 SHA256: c5a8853a176cf2eb7b91a64de3d6c96c971d7e18d56421d496807b1fb718f1c5 SHA1: 574ec3e83a8a2ce2dc090d7b4ed4fc1a764a3d46 MD5sum: d659e406ce352018d78e98fc3a042908 Description: SecuBox — fonction « Correspondance » Écrire et recevoir : courrier, messageries chiffrées, fédivers, visio. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-ia Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-service-ia Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-ia_0.1.42-1~trixie1_all.deb Size: 3932 SHA256: 7c76f4c8ffb9341c14a8dfacabbbc0c4007fe9dfd202b3fcec6c9165c952c14e SHA1: e803f825602a94483579803ea24a12fa1a75cd4a MD5sum: fdbf4cdd459a2cc48eb810e87a898984 Description: SecuBox — fonction « IA locale » Des modèles qui tournent chez soi, et la passerelle qui garde les données. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-maison Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-service-domotique Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-maison_0.1.42-1~trixie1_all.deb Size: 3938 SHA256: f4400ec87695e2ddf76e17ded4add9ba1a8fb0b85dcbf636f3b70f0d50a43eaf SHA1: 0e202a378894450766a6c1ed767310903c89ecab MD5sum: 02546c12596dccaa558995d77ff0e6bc Description: SecuBox — fonction « Maison connectée » Piloter le domicile : Zigbee, MQTT, vidéosurveillance. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-media Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-service-radio, secubox-service-video, secubox-service-musique Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-media_0.1.42-1~trixie1_all.deb Size: 3954 SHA256: cd3732f6bccd89dd5d6a9e7e50d0149c9729a6b0a110aa84764ae189abffc799 SHA1: 24f69dc9314c61aafd30db505ecfe714d0dd453b MD5sum: 967901121913782624ce822654cec1ba Description: SecuBox — fonction « Média » Écouter et regarder chez soi : radio, balados, vidéo, musique. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-mesh Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-service-mesh Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-mesh_0.1.42-1~trixie1_all.deb Size: 3928 SHA256: cf8730e00f6e3afd4e2bab614bbd424587a52772c1c88afce1004feeda81c685 SHA1: b2eb86e18578cbd06d6247b3d1f68629cd0588c1 MD5sum: 9e6ddaf78e679634a2ff42554f628d6d Description: SecuBox — fonction « Maillage » Relier les box entre elles : annuaire, fédération, overlay. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-nuage Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-service-fichiers, secubox-service-photos, secubox-service-git Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-nuage_0.1.42-1~trixie1_all.deb Size: 3942 SHA256: 2e82fcd89a1626ec6dd738d84ca24ac116b6e35ccde469ed7bd92d58f3243c31 SHA1: 7a208babb2159aff44714b5bcedac85f5efb711e MD5sum: 71038767b7d108287e6891d269952e2e Description: SecuBox — fonction « Nuage personnel » Ses fichiers, ses photos et son code chez soi. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-provision Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-service-provision Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-provision_0.1.42-1~trixie1_all.deb Size: 3926 SHA256: b28d971c5ddbe9cace9cf8505748a7b5ef6670a07b60ee68c2302be7ebb140f2 SHA1: f241e271b93c40659b230b307a51f6aae048ad2c MD5sum: 2616fe027b1419471591dfcf454f8a17 Description: SecuBox — fonction « Provision » Sauvegarder, cloner, déployer d'autres box. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-publication Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-service-sites, secubox-service-bbs Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-publication_0.1.42-1~trixie1_all.deb Size: 3946 SHA256: 3e470ca44c8702073fd7f42d693c05587064985101b0f5e83da610277ee50b69 SHA1: 0abfb347cf1a34c8d62d336f37565112a82ace74 MD5sum: 7ffb12bc39069f27d7e3045b26d06c87 Description: SecuBox — fonction « Publication » Publier : sites, billets, forum, dépôt de fichiers. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-reseau Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-service-routage, secubox-service-dns, secubox-service-exposition Recommends: secubox-service-vpn Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-reseau_0.1.42-1~trixie1_all.deb Size: 3962 SHA256: 285569ea70b91b20bfadab9f45fff6d468751fdf231ad7a51248dab1c2fa3667 SHA1: 9fd14172fba4891442075d866b6d0469a72316ed MD5sum: 47b939b318f64e40243f7a805305baa5 Description: SecuBox — fonction « Réseau d'opérateur » Être son propre opérateur : routage, résolution, exposition, tunnels. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-socle Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-service-noyau, secubox-service-identite, secubox-service-administration Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-socle_0.1.42-1~trixie1_all.deb Size: 3944 SHA256: 1fc570be16333fc834eac9d8f31844183e61f8f71563bc4eaab85fb42c9eeb61 SHA1: 05d4fe137bfec010ede618430cb94d6f36cae348 MD5sum: 87cc4e3574f0df068263fce09156ff70 Description: SecuBox — fonction « Socle » Ce sans quoi rien ne tient : noyau, identité, administration. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-supervision Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-service-metriques Suggests: secubox-service-ecrans Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-supervision_0.1.42-1~trixie1_all.deb Size: 3952 SHA256: f0e364d46c6dec4876346063b07502e7e2266b4859bfdac8864142011870d3c4 SHA1: d3ae4a38fb430bf5cdc9b3728a2a5a6d606283a6 MD5sum: cb6cddb68e8b27a10553ceefbb1a64e0 Description: SecuBox — fonction « Supervision » Mesurer la box : métriques, tableaux, rapports. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-fonction-veille Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-service-actualites Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-fonction-veille_0.1.42-1~trixie1_all.deb Size: 3928 SHA256: 324aa1a65f851308856aa36ca24d7a602eb408b6d2d56d8673d19f6e8989f3c2 SHA1: 5111ec63698a9884f948f57ae3f8eba01bb00444 MD5sum: f55a56fd9641571bb73aa6699809e44e Description: SecuBox — fonction « Veille » Suivre ce qui se dit : actualité, flux, recherche libre. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-freebox Version: 0.5.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 119 Depends: python3, python3-fastapi, python3-uvicorn, adduser, secubox-core (>= 1.6.0) Recommends: secubox-webos, secubox-ipv6guard Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-freebox/secubox-freebox_0.5.0-1~trixie1_all.deb Size: 27376 SHA256: 9bffdab2fd36b10911953d840de1c8f578da697cc07b5e262993d32df3f0e96f SHA1: edb0596403a890e50fd71cdb0d291b19824c6758 MD5sum: ec1d5f39c30af05b5e8d0f9bec51cce5 Description: SecuBox Freebox — connecteur de l'API Freebox OS Relie la box à la Freebox : appareils du réseau, état de la connexion, pare-feu IPv6 et redirections de ports. L'autorisation se valide physiquement sur la Freebox ; le jeton d'application ne quitte jamais la box (0600, jamais renvoyé par une route ni écrit dans un journal). Lecture seule en v0.1. Package: secubox-full Version: 1.7.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-isp (>= 1.4.0), secubox-webos, secubox-sbxos, secubox-surf, sbxos-audio-mood, secubox-ephemeride, secubox-avatar, secubox-repo, secubox-assist, secubox-zia, secubox-voice, secubox-radio, secubox-podcaster (>= 1.0), secubox-peertube (>= 1.0), secubox-jellyfin (>= 1.0), secubox-ytsas (>= 0.3.0), secubox-media, secubox-photoprism, secubox-lyrion (>= 1.0), secubox-mqtt, secubox-picobrew, secubox-ai-gateway, secubox-streamlit Recommends: wireguard-tools, secubox-voicestudio Suggests: secubox-jitsi Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-full/secubox-full_1.7.0-1~trixie1_all.deb Size: 2552 SHA256: c5ec86bab40389b9074086279615296d11b265bb4e8ef90458a4775c953e300a SHA1: c056f7bf14fe1b03a902c8e1ec68ecf5abe0d303 MD5sum: 887067cee117ec93fffc675a8c4a3c40 Description: SecuBox Full — isp + tout le contenu du Hall Le profil secubox-isp PLUS tout ce que le Hall presente : le Hall lui-meme (webos, sbxos), l'assistant (zia, voice, voicestudio), les medias (radio, podcaster, PeerTube, Jellyfin, ytsas, Lyrion, photos PhotoPrism), la domotique (MQTT, picobrew), l'IA (ai-gateway, streamlit), les depots et l'assistance. Le materiel specifique (ecrans, capteurs) reste a la demande. Package: secubox-gitea Version: 1.7.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 194 Depends: secubox-core (>= 1.5.39~) Priority: optional Section: admin Filename: pool/main/s/secubox-gitea/secubox-gitea_1.7.0-1~trixie1_all.deb Size: 45000 SHA256: dbb075fd2f8511317273795826c4e1412fb5d84cc1a45bb677a5a1d1359762ae SHA1: cb55bd2d3a36d9ca752ad5a73b23c88b1462420d MD5sum: e7404d0c311f45edade7b05ffdfa6fbf Description: SecuBox Gitea — self-hosted Git server (LXC) Manages a Gitea Git server (private repositories, issues, PRs) running in its own LXC container. SecuBox wires up nginx vhost, ACME TLS, backup integration, and a web management dashboard around the upstream Gitea install. Package: secubox-haproxy Version: 1.12.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 541 Depends: secubox-core (>= 1.6.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, nginx, python3-jinja2, python3, python3-fastapi | python3-pip Recommends: haproxy, secubox-waf-ng, tor Breaks: secubox-exposure (<< 1.5.2~), secubox-vhost (<< 1.6.5~) Replaces: secubox-exposure (<< 1.5.2~), secubox-vhost (<< 1.6.5~) Priority: optional Section: net Filename: pool/main/s/secubox-haproxy/secubox-haproxy_1.12.1-1~bookworm1_all.deb Size: 116908 SHA256: 6f6fa714e628a0f4f05a76bc8ae13a0dbeeab8f0d06ba5358f97da19e2b22684 SHA1: f5da0d996f9c6f3990299e8b76b42c1f5d42b4d1 MD5sum: 3c2cfb9cdb11ab374aca01db7a618ef6 Description: SecuBox HAProxy Dashboard Dashboard HAProxy avec gestion des vhosts et backends. Port Debian bookworm de luci-app-haproxy (SecuBox OpenWrt). . Features: - WAF integration for MITM traffic inspection - Per-vhost WAF bypass controls - Dynamic route syncing with WAF module Package: secubox-hardening Version: 1.6.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 121 Depends: secubox-core (>= 1.4.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip Recommends: auditd Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-hardening/secubox-hardening_1.6.0-1~trixie1_all.deb Size: 28410 SHA256: 45cad24b9adda7e1e421ef09599cd11ba3f9c8db984483cc84113654eb5ef4d5 SHA1: 407c436b937fc548fcd25624a7f3a3aee746bd8c MD5sum: 188fa7e33b3229f29322e73b0aaaad6a Description: SecuBox Kernel and System Hardening Kernel and system hardening for SecuBox appliances. . Features: - Kernel sysctl hardening (ASLR, kptr_restrict, etc.) - Network hardening (SYN cookies, reverse path filter) - Module blacklist (uncommon protocols, filesystems) - Security benchmark tool . Based on ANSSI/CIS benchmark recommendations. Package: secubox-health Version: 1.3.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 164 Depends: python3 (>= 3.11), python3-aiohttp, secubox-core (>= 1.4.0), python3-uvicorn, python3-fastapi, lxc, systemd Breaks: secubox-health-doctor (<< 1.2.1~), secubox-watchdog (<< 1.2.5~) Replaces: secubox-health-doctor (<< 1.2.1~), secubox-watchdog (<< 1.2.5~) Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-health/secubox-health_1.3.2-1~bookworm1_all.deb Size: 36136 SHA256: 2fa395d68d1af786857fe6df6f8602e3427c64453fab8f1ab10af6de77c4676d SHA1: fe86195b37f256322bf7175260dcb431b007a6cb MD5sum: 34a5da9fc630b56109a65df48302f85b Description: SecuBox health probers (vhost + module health monitoring) Reconstitue en paquet source les sondes de santé de la board, jusque-là déployées à la main sur gk2 (aucune source dépôt) : - secubox-health-prober (prober.py) : sonde chaque vhost via nginx et écrit /var/cache/secubox/health/status.json. Ignore désormais les vhosts lifecycle=on-demand (modules.d) — les sonder les maintenait éveillés et neutralisait secubox-sleeper (scale-to-zero). - secubox-module-prober (module_prober.py) : santé par socket unix /health. Package: secubox-hub Version: 1.12.16-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 1334 Depends: secubox-core (>= 1.5.39~), secubox-aggregator, fonts-noto-color-emoji Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-hub/secubox-hub_1.12.16-1~trixie1_all.deb Size: 240168 SHA256: 53a4c8c0fcd80ab9ace0cad576c1bb2d6ce74edf4fd492c2a8803e08d5caec55 SHA1: b75f9ee1c7a4b58dc082f7253e44c7ff73031cf5 MD5sum: fa38f6eee5f33557a4dacc8319efdf35 Description: SecuBox Hub — Tableau de bord central Hub central SecuBox : lanceur de modules, état des services, alertes consolidées. . Port Debian bookworm de luci-app-secubox (SecuBox OpenWrt / CyberMind.fr). Package: secubox-identity Version: 1.1.7-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 93 Depends: secubox-core (>= 1.4.0) Priority: optional Section: admin Filename: pool/main/s/secubox-identity/secubox-identity_1.1.7-1~trixie1_all.deb Size: 22508 SHA256: 520b2744ca5acd703e897eed83479f98e855c15319d7efad3f0baf6777f094db SHA1: 9b376b81ecb7d31cff9ba2ec473564290b23f3a8 MD5sum: 21628512943fd7be9111ba7a1256682d Description: SecuBox Identity — decentralized identity management Decentralized identity (DID) management for SecuBox: identity issuance, verification, and lifecycle. Distinct from user-account management (which is secubox-users' job). . Distinct from sibling packages in the identity stack: - secubox-users — local user accounts (Argon2id hashes, TOTP, RBAC). - secubox-auth — JWT auth guardian / session middleware. - secubox-portal — web login portal. - secubox-avatar — profile image + display-name manager. Package: secubox-interceptor Version: 2.1.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 88 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core (>= 1.4.0) Recommends: secubox-waf-ng, secubox-toolbox-ng Homepage: https://secubox.gondwana.systems Priority: optional Section: admin Filename: pool/main/s/secubox-interceptor/secubox-interceptor_2.1.0-1~trixie1_all.deb Size: 21018 SHA256: 329881e4787d390efebf45bfac95b6e75f9d1a1cdb84fb315bdb4b1b45f490a3 SHA1: 54e97f9515240553b9aeb1b9eda0bb3ad64a8a97 MD5sum: 4d96aa3575486a0f7076d6b8a11f357c Description: SecuBox Interceptor — supervision de l'inspection du trafic Vue en lecture seule de la chaîne d'inspection réelle (sbxmitm, sbxwaf) : état des moteurs et de leurs ports, activité d'inspection tirée du journal, niveaux d'inspection par pair et exclusions. Package: secubox-ipblock Version: 1.6.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 252 Depends: secubox-core (>= 1.4.0), nftables, curl, python3-httpx | python3-pip Breaks: secubox-cyberfeed (<< 1.2.3~), secubox-vortex-firewall (<< 1.1.4~) Replaces: secubox-cyberfeed (<< 1.2.3~), secubox-vortex-firewall (<< 1.1.4~) Priority: optional Section: admin Filename: pool/main/s/secubox-ipblock/secubox-ipblock_1.6.0-1~trixie1_all.deb Size: 43500 SHA256: 6a70c06326855b15d18ed8ebf7c4fb61f15770ebcfd26fc4ab2094e068b3d5e9 SHA1: 31a54c6485d5b87f23f5e16ac76cf036db97aac1 MD5sum: cfaa2b8837cbfdd5bf16a9bf34658140 Description: SecuBox IP Blocklist Manager IP blocklist management module for SecuBox. Features include: - Multiple blocklist sources (Spamhaus, AbuseIPDB, FireHOL, etc.) - Custom blocklist rules - nftables set integration - Whitelist management - Auto-update scheduling - Block statistics and history - Import/export lists Package: secubox-ipv6guard Version: 0.2.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 53 Depends: python3, python3-fastapi, python3-uvicorn, adduser, iproute2, avahi-utils, secubox-core (>= 1.6.0) Recommends: secubox-webos, avahi-daemon, secubox-freebox Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-ipv6guard/secubox-ipv6guard_0.2.1-1~trixie1_all.deb Size: 12226 SHA256: 05e7e1c08e35543716e432ebbc4c1d139658b3cca402b611a98d53204230f9c0 SHA1: 635c593c28190bcbaf3a6b22add7feef405dacec MD5sum: 69bdc1f9f2f1d9f4c98b094766acf1e2 Description: SecuBox IPv6 Guardian — qui est joignable en IPv6, en clair Lit, sans rien envoyer aux appareils, ce que la box voit du réseau local (voisins IPv6, annonces mDNS) et le raconte en quatre temps pour tout le monde : appareils joignables, services visibles, connexions entrantes bloquées, exceptions autorisées. Le verdict ne dit « protégé » qu'après lecture du pare-feu de la Freebox ; sinon « à vérifier ». Lecture seule, utilisateur dédié, sans privilège. Package: secubox-isp Version: 1.4.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-lite (>= 1.5.0), secubox-modem (>= 1.0), secubox-cdn, secubox-saas-relay, secubox-reality, secubox-p2p (>= 1.12.0), secubox-federation, secubox-mesh (>= 1.0), secubox-metrics (>= 1.14.0), secubox-mail (>= 1.0), secubox-matrix, secubox-socialrelay, secubox-billets, secubox-nextcloud (>= 1.0), secubox-gitea (>= 1.0), secubox-metablogizer (>= 1.0), secubox-bbs, secubox-messagerie, secubox-metanews (>= 0.3.0) Recommends: wireguard-tools Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-isp/secubox-isp_1.4.0-1~trixie1_all.deb Size: 2466 SHA256: 886bacfa407f0f5dbdef57e98cb35655ce76910ee9387c310ea1e1efde21eb28 SHA1: af18ab12ef8e358fad8d839dacc87edce2469b3b MD5sum: 93401e3919adb76b5feea29963917ec1 Description: SecuBox ISP — protection + operateur + hebergement Herite de secubox-lite (toutes les protections) et ajoute le reseau d'operateur (modem, exposition, Reality, maillage) et tous les modules d'hebergement : courrier, messagerie Matrix, visioconference, fichiers (Nextcloud), photos, Git (Gitea), sites (metablogizer), BBS, billets, actualites. Les medias, la domotique, l'IA et le Hall sont dans secubox-full. Package: secubox-jellyfin Version: 2.1.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 190 Depends: secubox-core (>= 1.5.39~), lxc, lxc-templates, debootstrap, nftables, sudo, python3-uvicorn, python3-fastapi, python3-toml, curl, jq Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-jellyfin/secubox-jellyfin_2.1.0-1~trixie1_all.deb Size: 41896 SHA256: 9fe69e6f320b4a0c9f988b002bb9413705972d0f1789fc465ebd565a46da6f85 SHA1: 7ba3d762dc0e88618e695ddc3527962f03e43637 MD5sum: 710bbe142156a2daa61b81e52c4928c4 Description: SecuBox Jellyfin — LXC-native media server (MIND layer) Runs Jellyfin in a Debian bookworm LXC at 10.100.0.170 on br-lxc, behind the SecuBox chain (HAProxy TLS 1.3 → sbxwaf → nginx). Replaces the earlier Docker/Podman-based 1.0.0 host-API stub with the peertube/lyrion LXC model. . The unprivileged host API (/api/v1/jellyfin/, JWT-gated) delegates every privileged action to the audited root helper jellyfinctl over scoped sudo: LXC start/stop/restart, library scans, and Jellyfin/version upgrades. . Partner auto-wire detects the sibling SecuBox media services (photoprism, nextcloud, torrent, lyrion) by the presence of their media directory and read-only bind-mounts each into the Jellyfin LXC as a virtual-folder library (peertube stays a deep link). Wiring is independently toggleable per partner. Package: secubox-jitsi Version: 2.4.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 275 Depends: secubox-core (>= 1.5.39~), python3-uvicorn | python3-pip, lxc, curl, coturn Recommends: nginx Breaks: secubox-turn (<< 1.2.2~) Replaces: secubox-turn (<< 1.2.2~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-jitsi/secubox-jitsi_2.4.0-1~trixie1_all.deb Size: 60176 SHA256: c5f603b7042dd48349f906f838346067538ce27f54a987b1e5010194c1b16d28 SHA1: 8b0d89b8877f85143931e99bffc2aec562ba6d92 MD5sum: 5261790e1411ba6ce39f1fd61fb685d8 Description: SecuBox Jitsi Meet - Video Conferencing (LXC-native) Jitsi Meet running natively in an unprivileged Debian LXC: prosody (XMPP), jicofo (focus), jitsi-videobridge2 (media) and an internal nginx serving the web app. The host only routes: HAProxy terminates TLS for the public hostname and proxies to the container. . Replaces the 1.0.0 module, which generated a docker-compose.yml and drove docker/podman from the API request path. . Features: - Native LXC deployment, one systemd unit per Jitsi service - jitsictl: the single audited root surface (WebUI delegates, never acts) - Videobridge NAT harvester wiring for media behind two NATs - Per-service restart without cycling the container . Provides FastAPI backend on /api/v1/jitsi/ via Unix socket. Package: secubox-kiosk Version: 1.0.2-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 32 Depends: bash, systemd, secubox-premier-pas Recommends: secubox-console Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-kiosk/secubox-kiosk_1.0.2-1~trixie1_all.deb Size: 7736 SHA256: 2715b60568ffccf85aa8dd293da34fed5c7cfb1d4ea3af285dab6ffaf2fa75b6 SHA1: 38c53d91cdd4623c2531e9aec5c2b7c7d76819ba MD5sum: 8c4b320826c99e6735174f63ef85ad5e Description: SecuBox GUI kiosk — installation and setup tool Provides secubox-kiosk-setup, which installs a minimal GUI (X11 or Wayland) with Chromium fullscreen on the SecuBox WebUI, creates the dedicated secubox-kiosk user and the systemd unit, and switches a box between kiosk, console TUI and plain console. . The unit it generates starts /usr/sbin/secubox-kiosk-launcher, shipped by secubox-premier-pas. . Usage: secubox-kiosk-setup install --x11 && secubox-kiosk-setup enable --x11 . Port Debian de SecuBox-DEB (CyberMind.fr). Package: secubox-led-heartbeat Version: 2.1.4-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 94 Depends: python3, secubox-core, device-tree-compiler, i2c-tools Recommends: secubox-heartbeat Breaks: secubox-core (<< 1.5.5) Replaces: secubox-core (<< 1.5.5) Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-led-heartbeat/secubox-led-heartbeat_2.1.4-1~trixie1_all.deb Size: 19922 SHA256: 1d2e5f5d0193ad687df49552c2d7033f4493dd13e334ea97e46f9047ad0f8da5 SHA1: 22daaa6bae3e99f9e93c2db99ae7aaa8074a5361 MD5sum: d6ae55e4ee7c9fa676b72b274ce9d700 Description: SecuBox LED heartbeat status indicator Visual system health indicator using MOCHAbin RGB LEDs. . Displays system health, security status, and resource usage via the IS31FL3199 I2C LED controller (3 RGB LEDs). . LED mapping: - LED 1: Health status (pulsing green/yellow/red) - LED 2: Security status (steady, flashing on threat) - LED 3: Capacity (CPU/memory load) Package: secubox-lite Version: 1.8.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-profiles, secubox-core (>= 1.0), secubox-aggregator, secubox-system (>= 1.0), secubox-hardening (>= 1.0), secubox-premier-pas, secubox-autoload-agent, secubox-console, secubox-health, secubox-appstore, secubox-backup, secubox-config-advisor, secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-auth (>= 1.4.0), secubox-vault, secubox-annuaire, secubox-netmodes (>= 1.0), secubox-nac (>= 1.0), secubox-ipv6guard, secubox-wan-link-guard, secubox-dns (>= 1.0), secubox-dns-guard, secubox-webfilter (>= 0.2.1), secubox-ad-guard (>= 1.6.2), secubox-haproxy (>= 1.10.0), secubox-wireguard (>= 1.0), secubox-waf-ng (>= 1.0), secubox-ipblock (>= 1.3.0), secubox-toolbox-ng, secubox-toolbox (>= 1.0), secubox-dpi (>= 1.7.0), secubox-ndpid-engine, secubox-interceptor, secubox-security-posture (>= 2.2.0), secubox-threats (>= 1.0), secubox-threatmesh, secubox-cookies, secubox-soc, secubox-routes (>= 1.3.0), secubox-qos (>= 1.0), secubox-freebox, secubox-certs (>= 1.0), secubox-tor (>= 1.0), secubox-p2p (>= 1.12.1), secubox-assist Recommends: wireguard-tools, secubox-sentinelle-gsm Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-lite/secubox-lite_1.8.0-1~trixie1_all.deb Size: 3246 SHA256: 36a091b1917edd6dfc00eac0a83207e7776a18e97de27acb2695e982194ba212 SHA1: 751f4123e997aca1ab5da57222356fdbf47f9fd4 MD5sum: 99800dcb48ba542a7061d35d6bdd143d Description: SecuBox Lite — tous les modules de protection Maillage et support à distance : la box rejoint son parent (jonction automatique par code, appel sortant) et accepte une assistance sur consentement. Profil de PROTECTION : routage, QoS, certificats, Tor, Freebox, pare-feu nftables, WAF (sbxwaf), DPI, interception MITM (sbxmitm), filtrage DNS (ad-guard, webfilter, dns-guard), detection (menaces, anti-rootkit, posture), controle d'acces reseau, VPN WireGuard, coffre et sauvegarde, avec le SOC. Aucun service heberge : ni courrier, ni sites, ni applications. Le materiel specifique (sentinelle GSM, capteurs radio) reste a la demande. Package: secubox-lyrion Version: 1.7.2-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 171 Depends: secubox-core (>= 1.5.39~), secubox-auth (>= 1.2.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, python3-yaml, openssl, curl, jq Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-lyrion/secubox-lyrion_1.7.2-1~trixie1_all.deb Size: 45148 SHA256: 48abdfb3587999399614ca17b0a9ce93d6c069f23a0467729cf72eb253a762b4 SHA1: 16b285eb79c99132ed71b711d13cd6e3b83fa91e MD5sum: b318731c4d23f9390ea16a8894d4d36a Description: SecuBox Lyrion — Music server (HOSTING layer) Hosts Lyrion in a Debian bookworm LXC at 10.100.0.100 on br-lxc. File-backend identity provider reading /etc/secubox/users.json (the same argon2-hashed user store already managed by secubox-users) so the canonical SecuBox identity is the single source of truth for SSO. . OIDC clients pre-provisioned for the three native admin UIs that already support OIDC: Grafana, Gitea, Nextcloud. YaCy/secubox-waf UI (no native OIDC) get nginx `auth_request` integration to the same Lyrion. . Health-banner injected on the Lyrion login page via nginx sub_filter so the operator sees the SecuBox system health bar even on the SSO screen. Package: secubox-magicmirror Version: 1.1.5-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 66 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: nodejs, npm, xserver-xorg, chromium, git Breaks: secubox-mmpm (<< 1.1) Replaces: secubox-mmpm (<< 1.1) Priority: optional Section: web Filename: pool/main/s/secubox-magicmirror/secubox-magicmirror_1.1.5-1~trixie1_all.deb Size: 13964 SHA256: 30dd27e24455fc0ebdc28fdde55fdd7fe3b6a0393161011ea30ba5b3280a6736 SHA1: f260b9a814b6dd4d2260d1fa8b7d0571c72a54a1 MD5sum: 66937d629e74b4f72caaa009e9194508 Description: SecuBox MagicMirror management Smart display platform management for SecuBox. Provides API and web UI for MagicMirror² configuration, module management, and display controls. . As of 1.1, the MagicMirror Package Manager (MMPM) frontend and endpoints are folded into this package and reachable at /magicmirror/mmpm/ and /api/v1/magicmirror/mmpm/* respectively. The standalone secubox-mmpm package was a transitional shell and was decommissioned on 2026-09-15 (#1362): it shipped only an nginx location for /api/v1/mmpm/, which nothing mounted and nothing called. The MMPM feature itself is unaffected — it lives here. Package: secubox-maigret Version: 1.0.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 83 Depends: secubox-core (>= 1.4.0), debootstrap, lxc, jq, python3-fpdf2 Priority: optional Section: admin Filename: pool/main/s/secubox-maigret/secubox-maigret_1.0.1-1~trixie1_all.deb Size: 18974 SHA256: 2707e5599fdf1961ac9172ba3a1b4a1e09b3b6f318ab3bcef03b50ebc910624d SHA1: 69690f973acfc44d8ad965d8c4d6dbfc7e23a954 MD5sum: cfc8188dff59e2b11dde8b2016aa4afc Description: Maigret identity/username OSINT collector (LXC-sandboxed) Wraps the Maigret CLI OSINT tool inside a dedicated debootstrap/LXC sandbox. Given a username, Maigret searches 3000+ sites for matching accounts and produces a dossier. Features include: - Username / identity account discovery across 3000+ sites - Passive-only collection (no active probing of the target) - Sandboxed execution in a dedicated LXC container - JWT-gated REST API with append-only audit logging - Detached worker model (never blocks the aggregator loop) Package: secubox-mail Version: 2.16.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 519 Depends: secubox-core (>= 1.5.41~), lxc, debootstrap, openssl, python3-httpx, postfix | msmtp Recommends: libsasl2-modules, ca-certificates Suggests: acme.sh Breaks: secubox-mail-lxc (<< 2.2), secubox-smtp-relay (<< 1.1.2~), secubox-webmail (<< 2.2), secubox-webmail-lxc (<< 2.2) Replaces: secubox-mail-lxc (<< 2.2), secubox-smtp-relay (<< 1.1.2~), secubox-webmail (<< 2.2), secubox-webmail-lxc (<< 2.2) Priority: optional Section: admin Filename: pool/main/s/secubox-mail/secubox-mail_2.16.0-1~trixie1_all.deb Size: 114050 SHA256: 5e4a70301346cd0b55ae555963f364d072eb34150d6ffde6ef5ffd2992fa2fa5 SHA1: c12d29a40ff232e5fb43e424792339b872241fa5 MD5sum: 72674488ead32cd464ff3899fa36c362 Description: SecuBox Mail Module Complete email server management API and dashboard. Postfix/Dovecot mail server and Roundcube webmail in Debian LXC containers. . Features: - User/alias management via mailctl - DKIM/SPF/DMARC configuration - ACME certificate automation (Let's Encrypt) - Service monitoring - Webmail integration (Roundcube in LXC) - Three-fold architecture (components, status, access) . For Let's Encrypt certificates, install acme.sh: curl https://get.acme.sh | sh Package: secubox-mastodon Version: 0.3.4-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 110 Depends: secubox-core (>= 1.4.0), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl, curl Recommends: nginx Priority: optional Section: net Filename: pool/main/s/secubox-mastodon/secubox-mastodon_0.3.4-1~trixie1_all.deb Size: 28204 SHA256: a444a3bc3766fc0fe788c422af6a8175df337a7daef7636a1661890509df16f8 SHA1: 6afa636b855b1ee4fd54a1b2053c34ae7e3dcca5 MD5sum: 904a45869483f4e1315aabc5bea76c76 Description: SecuBox Mastodon — reseau social federe (LXC natif) Panneau d'administration et API pour une instance Mastodon installee NATIVEMENT dans un LXC Debian dedie : Ruby, PostgreSQL, Redis, Sidekiq et Puma, geres par systemd DANS le conteneur. . Le demon sur l'hote est leger et TOUJOURS joignable : il sert le panneau et rend l'etat meme quand le conteneur est arrete. C'est ce qui permet de distinguer « le module est absent » de « l'instance est eteinte » — deux situations qui appellent des gestes differents. . Natif-dans-LXC plutot que Docker : un LXC non privilegie ne monte pas fiablement un pont CNI sur les cartes Marvell arm64, et l'installation systemd native est le chemin suivi par les autres modules du parc. . L'INSTALLATION N'EST PAS FAITE PAR LE PAQUET. `mastodonctl install` provisionne le conteneur a la demande : la pile pese plusieurs gigaoctets et demande une adresse publique decidee par l'operateur. Package: secubox-matrix Version: 1.4.0-1~trixie1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 169 Depends: secubox-core (>= 1.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, lxc, lxc-templates, python3, python3-fastapi | python3-pip, nginx Recommends: prosody Breaks: secubox-jabber (<< 1.0.4~) Replaces: secubox-jabber (<< 1.0.4~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-matrix/secubox-matrix_1.4.0-1~trixie1_all.deb Size: 34150 SHA256: 80f4baaad4bbcdc1cfc6956bfc65022b7762cb53548f07715c98b59e7fbb9f8a SHA1: 63a976a92fb133f2107f2a7cb507895022ff9949 MD5sum: bc15d631f3041232d92b7673da399be3 Description: SecuBox Matrix Synapse - Federated Chat Server LXC-based Matrix Synapse homeserver for SecuBox. Provides federated, encrypted messaging with Element web client support. . Features: - Full Matrix Synapse homeserver in LXC container - User and room management via web UI - Bridge support (Telegram, Discord, Signal, etc.) - Element web client installation - Federation support - Backup/restore functionality Package: secubox-media Version: 1.8.2-1~trixie1 Architecture: all Maintainer: Gandalf / CyberMind Installed-Size: 174 Depends: secubox-core (>= 1.4.0), python3-uvicorn, nftables, python3, python3-httpx | python3-pip, python3-fastapi | python3-pip, ffmpeg, adduser Recommends: rsync, exfat-fuse, exfatprogs, ntfs-3g, avahi-daemon, ksmbd-tools Breaks: secubox-freeboxtv (<< 0.1.4~), secubox-smb (<< 1.1.1~) Replaces: secubox-freeboxtv (<< 0.1.4~), secubox-smb (<< 1.1.1~) Priority: optional Section: net Filename: pool/main/s/secubox-media/secubox-media_1.8.2-1~trixie1_all.deb Size: 42632 SHA256: 168fa02666e26d29541981c86385783b4057e58b15c3609b72fd856957c59586 SHA1: 97d14baba0c8f16ff95b1b2e20a86946d76a482f MD5sum: c327630180e302c5e528adb95d029648 Description: SecuBox External Media Manager Port Debian bookworm du module luci-app-media de SecuBox OpenWrt. Provides FastAPI backend on /api/v1/media/ via Unix socket. Package: secubox-mesh Version: 2.1.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 92 Depends: secubox-core (>= 1.0), python3 (>= 3.11), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jinja2, python3-pydantic, iw, hostapd, wpasupplicant, wireless-regdb, adduser Breaks: secubox-mesh (<< 2.0.0~), secubox-yggdrasil Replaces: secubox-mesh (<< 2.0.0~), secubox-yggdrasil Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mesh/secubox-mesh_2.1.0-1~trixie1_all.deb Size: 24084 SHA256: 5bdc974bb670b06d17735e87094005caa4282ff051827a1d8e6bf5ca30cc5ad7 SHA1: eae504ec6da5173ecc0133acebc1cd654c37fa6e MD5sum: f6b8ed8a425c6d277ea11c94cc067ee2 Description: SecuBox-DEB MESH module (802.11s + Passpoint AP, OPAD) Plan de contrôle FastAPI pour le module mesh : 802.11s/HWMP backhaul (ath10k_pci QCA9880 par défaut), AP Passpoint HS2.0 via hostapd, et client mesh USB (mt76x2u / ath9k_htc). Verrou régulatoire FR au postinst, posture OPAD passive par défaut. . Référence spec : CM-MESH-MPCIE-2026-06 v0.2.1. Package: secubox-meshtastic Version: 0.6.0-1~trixie1 Architecture: all Maintainer: Gérald Kerma Installed-Size: 161 Depends: python3 (>= 3.11), python3-fastapi, python3-uvicorn, python3-pydantic, python3-paho-mqtt, secubox-core, sudo Recommends: mosquitto, python3-segno Homepage: https://secubox.in Priority: optional Section: net Filename: pool/main/s/secubox-meshtastic/secubox-meshtastic_0.6.0-1~trixie1_all.deb Size: 41790 SHA256: 5cb9e96a82fd96308bbc50f8e193618163597275fa2b1124d56f62c51550abec SHA1: a782e3477bc38fff67ed863b0c1ef91b0471c718 MD5sum: 21a58d24c1ed4a14cd94c873a1e4e49c Description: SecuBox-Deb Meshtastic LoRa node integration Native Python module for managing Meshtastic LoRa mesh nodes: radio/cache/ passive-listener/MQTT-bridge daemon (secubox-meshtasticd), privileged CLI (secubox-meshtasticctl) and webui panel (/meshtastic/, own dedicated socket — never served by the aggregator). . The upstream `meshtastic` Python library (device/BLE/serial protocol) is NOT packaged for Debian and is intentionally NOT a dependency here: the daemon runs fine with `radio: absent` (cache/passive/bridge only) without it, and it is only required once a physical Meshtastic device is attached. See README.md for the pip/venv install note. Package: secubox-messagerie Version: 0.3.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 69 Depends: secubox-core (>= 1.5.25), python3, python3-fastapi, python3-httpx, secubox-aggregator Recommends: secubox-webos (>= 1.0.343), secubox-auth Priority: optional Section: admin Filename: pool/main/s/secubox-messagerie/secubox-messagerie_0.3.0-1~trixie1_all.deb Size: 20078 SHA256: d8e4c9330c873fbbbb7495eb34f2013afba1b37dc15e357f28f09de209196180 SHA1: de5f074d4ffa10d38ee1f2d06fd84c0a75d21027 MD5sum: dcf77b39d44042b3f6710193ae0fbaaa Description: SecuBox — messagerie de la box (mur public et messages privés) Un mur public et des messages privés, pour les personnes (identité SBX OS) comme pour les visiteurs (un pseudo). On écrit à une personne ou à tous, on répond en privé ou publiquement. Le chat de la radio y est centralisé et y répondre le republie dans la radio. . Servi par le Hall : https://hall./messagerie/ Package: secubox-metablogizer Version: 1.11.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 920 Depends: secubox-core (>= 1.5.40~), python3, nginx, python3-jsonschema, python3-uvicorn | python3-pip, python3-aiofiles, rsync, unzip, python3-httpx | python3-pip Recommends: chromium, secubox-streamlit Breaks: secubox-droplet (<< 1.4.8~), secubox-publish (<< 2.1.9~) Replaces: secubox-droplet (<< 1.4.8~), secubox-publish (<< 2.1.9~) Priority: optional Section: admin Filename: pool/main/s/secubox-metablogizer/secubox-metablogizer_1.11.0-1~trixie1_all.deb Size: 202550 SHA256: e4e209f3aa61a36095bfe11303a5ec1775a3299af32f12ba49c7a237e564571f SHA1: 189067bc6d557024a3d94018c2430bcbdee9f63a MD5sum: 658db5d83528c793289b835bf903d6d4 Description: SecuBox MetaBlogizer - Static Site Publisher Static site publishing and management for SecuBox. Package: secubox-metanews Version: 0.5.0-1~trixie1 Architecture: arm64 Maintainer: Gerald Kerma Installed-Size: 9449 Depends: adduser, secubox-webos (>= 1.1.0), secubox-core (>= 1.4.0), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip, secubox-haproxy, lxc, lxc-templates, debootstrap, python3-fastapi, python3-toml, openssl, curl, jq Recommends: secubox-bbs Breaks: secubox-devwatch (<< 1.1.3~), secubox-yacy (<< 1.0.23~) Replaces: secubox-devwatch (<< 1.1.3~), secubox-yacy (<< 1.0.23~) Homepage: https://secubox.in Priority: optional Section: news Filename: pool/main/s/secubox-metanews/secubox-metanews_0.5.0-1~trixie1_arm64.deb Size: 3397578 SHA256: a7104fec45906f9ba7522c7c897cd71654f032c6d7edbce514b786ed66e27d18 SHA1: 17ba9019a8df0e14f445d42995c5f840ce978713 MD5sum: 960cd6a27da55ecc5883ea930fee6777 Description: SecuBox — radar d'actualite multi-sources (MetaNews) MetaNews agrege des flux RSS/Atom, detecte quand plusieurs sources parlent du meme evenement et les regroupe en UN sujet : un resume court et factuel, les liens vers les sources originales, puis une discussion dans le BBS SecuBox. . Ce n'est pas un portail de presse ni une recopie d'articles : c'est un radar. Plusieurs sources -> un evenement -> un resume -> les liens -> une discussion. . Regroupement heuristique local (sans LLM obligatoire), agregation locale, pas de traqueur tiers : les appels externes se limitent a lire les flux declares. Package: secubox-metrics Version: 1.28.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 703 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-maxminddb | python3-pip, python3-geoip2 | python3-pip, python3-cryptography, nftables, python3-psutil, secubox-haproxy, lxc, lxc-templates, debootstrap, python3-toml, openssl, curl, jq Recommends: geoipupdate, python3-fpdf2 | python3-fpdf (>= 2), python3-matplotlib, python3-weasyprint | wkhtmltopdf, glances Conflicts: secubox-metalogizer Breaks: secubox-glances (<< 1.1.4~), secubox-grafana (<< 1.0.18~), secubox-reporter (<< 1.2.4~) Replaces: secubox-glances (<< 1.1.4~), secubox-grafana (<< 1.0.18~), secubox-metalogizer, secubox-reporter (<< 1.2.4~) Provides: secubox-metalogizer Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-metrics/secubox-metrics_1.28.0-1~bookworm1_all.deb Size: 169286 SHA256: cd4f789f9921d1ad475d064325ec8b303cc7cb14ae84372a6867716136a5bb28 SHA1: 6439a1a0a7cd654d886a0cf5c2dc644ab3293884 MD5sum: 00fddff5630943138983a1aeb228cb3d Description: SecuBox Metrics Dashboard Real-time system metrics dashboard with caching. Provides overview stats, WAF metrics, connection counts, and service status monitoring. Package: secubox-minimal Version: 0.9.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8 Depends: secubox-core (>= 1.0), secubox-aggregator, secubox-system (>= 1.0), secubox-hardening (>= 1.0), secubox-hub (>= 1.0), secubox-portal (>= 1.0), secubox-auth (>= 1.4.0), secubox-dpi (>= 1.7.0), secubox-ndpid-engine (>= 1.7.2), secubox-dns-guard, secubox-ad-guard (>= 1.6.2), secubox-nac (>= 1.0), secubox-freebox, secubox-ipv6guard, secubox-webfilter (>= 0.2.1), secubox-autoload-agent, secubox-wireguard (>= 1.3.0), secubox-courbes (>= 0.1.0), secubox-routes (>= 1.5.0) Conflicts: secubox-metrics, secubox-toolbox, secubox-waf, secubox-waf-ng, secubox-webos Homepage: https://secubox.in Priority: optional Section: metapackages Filename: pool/main/s/secubox-minimal/secubox-minimal_0.9.0-1~trixie1_all.deb Size: 3166 SHA256: 894cfd2a9fbe91192712923207d6be1a5c331f36a9ba12ad93b81ecba35af2b4 SHA1: 30efb8eb88294d4245365e264b49f21066213b67 MD5sum: 52aff7d6173255eb5ded75dbdf63fbf9 Description: SecuBox Minimal — DPI, garde DNS, filtre de publicites, NAC, Freebox, WireGuard, Courbes et Glances Profil minimal, pour une petite carte (ESPRESSObin) : inspection des paquets (DPI), detection d'anomalies DNS (dns-guard), filtrage des publicites et traqueurs (ad-guard), controle d'acces reseau (NAC), module Freebox, garde IPv6 et filtrage web, avec la seule interface d'administration. WireGuard offre la sortie Internet a des clients distants. Ni WAF (il reste sur l'infrastructure), ni profil ISP, ni Hall, ni metrics (le module « visites »), ni service heberge. Les modules exclus sont en Conflicts : un Recommends de secubox-auth ou de secubox-freebox ramenait le Hall dans l'image. Ni secubox-toolbox ni R-level (ad-guard ne l'exige plus), ni le moteur d'interception secubox-toolbox-ng. Package: secubox-modem Version: 1.3.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 179 Depends: secubox-core (>= 1.4.0), modemmanager, libqmi-utils, libmbim-utils, picocom, python3-serial Recommends: usb-modeswitch, usb-modeswitch-data Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-modem/secubox-modem_1.3.0-1~trixie1_all.deb Size: 36582 SHA256: 1dc25d9279edefe9b6434e06bda5a60d30c3f4f901469bda74234d1e40b1a0d4 SHA1: 62c09147b3b67492e8f37a603259065be51f4650 MD5sum: f4e9d2f7b0dca6cabe3c7e0572efae57 Description: SecuBox LTE/5G Modem Management Quectel LTE/5G modem management interface for SecuBox. . Features: - Auto-detect any plugged Quectel modem (EC25, RM500Q, etc.) - Data connection management (APN, connect/disconnect) - SMS send/receive via WebUI - AT command console (interactive WebSocket terminal) - Signal strength monitoring with real-time graphs - Firmware/device info display - Hybrid approach: ModemManager + qmicli . Port Debian bookworm de luci-app-modem (SecuBox OpenWrt / CyberMind.fr). Package: secubox-mqtt Version: 2.7.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 224 Depends: secubox-core (>= 1.4.0), lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, udev, mosquitto-clients Recommends: secubox-iot-hub Breaks: secubox-zigbee (<< 2.7.6~) Replaces: secubox-zigbee (<< 2.7.6~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-mqtt/secubox-mqtt_2.7.0-1~trixie1_all.deb Size: 48728 SHA256: 58a6e547884f4a8e549c8e7cf9883b34c6277837d543131109ee3dccc0b66a1d SHA1: 1ee1df0f7c3beeacdb281d0784a4d08b33c8b94a MD5sum: 95fae5a00c121468db0db241e131c4d8 Description: SecuBox MQTT — Mosquitto broker (WALL layer) Hosts a hardened Mosquitto 2.x broker in a Debian bookworm LXC at 10.100.0.110 on br-lxc. . No anonymous access (allow_anonymous false). Per-service authentication via mosquitto_passwd-managed credentials and per-topic ACL — z2m, sentinelle, domoticz and the SecuBox internal API each get their own user with a randomly-generated password stored under /etc/secubox/secrets/mqtt-* (mode 0600, owner root:secubox). . Host-side control plane: FastAPI on Unix socket /run/secubox/mqtt.sock + nginx route /api/v1/mqtt/ on the canonical hub vhost. CTL grammar: mqttctl components / status / access + install / reload + topic / client / acl / user nouns. Package: secubox-nac Version: 3.9.2-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 562 Depends: secubox-core (>= 1.4.3), dnsmasq, nftables, nginx, ieee-data Breaks: secubox-device-intel (<< 1.3.2~), secubox-hub (<< 1.9.18~), secubox-iot-guard (<< 1.1.5~), secubox-mac-guard (<< 1.2.3~) Replaces: secubox-hub (<< 1.9.18~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-nac/secubox-nac_3.9.2-1~bookworm1_all.deb Size: 130514 SHA256: 517c1a76dbf47cf4b9c1b685fba5735f26fd3026176694746f770ef540014670 SHA1: af1eca3549e9da76a0e5cff17318ca1b7a20744b MD5sum: 291d567d0e95417fea3745ca5b5e3dc4 Description: SecuBox NAC / Client Guardian Contrôle d'accès réseau : zones nftables, portail captif, contrôle parental, quarantaine. . Port Debian bookworm de luci-app-client-guardian (SecuBox OpenWrt / CyberMind.fr). Package: secubox-ndpid-engine Version: 1.7.2-1~trixie1 Architecture: arm64 Maintainer: Gérald Kerma Installed-Size: 3654 Depends: libc6 (>= 2.38), libpcap0.8t64 (>= 1.5.1), adduser Provides: ndpid Priority: optional Section: net Filename: pool/main/s/secubox-ndpid-engine/secubox-ndpid-engine_1.7.2-1~trixie1_arm64.deb Size: 593468 SHA256: eab303a2121372b482908242143264a02783b1f54b3d1edb6aacb7c9c95076dd SHA1: 93c3df913427e088d0d65d43d811717a4314fa69 MD5sum: 1104a8b94318ea5c5b55e2c9e140df6d Description: SecuBox — moteur DPI nDPId + nDPIsrvd (nDPI 6.x statique) Les deux démons qui PRODUISENT les événements de flux que sbxdpi agrège : nDPId capture et classe, nDPIsrvd distribue. . Sans eux, sbxdpi servait un instantané gelé — connected:false, total_flows figé, hosts et fingerprints à zéro — parce que son socket distributeur n'existait pas. L'alternative « ndpi-reader » était satisfaite par ndpiReader, l'outil de démonstration de libndpi, qui écrit du CSV dans un fichier et ne parle à personne. . nDPI 6.x est liée STATIQUEMENT : nDPId exige au moins la 5.0.0 et Debian fournit la 4.2. Remplacer la bibliothèque système casserait tout ce qui s'appuie dessus ; l'embarquer ne coûte que 4 Mo. Package: secubox-ndpid-engine-dbgsym Source: secubox-ndpid-engine Version: 1.7.1-1~trixie1 Auto-Built-Package: debug-symbols Architecture: arm64 Maintainer: Gérald Kerma Installed-Size: 4401 Depends: secubox-ndpid-engine (= 1.7.1-1~trixie1) Priority: optional Section: debug Filename: pool/main/s/secubox-ndpid-engine/secubox-ndpid-engine-dbgsym_1.7.1-1~trixie1_arm64.deb Size: 1525804 SHA256: ba4cd45aef1078d37cfa8d61f94fa5d20e2fd66872bd9bb0561eeb2ba9baaa81 SHA1: 0d4ba80890b198a85f8b34b5e0ffbe42b7c0a61c MD5sum: 498b38e11ef8ce774ad98e32ce2ba7c0 Description: debug symbols for secubox-ndpid-engine Build-Ids: 34d4d048103836b3647af65b93f6d059dc483fb3 6ddf8d050c7bb1ac8cdb03616b8616852b38a9af Package: secubox-netboot Version: 0.5.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 174 Depends: secubox-core (>= 1.0), python3, u-boot-tools, mtd-utils, openssl Recommends: tftpd-hpa, isc-dhcp-server Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-netboot/secubox-netboot_0.5.0-1~trixie1_all.deb Size: 42914 SHA256: 508a001afbb1d9280ea8df63113cb4765f3b3a1dc5150d69422680bddd49d9f1 SHA1: 58dbbfed1192865a23e9cd4d64b1eea8a2dc9027 MD5sum: e0ae32d5645698ea5b343dfa5639beef Description: SecuBox provisioning réseau + overlay U-Boot (#737) Service d'installation/boot réseau pour les boards Marvell Armada (MOCHAbin, ESPRESSObin). Fournit un overlay U-Boot chainloadé (HTTP + FIT-signature) sans reflasher l'usine, avec rollback automatique anti-brick (bootcount/altbootcmd), des triggers de cycle de vie et une interface de suivi/contrôle. . Phase 2 : overlay 2e U-Boot. Auto-flash A/B = Phase 3. Package: secubox-netdata Version: 1.1.3-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 176 Depends: secubox-core (>= 1.4.3), netdata Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netdata/secubox-netdata_1.1.3-1~trixie1_all.deb Size: 30090 SHA256: 2a7faf157113eedf7bff7b63fbd210509b27280877781418365564d863e66568 SHA1: 78b4afd8bf7ae11d417da966ad301aaf9c0303f9 MD5sum: 6b5d27ba014da864f4e47a4bb770a3bd Description: SecuBox Netdata Dashboard Monitoring temps réel via Netdata REST v2 : CPU, RAM, réseau, température, processus. . Port Debian bookworm de luci-app-netdata-dashboard (SecuBox OpenWrt / CyberMind.fr). Package: secubox-netmodes Version: 1.3.2-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 315 Depends: secubox-core (>= 1.0), netplan.io, iproute2, bridge-utils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-netmodes/secubox-netmodes_1.3.2-1~trixie1_all.deb Size: 57374 SHA256: a1faa015fb508577a5520c6c8e947b4b94ed5183fafcded4963e4621867c7b9c SHA1: 6922729b679fbde7896fc0c4b9c6d67e9339d48a MD5sum: a7c35efcb24b5a5040f58e7fc9838f63 Description: SecuBox Network Modes Commutation de modes réseau : router, sniffer-inline, sniffer-passif, AP, relay. Templates netplan par mode. . Port Debian bookworm de luci-app-network-modes (SecuBox OpenWrt / CyberMind.fr). Package: secubox-nextcloud Version: 1.9.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 188 Depends: secubox-core (>= 1.5.41~) Priority: optional Section: admin Filename: pool/main/s/secubox-nextcloud/secubox-nextcloud_1.9.0-1~trixie1_all.deb Size: 53330 SHA256: 681a39e6aac12e2d13c01441ef08be274d6234384eebfdb9bc745ce0d6da1662 SHA1: 45ef0ff83a4d3189f739db39fdf87de6035f5bea MD5sum: 0e9ecedfd358aa159f740b41b638c593 Description: SecuBox Nextcloud — self-hosted file sync + collaboration (LXC) Manages a Nextcloud server (file sync, calendar, contacts, collaborative editing) running in its own LXC container. SecuBox wires up nginx vhost, ACME TLS, backup integration, and a web management dashboard around the upstream Nextcloud install. Package: secubox-openclaw Version: 1.0.3-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 115 Depends: secubox-core (>= 1.4.0), debootstrap, lxc, jq Priority: optional Section: admin Filename: pool/main/s/secubox-openclaw/secubox-openclaw_1.0.3-1~trixie1_all.deb Size: 23678 SHA256: 18be67ae7123f0cec423cfb5210b0b604370df7a4156a4081fa5f2ccc689d039 SHA1: 7d0dd9aeb4bbfb19761b42cfebe854656e006b62 MD5sum: a70b6df6f128797d318533da003327eb Description: SecuBox OpenClaw OSINT Module Open Source Intelligence (OSINT) tool for reconnaissance and information gathering. Features include: - Domain reconnaissance with DNS enumeration - IP intelligence and port scanning - Email harvesting detection - Subdomain discovery - Certificate transparency lookups - WHOIS information gathering - Shodan/Censys/VirusTotal integration Package: secubox-ossec Version: 1.1.1-1~trixie1 Architecture: all Maintainer: SecuBox Team Installed-Size: 65 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core Recommends: ossec-hids | ossec-hids-agent Priority: optional Section: admin Filename: pool/main/s/secubox-ossec/secubox-ossec_1.1.1-1~trixie1_all.deb Size: 11510 SHA256: 8f20c547efe1e6de51a5b0407959e0ca0b8fcc000b25d082209719ddca3dbd2a SHA1: faf3111b780e92ddb6959b272794f1fd629fbc6c MD5sum: fc5055cdbf0d0322bdfc1ed8d7755265 Description: SecuBox OSSEC HIDS integration OSSEC Host-based Intrusion Detection System integration. Provides management interface for OSSEC services, alert viewing, file integrity, and rootkit detection. Package: secubox-p2p Version: 1.17.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 515 Depends: secubox-core (>= 1.4.3), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, avahi-daemon, avahi-utils, wireguard-tools, python3-aiohttp Recommends: secubox-annuaire Breaks: secubox-master-link (<< 1.1), secubox-meshname (<< 1.1.5~) Replaces: secubox-master-link (<< 1.1), secubox-meshname (<< 1.1.5~) Priority: optional Section: admin Filename: pool/main/s/secubox-p2p/secubox-p2p_1.17.1-1~trixie1_all.deb Size: 114010 SHA256: 0e8dafc633507f18204e2c636239b95bdb577847136e95bc37fb2e69776b8cea SHA1: 143b275702b627cbd829f9954f9045bb2bbfc997 MD5sum: 4114ab198bd46e88c35ba88aa1d787d4 Description: SecuBox P2P - Peer-to-Peer Network Hub P2P network management with peers, services, mesh visualization, and threat intel. Includes master-link enrollment (token issuance, peer approval, join workflow) served at /master-link/ and /api/v1/p2p/master-link/*. . As of 1.7, this package absorbs the master-link role that was previously shipped as a separate (but never nginx-reachable) secubox-master-link package. That package was decommissioned on 2026-09-15 (#1362): it had been reduced to a documentation directory owning no code at all. The master-link role is unaffected — it lives here. Package: secubox-peertube Version: 1.6.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 263 Depends: secubox-core (>= 1.5.39~), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl Recommends: yt-dlp Priority: optional Section: net Filename: pool/main/s/secubox-peertube/secubox-peertube_1.6.0-1~trixie1_all.deb Size: 63392 SHA256: 5b193aac1c3c6b2b1f979af8238ec1cb8444a02cbe0f26669fd94250f267740e SHA1: 1a5780072f12e8a451cb134405f7182588cc0db8 MD5sum: 9c3a5048f720f6ea7a5727c70770f7c7 Description: SecuBox PeerTube — federated video platform (native LXC) Dashboard + FastAPI backend for a PeerTube video-hosting instance installed NATIVELY inside a dedicated Debian LXC (its own peertube.service: Node 22 + PostgreSQL 15 + Redis + ffmpeg). The API daemon on the host is lightweight (always reachable to serve the dashboard); `peertubectl install` provisions the LXC and the PeerTube stack on demand. . PeerTube runs native-in-LXC rather than Docker/Podman: an unprivileged LXC cannot reliably bring up a podman CNI bridge on the Marvell arm64 boards, so the native systemd-managed install is the supported path. . Features: - LXC lifecycle via peertubectl (install, status, start, stop, restart, logs) - Public nginx vhost (:9080 → LXC :9000) bypassing the WAF (gitea pattern) - Video and playlist import (single URL or full playlist, sequential, resumable) - Video and channel management - User creation and role assignment (admin/moderator/user) - Federation (ActivityPub) — follow/followers - Transcoding settings (HLS, WebTorrent, resolutions) - Plugin installation from NPM - Storage usage monitoring . Distinct from sibling federated/streaming/media SecuBox packages: - secubox-matrix — Matrix Synapse (chat federation, not video). - secubox-jitsi — Jitsi Meet (real-time conferencing, not VOD). - secubox-jellyfin — Jellyfin (local media library, not federated). . Reachable at /peertube/ (frontend) and /api/v1/peertube/* (API) via Unix socket /run/secubox/peertube.sock. Package: secubox-photoprism Version: 1.5.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 152 Depends: secubox-core (>= 1.5.39~), python3-uvicorn | python3-pip, lxc, lxc-templates, nftables, openssl, python3-yaml Recommends: secubox-auth Priority: optional Section: net Filename: pool/main/s/secubox-photoprism/secubox-photoprism_1.5.0-1~trixie1_all.deb Size: 40538 SHA256: ae8eee42f529fb734ecec2df7a7f280148eef0489e510b4fbb1ba2504de4dfb2 SHA1: 20ba32ee0640e8ac7ae32efadb4cad70883a1775 MD5sum: 4a16ca6fe98b4d795f6a2d45d2d07d68 Description: PhotoPrism photo management for SecuBox (native LXC) SecuBox module for a PhotoPrism photo server installed natively (official build from dl.photoprism.app) inside a dedicated Debian LXC, running as its own unprivileged user. No podman, no docker. `photoprismctl install` provisions the LXC on demand; the host dashboard daemon stays lightweight and always reachable. . Photos live on /data/shared/photos, also mounted by Nextcloud as the "PhotoLibrary" external storage — phone → Nextcloud → /data/shared/photos → PhotoPrism originals (indexed by a 15-min timer, since PhotoPrism's built-in auto-index only fires for its own UI uploads). . Features: - LXC lifecycle via photoprismctl (install/update/status/start/stop/restart/index/import) - Public nginx vhost (:9080 → LXC :2342) behind sbxwaf inspection - AI-powered face recognition, library indexing, album management - Import workflow + Nextcloud photo integration - CRT-light P31 phosphor theme . Provides FastAPI backend on /api/v1/photoprism/ via Unix socket. Package: secubox-picobrew Version: 2.1.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 73 Depends: secubox-core (>= 1.4.0), python3-uvicorn | python3-pip, python3-fastapi | python3-pip, lxc, debootstrap, sudo Recommends: unbound Priority: optional Section: net Filename: pool/main/s/secubox-picobrew/secubox-picobrew_2.1.0-1~trixie1_all.deb Size: 19158 SHA256: 07ba42e704cce02a7a2bbc5fd52cd02ac75c894931bb8d8b018bdba152e3564f SHA1: 95175a3b546e3a29334efd1f85ac64f48d33213c MD5sum: 62427f7100d015dbe6472ca08392467a Description: PicoBrew appliance host (LXC) for SecuBox — phase 1 Ports "secubox-app-picobrew" from OpenWrt: hosts an LXC container running the upstream picobrew_pico server, giving a second life to PicoBrew appliances (Pico S/C/Pro, Z Series, Zymatic) whose manufacturer cloud has been shut down since 2020. . Phase 1 scope: - picobrewctl: root-audited lifecycle (install/start/stop/status/update/logs) for the LXC, delegated to via sudo from an unprivileged FastAPI panel - Local DNS rewrite of picobrew.com to the LXC (device otherwise unreachable) - TLS termination in front of the picobrew_pico server for the Z series - Admin panel exposing container state and start/stop controls . Fermentation/temperature tracking (sensors, profiles, recipes, Tilt/ iSpindel, alerts) is out of scope for this phase and will ship in a later phase; the existing sensor controller code is preserved untouched in lib/stillwatch/ for that purpose. Package: secubox-podcaster Version: 1.5.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 243 Depends: secubox-core (>= 1.5.39~), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-mutagen, python3-pil Recommends: yt-dlp, ffmpeg Priority: optional Section: sound Filename: pool/main/s/secubox-podcaster/secubox-podcaster_1.5.0-1~trixie1_all.deb Size: 71396 SHA256: 71747b2b86abf4025cd8ddcea130fb3f35411c5bd82adc0f0f68562f454d9477 SHA1: 57ab413b4041c489f6531daa2ef64b2ae03bbccd MD5sum: 1bd1ad2d3b72a7e83fbd22955198e2e1 Description: Modern podcast manager for SecuBox Subscribe to podcast feeds, download episodes locally, and re-publish a shareable RSS feed (LAN by default, public via HAProxy / secubox-exposure). FastAPI backend on /api/v1/podcaster/ over a Unix socket; SQLite store; an asyncio download queue. Feed parsing is pure stdlib (no feedparser dep). . Features: - Subscribe by RSS URL or OPML import - Local download queue with per-episode progress - Generated shareable RSS of the local library (relay/share to the web) - In-UI service status + TOML config - Modern C3BOX cyberpunk WebUI with inline player Package: secubox-portal Version: 2.5.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 119 Depends: secubox-core (>= 1.4.3), python3-uvicorn | python3-pip, python3-jwt Breaks: secubox-hub (<< 1.9.6~) Replaces: secubox-hub (<< 1.9.6~) Priority: optional Section: admin Filename: pool/main/s/secubox-portal/secubox-portal_2.5.0-1~trixie1_all.deb Size: 31340 SHA256: 9089015ba830d8b8898a87cebcfdfcf6679d061552b3a7eb71a929f14958e613 SHA1: 9d7c59f7db5458b1e3b23f1811837c8081ce4654 MD5sum: 6bf2a7bdbc196f802befaa07ef9ec37d Description: SecuBox Portal - Web Authentication Centralized web authentication for all SecuBox modules. . Features: - JWT token-based authentication - Session management - Login/logout endpoints - User management - Password recovery Package: secubox-premier-pas Version: 0.7.2-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 289 Depends: python3 (>= 3.11), secubox-core, systemd-timesyncd | time-daemon, gpgv Recommends: secubox-auth, secubox-profiles, secubox-p2p Priority: optional Section: admin Filename: pool/main/s/secubox-premier-pas/secubox-premier-pas_0.7.2-1~trixie1_all.deb Size: 74738 SHA256: f55042e089e8df91f3b583d41f5ed2890a5eb6f796afe88300316050141a9c33 SHA1: 029e8ba786f2bc1b93178e1870e3bed4d10396a7 MD5sum: 1de507356e9ca3d18617530f741d7f8c Description: SecuBox Premier Pas — first-boot wizard engine and silent profile One engine, one profile (profil.toml), four faces: kiosk, console, master panel and silent. premier-pasctl validates a profile step by step (name, clock, admin, network and domain, services, mesh, updates), shows the exact plan, and applies it by driving the existing SecuBox tools (hostnamectl, timedatectl, secubox-users engine, secubox-net-detect, secubox-profilectl, sbx-mesh-join). An incomplete profile is never half-applied: the wizard resumes at the missing step. Never stores a plaintext password. . Also ships secubox-majauto: nightly unattended upgrade of the SecuBox packages only, from the signed apt.secubox.in repository. Package: secubox-profil-complet Source: secubox-profils Version: 1.0.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-profil-defense, secubox-profil-media, secubox-profil-provision, secubox-profil-reseau, secubox-profil-socle Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-complet_1.0.42-1~trixie1_all.deb Size: 3064 SHA256: a6df238a9b3b318e2aae294a2afc00a342aeb1907dc4c674246190d79367c125 SHA1: 4188d43cc451c96740d1a739df5c7564c3f71587 MD5sum: c4e4019576accd4a43168e6701219765 Description: SecuBox — profil complet : tous les profils Le parc entier. Sur une machine a memoire etroite, preferer les profils separes : chaque module absent est de la memoire et une surface d'attaque en moins. Package: secubox-profil-defense Source: secubox-profils Version: 1.0.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-profil-socle, secubox-ad-guard, secubox-dns-guard, secubox-interceptor, secubox-ipblock, secubox-security-posture, secubox-soc, secubox-threatmesh, secubox-threats, secubox-toolbox, secubox-waf-ng, secubox-health, secubox-wazuh Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-defense_1.0.42-1~trixie1_all.deb Size: 3272 SHA256: 187dc4fb4c77d85f3b392e8dc17f59257eb2179005f6b2520e5ea0f68dc5155e SHA1: 982f1f2ae7a6229f263651fa963c98b85a75d6e6 MD5sum: e587449a93c670872cbc01ab8a9f5a38 Description: SecuBox — profil « defense » : La couche de defense : WAF, listes de blocage, garde DNS Ce qui protege la boite et le reseau qu'elle sert. C'est le profil qu'on garde quand on ne garde rien d'autre. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profil-media Source: secubox-profils Version: 1.0.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-profil-socle, secubox-ai-gateway, secubox-bbs, secubox-billets, secubox-c3box, secubox-config-advisor, secubox-dpi, secubox-metrics, secubox-jellyfin, secubox-metablogizer, secubox-radio, secubox-roadmap, secubox-saas-relay, secubox-sentinelle-gsm, secubox-ytsas Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-media_1.0.42-1~trixie1_all.deb Size: 3260 SHA256: 1c425c5a60d6bb47063a19ac66db2129fdb3dc1da4271213152a5b1b4770fa3f SHA1: ac46389247874dec2d6a6e98824e57b80c21720f MD5sum: 6767d774f537cdc1441ea80e36a018fa Description: SecuBox — profil « media » : Contenu, medias et publication Ce que les membres consultent et publient : lecture, forums, billets, tableaux de bord. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profil-provision Source: secubox-profils Version: 1.0.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-profil-socle, secubox-backup, secubox-eye-remote, secubox-metablogizer (>= 1.10.0), secubox-netboot Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-provision_1.0.42-1~trixie1_all.deb Size: 3204 SHA256: 223199a5b58c76e3e08a4d405fec2291f6220fcccab42575cdb27a41ff4f347d SHA1: 45e84c635569e15341c5c581aa0111500483d231 MD5sum: 3e2b2574b4313ac2c89367ad12b82d80 Description: SecuBox — profil « provision » : Provisionnement, sauvegarde et deploiement Ce qui sert a fabriquer, sauvegarder et deployer une boite. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profil-reseau Source: secubox-profils Version: 1.0.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-profil-socle, secubox-annuaire, secubox-assist, secubox-avatar, secubox-cdn, secubox-cookies, secubox-dns, secubox-gitea, secubox-haproxy, secubox-matrix, secubox-jitsi, secubox-lyrion, secubox-mail, secubox-mesh, secubox-meshtastic, secubox-modem, secubox-mqtt, secubox-netmodes, secubox-nextcloud, secubox-p2p, secubox-peertube, secubox-photoprism, secubox-picobrew, secubox-podcaster, secubox-qos, secubox-reality, secubox-streamlit, secubox-tor, secubox-wireguard, secubox-metanews (>= 0.3.0) Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-reseau_1.0.42-1~trixie1_all.deb Size: 3360 SHA256: fc43b3beb8fe9f44f12fb0038037ee44e3b9d14a6f2a1ceb6ff53b5a4f10a609 SHA1: b1bfa1ec8ef9bbf6e3b191fcbb836cc90da41a6e MD5sum: 09746f11ba311a4cf0b1efb7f5800851 Description: SecuBox — profil « reseau » : Reseau, federation et services heberges Les services que la boite rend au LAN et au fedivers : DNS, annuaire, conteneurs applicatifs, maillage. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profil-socle Source: secubox-profils Version: 1.0.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-appstore, secubox-auth, secubox-certs, secubox-console, secubox-hardening, secubox-hub, secubox-media, secubox-nac, secubox-portal, secubox-profiles, secubox-repo, secubox-routes, secubox-system, secubox-vault, secubox-vm, secubox-zkp Priority: optional Section: metapackages Filename: pool/main/s/secubox-profils/secubox-profil-socle_1.0.42-1~trixie1_all.deb Size: 3274 SHA256: 11310a06c3d0f3b7665a5e1a6d1f3dfdeb09157ec72b42d0afe58e5050584b58 SHA1: a24e2f58b00921b82e91feaf8bf09acee0c26d2a MD5sum: 388e2e62d3cd995e6c342fbc4e923d3e Description: SecuBox — profil « socle » : Le noyau indispensable : administration, identite, routage Sans lui rien ne se pilote — le panneau, l'authentification et le routage. Tous les autres profils en dependent. . Meta-paquet : il n'installe aucun fichier, il declare seulement l'ensemble de modules qui va ensemble. Retirer le profil ne retire pas les modules — c'est `apt autoremove` qui s'en charge, et ce delai est voulu : on ne desinstalle pas la moitie d'une boite sur un seul geste. Package: secubox-profiles Version: 0.23.9-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 462 Depends: python3 (>= 3.11), python3-fastapi, python3-uvicorn, python3-pydantic, secubox-core (>= 1.5.30) Priority: optional Section: admin Filename: pool/main/s/secubox-profiles/secubox-profiles_0.23.9-1~trixie1_all.deb Size: 107034 SHA256: 0b928454398d61f50b68c353f198cff932012f7b0de442ab1435f762312825c3 SHA1: 4e037ad97231ddd8acf00300cedd424fa23e5f26 MD5sum: 55b7a46213b188c9815583f1a33b05be Description: SecuBox — inventaire et profils de modules (phase 1, lecture seule) Manifestes de modules, profiler de configuration, état et diff — CLI secubox-profilectl et API web (webui /profiles/, socket dédié, jamais servi par l'aggregator). Phase 1 n'applique aucun changement : scan/status/diff + écriture de l'état désiré (profils, pins) uniquement. `apply` n'existe pas encore. Package: secubox-qos Version: 1.6.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 497 Depends: secubox-core (>= 1.5.57), iproute2, nftables, python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, procps Recommends: vnstat Suggests: python3-pyroute2 Breaks: secubox-nettweak (<< 1.2.3~), secubox-traffic (<< 1.1.3~) Replaces: secubox-nettweak (<< 1.2.3~), secubox-traffic (<< 1.1.3~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-qos/secubox-qos_1.6.1-1~trixie1_all.deb Size: 80120 SHA256: 7cc635a2b6929a0e7810e25aaea18c19c0a8437f5c8f25c7530f532e9c1eecc5 SHA1: 7d24e7b9c858f7410eff0925d2ff3d3e5b185e4e MD5sum: 6f6dceace3d13728d26a7a4242f344ac Description: SecuBox QoS / Bandwidth Manager QoS avancé : classes HTB pyroute2, quotas par client, planification horaire, détection média. . Port Debian bookworm de luci-app-bandwidth-manager (SecuBox OpenWrt / CyberMind.fr). Package: secubox-radio Version: 0.1.79-1~trixie1 Architecture: arm64 Maintainer: Gerald Kerma Installed-Size: 9224 Depends: adduser, acl, secubox-webos (>= 1.1.0) Recommends: secubox-ytsas Homepage: https://secubox.in Priority: optional Section: sound Filename: pool/main/s/secubox-radio/secubox-radio_0.1.79-1~trixie1_arm64.deb Size: 3328568 SHA256: 5001fb888a26c4efee1011440362dc68aebf762f3976fb4ad932c5186cf30010 SHA1: 539b6022defe7f5f49bcf33db3735d0255fab2db MD5sum: 3f8ecf05491b0146ff04f95f224dab32 Description: SecuBox — radio et television collaboratives synchronisees Une playlist partagee ou tout le monde ecoute et regarde la meme chose au meme instant. Les membres proposent, la communaute soutient, le sysop valide. . Le tirage est pondere par la nouveaute, les coeurs et un temps de repos, de sorte qu'une nouveaute s'entende sans qu'un succes monopolise l'antenne. . Les clips sont rapatries une seule fois par la passerelle yt-dlp puis servis depuis la board : aucun auditeur ne contacte de service tiers. Package: secubox-rbs-sensor Version: 0.1.4-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 72 Depends: secubox-core (>= 1.4.0), python3-uvicorn, python3-fastapi, python3-serial, python3-toml, usbutils Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-rbs-sensor/secubox-rbs-sensor_0.1.4-1~trixie1_all.deb Size: 16848 SHA256: d613337f54c55ab82f40ed692e3fd96f6fdad687537250168ea31372e0ba1cd5 SHA1: 5e82cd264087699e1ae118b5c0daeef2619cb646 MD5sum: af9fa2e68c3f17a46827321df88b8c91 Description: SecuBox RBS Sensor — Rogue Base Station sensor (WALL layer) Host-resident module that drives a Quectel EP06-E mPCIe LTE modem as a cellular telemetry sensor for false-base-station detection. Follows the SecuBox OPAD doctrine (Off-Path Active Defense, OODA loop): . OBSERVE — broadcast cell identifiers + own-modem RX measurements only. ORIENT — local verdict engine scores LIKELY_ROGUE / SUSPECT / OK. DECIDE — operator policy or auto-mitigation. ACT — local off-path mitigation: RAT lock (refuse 2G), RF detach. . The sensor NEVER captures third-party subscriber identifiers (IMSI/TMSI). The CellObservation / NeighbourObservation dataclasses have no fields that could carry such data — proof verifiable via `GET /api/v1/rbs-sensor/status` which returns `captures_subscriber_identifiers: false`. . v0.1.0 is a scaffold: framework + EP06 driver shape + AT command allowlist + service plumbing. The full LTE/GSM cell parser and verdict engine land in v0.2 once a real EP06 is connected. Package: secubox-reality Version: 0.2.2-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 107 Depends: secubox-core (>= 1.0.0), python3, python3-fastapi, python3-pydantic, python3-segno, openssl Recommends: xray Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-reality/secubox-reality_0.2.2-1~trixie1_all.deb Size: 25086 SHA256: 5d38a8325f2ab8877e906d90efa4ddb2253d742c7f802d5ce5ac77067c1d27c2 SHA1: e48027b48ab6db19ba54a9fcd7ac5a91ac9b844d MD5sum: 230bb54c4583187b3277ca84c0f48caa Description: SecuBox Reality — VLESS+Reality+Vision egress-point manager Manages VLESS+Reality+Vision egress points backed by Xray-core: x25519 identity provisioning, Reality dest/SNI sanity validation (TLS1.3 + X25519), per-instance hardened systemd units, client vless:// links with QR codes, and a sliding-window volume-guard (soft warn / hard disable) that preserves egress identity across a stop. Package: secubox-repo Version: 1.4.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 173 Depends: python3:any, secubox-core (>= 1.4.3), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-aiofiles, reprepro, gnupg, rsync, secubox-annuaire, sudo Recommends: nginx, certbot Breaks: secubox-release (<< 0.1.4~) Replaces: secubox-release (<< 0.1.4~) Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-repo/secubox-repo_1.4.1-1~trixie1_all.deb Size: 39046 SHA256: 3d12bde728188d62db861d8cf2e0165130d02a33ed8e83c8c117c7be0570334d SHA1: 3a8210b1618087ab50e01431807b9054b305a44f MD5sum: 38ec4ace46be403215eb4088a95f95ba Description: SecuBox APT Repository Manager Management interface for the SecuBox APT repository (apt.secubox.in). . Features: - Package management (add, remove, list) - GPG key generation and signing - Multiple distribution support (bookworm, trixie) - Remote sync via rsync - Web interface for repository status . This is the control plane for apt.secubox.in. Package: secubox-rezapp Version: 1.1.1-1~trixie1 Architecture: all Maintainer: SecuBox Team Installed-Size: 79 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-psutil, secubox-core Recommends: docker.io | docker-ce, containerd Suggests: lxc Priority: optional Section: admin Filename: pool/main/s/secubox-rezapp/secubox-rezapp_1.1.1-1~trixie1_all.deb Size: 14140 SHA256: 1b3484d6aa87944c886fdfea158b8d0dd502d794255d578eba2b162d240fde1d SHA1: 362af7c874afbe11f21db7a61a7ff141fb87af8d MD5sum: ea1fcf202606855e386d27ae64b9b3c4 Description: SecuBox RezApp - Application deployment and management Application deployment and management module for SecuBox. Deploy and manage containerized applications using Docker or LXC. Features include application templates, resource management, log viewing, and health monitoring. Package: secubox-routes Version: 1.5.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 205 Depends: secubox-core (>= 1.0), iproute2, iputils-ping, traceroute, bind9-dnsutils | dnsutils, whois, mtr-tiny, nmap, net-tools, iperf3 Breaks: secubox-netdiag (<< 1.3.2~) Replaces: secubox-netdiag (<< 1.3.2~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-routes/secubox-routes_1.5.1-1~trixie1_all.deb Size: 38534 SHA256: 102fed2abd36de5a9ea4938365cc912fc9bc3c209b97351942fa94d1e3da9060 SHA1: 5231800ee912de73369981d87c673ef78fc29d50 MD5sum: b7dfe84bcd6af8259dcf370ee53cf50f Description: SecuBox Routes - Routing table viewer and manager SecuBox module for viewing and managing routing tables, policy routing rules, and ARP/NDP neighbors. . Features: - View IPv4 and IPv6 routes - Add/delete routes dynamically - Policy routing rules management - ARP/NDP neighbor table viewer - Route cache flush capability . Part of the SecuBox security appliance suite. Package: secubox-rustdesk Version: 1.0.13-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 74 Depends: secubox-core (>= 1.4.0), secubox-haproxy, lxc, lxc-templates, debootstrap, python3-uvicorn, python3-fastapi, python3-toml, openssl, curl, jq, iproute2, nftables Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-rustdesk/secubox-rustdesk_1.0.13-1~trixie1_all.deb Size: 16948 SHA256: 72eff14e0cebdbe835b367f013a85bdd9301e7e53db28918c43e5e764d8f6fe3 SHA1: 57fc3deb3cb23111e820d8b12a8b1ba5260dbe97 MD5sum: e0805c5267db4c98258f8f6df459e334 Description: SecuBox RustDesk — self-hosted remote desktop relay Hosts RustDesk hbbs (signal) and hbbr (relay) servers in a Debian LXC at 10.100.0.90 on br-lxc. Two separate systemd units inside the LXC for the two daemons; rustdeskctl components surfaces both as independent. . Public exposure does not use sbxwaf (it cannot inspect the raw UDP NAT-traversal traffic on 21116/udp). HAProxy stream-mode handles 21115/tcp, 21116/tcp, 21117/tcp; nftables DNAT handles 21116/udp. . rustdeskctl exposes the canonical SecuBox three-fold introspection plus peer/relay/key/session nouns matching the REMOTE-ACCESS layer of the CTL grammar (sister to OPS MONITORING / SEARCH). Package: secubox-saas-relay Version: 1.3.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 111 Depends: secubox-core (>= 1.4.0), python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-cryptography Priority: optional Section: net Filename: pool/main/s/secubox-saas-relay/secubox-saas-relay_1.3.0-1~trixie1_all.deb Size: 23916 SHA256: c54c7a74f0ba2615e6406e1ea3fc4a14ae627b9e2680c97bc8dc87fba66757b7 SHA1: 302cc089a642005279a647dedbc901fe5e79a288 MD5sum: b26b643c2975b789bf9f395c9595261f Description: SecuBox SaaS/API Proxy Relay Secure proxy relay for external SaaS APIs with encrypted key storage. Port Debian bookworm de SecuBox-DEB Phase 9. . Features: - Proxy configuration for external SaaS APIs - API key management (encrypted storage with Fernet) - Rate limiting and quota tracking per service - Request/response logging - Health checks for proxied services - P31 Phosphor light theme dashboard Package: secubox-sbxos Version: 0.6.0~aurora17-2~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 8868 Recommends: secubox-webos, secubox-auth (>= 1.4.0) Priority: optional Section: web Filename: pool/main/s/secubox-sbxos/secubox-sbxos_0.6.0~aurora17-2~trixie1_all.deb Size: 6686154 SHA256: 8ec42bf763cadae650d1ea4a4388b4b110ab79978cc1ccdf5d36b98f6f197d05 SHA1: 0d0e4d31c468df57372a9250780e5922f024b883 MD5sum: f74f6c9a0811d8137bfe6ec441026c48 Description: SBX OS — the Hall as an installable PWA The Hall that fits in a pocket. A Progressive Web App that reproduces the SecuBox Hall on any phone, tablet or desktop: a checkerboard of cardlets, each opening a place rather than an application — Cinema, Radio, Billets, Cloud. . Two sources decide what you see, and they are kept apart on purpose. The MINE says what is AVAILABLE: the box decides, per profile, and ships a manifest. The HALL says what is SHOWN: order, favourites, hidden modules, opening screen, theme — the user decides, in the browser, and nothing leaves the device. . Offline first. The shell is cached so the app opens instantly with no network; the manifest is fetched network-first so a freshly granted cardlet appears at once; watched media are kept for replay. Nothing else is cached — not API calls, not other origins. . V1 carries no backend: the manifest is served as a file and profiles are simulated locally, so the whole journey — including the invitation — is playable end to end. The data contract is already the one the box will serve. Package: secubox-security-posture Version: 2.4.1-1~bookworm1 Architecture: all Maintainer: CyberMind Installed-Size: 386 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi, python3-uvicorn, python3-httpx, python3-yaml, auditd, debsums, sudo, nftables Recommends: aide, rkhunter, chkrootkit Breaks: secubox-antirootkit (<< 0.1.7~), secubox-cve-triage (<< 1.2.5~) Replaces: secubox-antirootkit (<< 0.1.7~), secubox-cve-triage (<< 1.2.5~) Homepage: https://github.com/CyberMind-FR/secubox-deb Priority: optional Section: net Filename: pool/main/s/secubox-security-posture/secubox-security-posture_2.4.1-1~bookworm1_all.deb Size: 83552 SHA256: ed285efa8f6ce42b4b8f5b3ea50fdb958d9f5c20a776cf26383290aa47295706 SHA1: 06289443b649e888cd1af20baea9e09c3c3aaa24 MD5sum: e8b8acae00f1b590dd044b5638db5aa1 Description: SecuBox Security Posture - honest board-truthful scorecard SecuBox Security Posture computes a single security score (mapped to a DEFCON 5-1 dial) from real, provenance-tracked signals collected over public sibling module sockets and unprivileged /proc reads. . Every indicator records where its value came from; signals that cannot be measured render as UNKNOWN or MANUAL and are excluded from the score rather than faked. Indicators are grouped by the six SecuBox module-domains (AUTH/WALL/BOOT/MIND/ROOT/MESH). . Features: * Overall posture score with DEFCON level and per-domain coverage * Repaired ANSSI CSPN compliance backbone (real checks, manual flagged) * Real TPN media-protection overlay (anti-piracy DNS, TLS coverage) * Actionable findings with remediation commands and module deep-links * Background 60s cache; read-only REST API on a unix socket Package: secubox-sentinelle-gsm Version: 0.5.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 974 Depends: secubox-core (>= 1.4.0), python3-uvicorn, python3-fastapi, python3-toml, python3-scapy, librtlsdr0, rtl-sdr, usbutils, libliquid1, libsndfile1 Recommends: gr-gsm, python3-numpy Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-sentinelle-gsm/secubox-sentinelle-gsm_0.5.0-1~trixie1_all.deb Size: 277798 SHA256: 22807af3669806f1e4562184e815e584d2052a32499de9ad992564c9a245906b SHA1: e246c2e979218181e242e6e56add5f9da52cc6c0 MD5sum: 61d2c2fed30493323650c7fa476240c3 Description: SecuBox SENTINELLE-GSM — passive rogue-BTS sensor (MIND layer) Host-resident module that drives an RTL-SDR USB dongle as a passive GSM broadcast receiver for false-BTS (IMSI-catcher) detection. Follows the SecuBox OPAD/MIND doctrine: off-path by construction (RX only, no RF emission, no traffic decryption), feeds alerts into WALL/OPAD for correlation + reaction. . Privacy-by-design (spec §6.2): subscriber identifiers (IMSI/IMEI/TMSI), when present in flight, are HMAC-SHA256-truncated using a locally generated key (PROD mode, default). Plaintext observation is gated behind explicit PROD→LAB mode flip + consent acknowledgement + audit log, intended only for owned SIMs / consented devices. . The dataclass that flows from the GSMTAP parser into the scoring engine has NO field that could carry a plaintext IMSI. Auditor-visible via `GET /api/v1/sensor/gsm/status` returning `captures_plaintext_imsi_in_prod: false` and `rx_only: true`. . v0.1.0 ships the privacy framework + 8/8 invariant tests + service plumbing. The GSMTAP listener + the 8 scoring heuristics + gr-gsm orchestration land in v0.2 once an RTL-SDR is connected. Package: secubox-service-actualites Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-metanews Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-actualites_0.1.42-1~trixie1_all.deb Size: 3910 SHA256: 6f7ccef118c6397ca9cb747bece9fde7c0663c72b489c473fa83f255add007e1 SHA1: 2a1cf4b1448b7fa1d3b860f1fd9f21e4fbd778fb MD5sum: 5facf592f467142c5229abc30a58e263 Description: SecuBox — service « Actualité » Radar d'actualité multi-sources. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-administration Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-appstore, secubox-profiles, secubox-certs Recommends: secubox-repo, secubox-backup, secubox-config-advisor Suggests: secubox-assist Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-administration_0.1.42-1~trixie1_all.deb Size: 3988 SHA256: c8ed712c14497e5875727b417712a33624583b3d107fb930d646d578bc868eb5 SHA1: 2680747805fb697b07f0801bd3f81e83e1aa60f1 MD5sum: 3ea9bedf1937824890209a2731aed132 Description: SecuBox — service « Administration » Tableau d'administration, App Store, profils, dépôt, certificats. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-assistant Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-zia, secubox-voice Suggests: secubox-zia-llm, secubox-voice-moteur, secubox-voicestudio Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-assistant_0.1.42-1~trixie1_all.deb Size: 3966 SHA256: a115a9c4e5dc9ac7c199b425d6ca6a81ce84e38c4c797b61e092607eebad6624 SHA1: 185979c6ab5301b78a20ba843c7f1fd3a8cd46f9 MD5sum: 1e222a4804a06b4c3d0e9f77a4229b78 Description: SecuBox — service « Assistant ZIA » ZIA et Lexie : l'IA locale du Hall, sa voix et son oreille. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-bbs Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-bbs Recommends: secubox-messagerie Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-bbs_0.1.42-1~trixie1_all.deb Size: 3916 SHA256: 46714d7e4cb4519a04ae06b9672dbfcd1f22f72c623e01fcb8e48053cf8126ef SHA1: e53e38bfe1feed63824374c82f5bb9f982c7b95a MD5sum: c492b5c0424b8b5d487a264f65c5fc10 Description: SecuBox — service « Forum » BBS auto-hébergé et messagerie de la box. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-detection Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-security-posture, secubox-threats Recommends: secubox-threatmesh Suggests: secubox-ad-guard, secubox-cookies, secubox-toolbox Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-detection_0.1.42-1~trixie1_all.deb Size: 3978 SHA256: e7f5be44cfc81ad3bf6a46fe9b20250ba15c3ed0cbf2c336155656559d9b4852 SHA1: 134e41e01b0c3920cf230968b309654b3924bdda MD5sum: 94e09eac70d305c8e172c8a54fe829ca Description: SecuBox — service « Détection » Posture de sécurité, menaces, CVE, renseignement partagé. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-dns Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-dns Recommends: secubox-dns-guard, secubox-webfilter Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-dns_0.1.42-1~trixie1_all.deb Size: 3952 SHA256: b6b4ec1dfde3ac34bf6122cd59d7f5cc9ef59f8532de99ab5eae910f8421a956 SHA1: 3a28d7e2ea3126008b912829a4f4936a5060c206 MD5sum: 6aa3e43a6ee9d7972c107a906f393be2 Description: SecuBox — service « Résolution DNS » Zones faisant autorité, résolveur récursif pare-feu, garde DNS. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-domotique Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-mqtt Suggests: secubox-picobrew Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-domotique_0.1.42-1~trixie1_all.deb Size: 3936 SHA256: 1d255c8b20c8f422ff8c2c7c952996ff8572cecab56c1d73a8b15e0bf17cf31f SHA1: 105a76541c77597d1dba4a3e849f85ca400b254c MD5sum: 4df785608e3b9a2e469058636f82f4fe Description: SecuBox — service « Domotique » Courtier MQTT, coordinateur Zigbee, garde IoT, NVR. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-dpi Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-dpi, secubox-ndpid-engine Suggests: secubox-interceptor Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-dpi_0.1.42-1~trixie1_all.deb Size: 3954 SHA256: 5c77eb89b6836d9e86ec0702ac565b005b7ac5d41af5a8b8ab782194a5b81585 SHA1: c46d05a7c842c8ee5007d57321840749e2c48b1b MD5sum: 7cb76b15178c4bcb2b6668123e7d263f Description: SecuBox — service « Inspection de flux » nDPId et sbxdpi : quelle application parle, sur quel flux. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-ecrans Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Suggests: secubox-c3box, secubox-daemon-c3box, secubox-eye-remote Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-ecrans_0.1.42-1~trixie1_all.deb Size: 3982 SHA256: 873533b88397419c9fc090189698c2d6a16a4cf04d63373b0c530626d1e510fb SHA1: 90aab0e87927c2dee6655c6bf90d14a66c0d3576 MD5sum: e3a1fd4c1e180fc23fbe43b1add765ba Description: SecuBox — service « Écrans » Écrans de situation et déports USB (Eye Remote, C3BOX). Le kiosque Pi « eye-square » n'est plus proposé par défaut. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-exposition Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-haproxy Recommends: secubox-cdn Suggests: secubox-saas-relay Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-exposition_0.1.42-1~trixie1_all.deb Size: 3964 SHA256: 1f746bf7cd1e10d9678685547647e4e695298681c1654f5231892deb1f13c1d5 SHA1: 648a8a0f962774dc74f53bddb009da55a638b317 MD5sum: 63755c546c7f1b149ab85cede93cebf2 Description: SecuBox — service « Exposition » Frontal HAProxy, hôtes virtuels, publication de services vers l'extérieur. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-fediverse Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-socialrelay, secubox-billets Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-fediverse_0.1.42-1~trixie1_all.deb Size: 3934 SHA256: ffa3ae6f7bac631b1d2f77db55e65468e251070a2055f485eab4a83ae9c54797 SHA1: d93d4b9a20c0231e3154ed65be1dff2a2b1bdaec MD5sum: 0779e7825ce23d15d0b5b3d322eb1da7 Description: SecuBox — service « Fédivers » Présence fédérée et relais social avec consentement. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-fichiers Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-nextcloud Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-fichiers_0.1.42-1~trixie1_all.deb Size: 3926 SHA256: 8fabd378e55d556a3df7331a99e3fbf4d4496326c0fc9d169cff5ba721bdc68a SHA1: 6e0bb779e24877698c4fba2fb7662c0fa5e32511 MD5sum: 54e1c77eef6554b0107585b21ee2dc92 Description: SecuBox — service « Fichiers » Nextcloud, partage SMB noyau, dépôt de fichiers éphémères. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-git Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-gitea Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-git_0.1.42-1~trixie1_all.deb Size: 3884 SHA256: 5f3af901a897131cd66bcbc0a1499877db9b737e3a266f0ed6516bf06a369990 SHA1: ddd60f43e73187fbe1f8c004bc706ba1e88a7a1e MD5sum: 1fd9f22c686f8a7fa4b2da6448fb1700 Description: SecuBox — service « Forge Git » Gitea. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-hall Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-webos, secubox-sbxos, secubox-portal, secubox-hub Recommends: secubox-surf, sbxos-audio-mood, secubox-ephemeride Suggests: secubox-ui-manager Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-hall_0.1.42-1~trixie1_all.deb Size: 3998 SHA256: 62c7b4c32a02abd9c2bc61e25d6fa8a2b489e5379f6cdbae6350548cbe0b1409 SHA1: 1a962dac8836aa0df722933edfe174ea6befd5c5 MD5sum: aecd3f99c8aa2d8ea3422ba329ced3de Description: SecuBox — service « Hall » SBX OS : le Hall, son registre de services, ses objets UI et l'admission des appareils. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-ia Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-ai-gateway Suggests: secubox-streamlit Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-ia_0.1.42-1~trixie1_all.deb Size: 3928 SHA256: 88bee1e46f0439f00b015eeefad44bfe0fc3ffbda43a3b4f11b469aeec344060 SHA1: 8f837557acf9001c31c72977d25b0c23089b0084 MD5sum: 26ded167bfdb70406dd24b471ca3f2cd Description: SecuBox — service « IA » Passerelle souveraine, inférence locale, mémoire, MCP. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-identite Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-auth Recommends: secubox-vault, secubox-avatar Suggests: secubox-zkp Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-identite_0.1.42-1~trixie1_all.deb Size: 3960 SHA256: 127effa1ab346a565c44c3df1290a5348949edc409f2fc3c91fdfa3fd99b7715 SHA1: c345c7b34ac403ed041ebf73bbe4fb26d20630d0 MD5sum: 1c8536f0ad2a504d40513c5f7e48805a Description: SecuBox — service « Identité » Comptes, authentification, identité décentralisée, coffre de secrets. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-mail Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-mail Suggests: secubox-clamav Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-mail_0.1.42-1~trixie1_all.deb Size: 3952 SHA256: f5ea61da83bab8c05a05fa6c65a719d15fa15e45921a29b9c03c882ba30722df SHA1: cd25c255faf504526c682b5161c0bf99e44c6485 MD5sum: 3bf2721452e46f36b48516cba1dee2f8 Description: SecuBox — service « Courrier » Serveur de courrier complet (conteneur mail, webmail) ; absorbe mail-lxc, webmail et webmail-lxc. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-mesh Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-annuaire, secubox-p2p Recommends: secubox-federation Suggests: secubox-mesh, secubox-daemon, secubox-meshtastic Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-mesh_0.1.42-1~trixie1_all.deb Size: 3964 SHA256: def4710d5ac4b11673c8192ea880b98172916bf83807ef8c2a0feae3512848d7 SHA1: 99347c9ec684fc51d4b7ecdb3a02178291fa80e0 MD5sum: 945ff5f2a591832e04b544fd95d022ed Description: SecuBox — service « Maillage » Annuaire-miroir, pair à pair, fédération SBX. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-messagerie Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-matrix Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-messagerie_0.1.42-1~trixie1_all.deb Size: 3918 SHA256: bc4203990714fe85a3a8faf3018027211e81f61a448ea6a9222e70ab1bade557 SHA1: bf0675af980ff8061b550bc92d0bf5c925acd8b7 MD5sum: 53870b5e800e3afe65553105dd3261c6 Description: SecuBox — service « Messageries » Matrix, XMPP : des messageries qu'on héberge. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-metriques Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-metrics Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-metriques_0.1.42-1~trixie1_all.deb Size: 3908 SHA256: 7bec2920d6faf52863b22cf2701b9f03307d58811ae1803f609953dc8e30614a SHA1: bf30a57962db2c40cee55614ded5cec0fa117a23 MD5sum: 753ca88483bc1d005fc10cd0b9bba800 Description: SecuBox — service « Métriques » Métriques temps réel, tableaux et rapports. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-musique Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-lyrion Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-musique_0.1.42-1~trixie1_all.deb Size: 3896 SHA256: 7034dc0432350b090dca2e9725d2064d821609c7e1f368ef96e16ae3b7931743 SHA1: 0c2c5fdac3b14978f4389e92968f13cd859b0211 MD5sum: a9ef2f71efb9298f91c18e53da25a5d7 Description: SecuBox — service « Musique » Lyrion (LMS). . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-noyau Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-core, secubox-aggregator, secubox-system, secubox-hardening Recommends: secubox-premier-pas, secubox-health Suggests: secubox-led-heartbeat, secubox-console Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-noyau_0.1.42-1~trixie1_all.deb Size: 3996 SHA256: 65bafb39acc275082497be901bdb4e0413b42b730a099149c31850e4446868b1 SHA1: 33c2f8a846a8056d3f8e7e42e34c2b4094cbae59 MD5sum: ff029d136e46b28ae41eb275dbf7d1b0 Description: SecuBox — service « Noyau » Bibliothèque centrale, passerelle d'API, hôte de groupe, santé. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-photos Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-photoprism Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-photos_0.1.42-1~trixie1_all.deb Size: 3888 SHA256: 78366f81f3e890363f97ee0a556f13ccde200638ca3e22beddf5588da6fbc995 SHA1: d4e84cc919d64d3d0117177a4d0bc546c34769bb MD5sum: c3204e40b1beee225bb333999afb9d7c Description: SecuBox — service « Photos » PhotoPrism. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-provision Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-netboot Suggests: secubox-vm Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-provision_0.1.42-1~trixie1_all.deb Size: 3954 SHA256: f97e8083a964094c01f5da47de7c6d6e3d1e24e10ebb7711936c04f2eab4ee57 SHA1: 89e054ed4d7ee50c022e3f70920043eaf40350ea MD5sum: 354abb4810785d3c837fc7fea84716fb Description: SecuBox — service « Provision » Clonage, amorçage réseau, déploiement, anneaux de release, VM. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-radio Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-radio Recommends: secubox-podcaster Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-radio_0.1.42-1~trixie1_all.deb Size: 3922 SHA256: 9df80a3da14966a16f90698369c58a257de60d3bedf89d908956bf184d438fb0 SHA1: 222e575a9b6059470e1f355a5db4e9b694bc0597 MD5sum: fffdaebd1ebc34e6db6b17d53bd37cf7 Description: SecuBox — service « Radio » Radio et télé collaboratives, balados, relais FM. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-radio-veille Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Suggests: secubox-rbs-sensor, secubox-sentinelle-gsm Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-radio-veille_0.1.42-1~trixie1_all.deb Size: 3952 SHA256: bf04db7ea7fb9a847fa1cf211d98ee87bd08a1ab84300fc5c139eb39df5bfbf1 SHA1: 8037f0b37cba01bd3910d63e36fb5585d33f6755 MD5sum: c0eec4d7271466fe401253ff629f6d4d Description: SecuBox — service « Veille radio » Capteurs de fausses stations de base : matériel radio requis. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-routage Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-netmodes, secubox-routes, secubox-nac Recommends: secubox-qos, secubox-ipv6guard, secubox-freebox Suggests: secubox-modem, secubox-wan-link-guard Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-routage_0.1.42-1~trixie1_all.deb Size: 3978 SHA256: 55e3c096609d95e19614e9f21d1987b844fa1ce78017b4efd10126d08e7f98ec SHA1: 029d98ca889997a3d19bbdc5dfb56f8a867556f6 MD5sum: 3b1d9c2e8ac9bc734812c41cfc5b4d8c Description: SecuBox — service « Routage » Modes réseau, routes, contrôle d'accès, qualité de service. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-sites Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-metablogizer Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-sites_0.1.42-1~trixie1_all.deb Size: 3912 SHA256: 1ec5b9686d26345cd509b2899cf9c80dc4912d0b986eb2646bccb3b7cba241a8 SHA1: 4e8deb5fb04fad5d892e35d2f3b323dc8338d1b3 MD5sum: 4bda7dfe695024b21970585a4f794afb Description: SecuBox — service « Sites » Métablogs, plateforme de publication, catalogue. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-soc Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-soc Suggests: secubox-soc-agent Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-soc_0.1.42-1~trixie1_all.deb Size: 3914 SHA256: c675554b54949296e46cd453b4b7f25a29ee1dd5b98887daa106cff134b7467e SHA1: 2915cf55a1c513a9f1c7ee375e8fe32975331059 MD5sum: fe67572aeed824050da3fc1cb7574e22 Description: SecuBox — service « Centre opérationnel » Agrégation des alertes et son tableau web. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-video Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-peertube Recommends: secubox-jellyfin, secubox-ytsas, secubox-media Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-video_0.1.42-1~trixie1_all.deb Size: 3956 SHA256: 9bd57cebee1776928cf5f7f4a919cf3d1b64cd325a28a67964208992585746c2 SHA1: f6995b9ca4826550f090a7ec70295081936a4e85 MD5sum: 4ed0f35f6d7fc2eadae4089600131fba Description: SecuBox — service « Vidéo » PeerTube, Jellyfin, flux Freebox TV, torrent et SAS web. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-visio Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Recommends: secubox-jitsi Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-visio_0.1.42-1~trixie1_all.deb Size: 3918 SHA256: d3ed3b33028ce94722101b590f440869e438dfc5cfca36f73a77db945640a937 SHA1: aa06bab83c0e3199dbbf33ed163e6fdd334eaa76 MD5sum: 280dd3ca26e1a523408d36f26f0b465e Description: SecuBox — service « Visio et téléphonie » Jitsi, TURN/STUN, PBX. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-vpn Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-wireguard Recommends: secubox-tor Suggests: secubox-reality Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-vpn_0.1.42-1~trixie1_all.deb Size: 3912 SHA256: b8c7848669db03bdea79340b7a8600f3de6d584e13c06d0a602131be9d96c090 SHA1: f742dcfb1803e7875704188bd5842740fb8657f9 MD5sum: f730277036f45aae0118a15dd8838e1a Description: SecuBox — service « Tunnels » WireGuard, sortie Reality, Tor. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-service-waf Source: secubox-meta Version: 0.1.42-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 9 Depends: secubox-waf-ng Recommends: secubox-ipblock, secubox-toolbox-ng Priority: optional Section: metapackages Filename: pool/main/s/secubox-meta/secubox-service-waf_0.1.42-1~trixie1_all.deb Size: 3972 SHA256: 625128decd40169c53987a3c12175e52686070cb7e8155f07a47f0d514ed5707 SHA1: 958d186c3dd280083f9082d2093f5d72cda63a5b MD5sum: 134f9fcc8cb704ab80c658d05b7bc844 Description: SecuBox — service « Pare-feu applicatif » Moteur sbxwaf et son interface, listes de blocage, pare-feu à flux de menaces. . Métapaquet généré depuis l'arbre de secubox-meta : Depends = requis, Recommends = installé par défaut mais retirable, Suggests = optionnel. Package: secubox-soc Version: 1.8.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 186 Depends: secubox-core (>= 1.4.0), secubox-waf-ng (>= 1.29.0), secubox-dpi (>= 1.11.2), secubox-webos (>= 1.9.7) Conflicts: secubox-soc-web Breaks: secubox-hub (<< 1.9.10-1~bookworm1) Replaces: secubox-hub, secubox-soc-web Priority: optional Section: admin Filename: pool/main/s/secubox-soc/secubox-soc_1.8.0-1~trixie1_all.deb Size: 48998 SHA256: f97bc1206fe4dc2100270bf71bd66b0362ce9c5eba430d86bccd4e9bf54b5bde SHA1: e04e23161a4b494a7d5bb0af0131de615151ebea MD5sum: 3a991f27aa098f77248a08339d88bcae Description: SecuBox SOC — Security Operations Center aggregator Aggregates alerts, threat-map data, and P2P intel from Hub and WAF into a single Security Operations Center dashboard. Read-only consumer of the existing alert sources. . Distinct from sibling packages in the SOC cluster: - secubox-soc-agent — edge node agent reporting up to a gateway. - secubox-soc-gateway — central fleet-monitoring hub (multi-board aggregator). - la page Vigie SOC (www/soc/), trois ecrans lus sur les sources vivantes. Package: secubox-soc-agent Version: 1.0.5-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 68 Depends: python3 (>= 3.11), secubox-core (>= 1.4.0), python3-httpx | python3-pip, python3-fastapi | python3-pip, uvicorn Suggests: secubox-health Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-soc-agent/secubox-soc-agent_1.0.5-1~trixie1_all.deb Size: 12914 SHA256: 0378b7070a2257a0570135a75f6f7cdcf5b1535a578fbf71c0a4524529ecae3e SHA1: d63f51d8024fe22b18da8b8fa70ec3de3b6b76bd MD5sum: ca76ea2192d13f12c2ae70baa532978b Description: SecuBox SOC Agent — Edge Node Agent for SOC Integration Edge node agent that collects system metrics and security alerts, then pushes them to an upstream SOC gateway for centralized monitoring. . Features: - System metrics collection (CPU, memory, disk, network) - Security alert aggregation (WAF) - HMAC-SHA256 signed metric push to upstream SOC - Remote command execution with signature validation - Automatic enrollment with SOC gateway - Command audit logging . Part of the SecuBox hierarchical SOC architecture. Package: secubox-soc-gateway Version: 1.1.4-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 127 Depends: python3 (>= 3.11), secubox-core (>= 1.4.0), python3-httpx | python3-pip, python3-fastapi | python3-pip, python3-websockets, uvicorn Suggests: secubox-soc-agent, secubox-health Homepage: https://cybermind.fr/secubox Priority: optional Section: admin Filename: pool/main/s/secubox-soc-gateway/secubox-soc-gateway_1.1.4-1~trixie1_all.deb Size: 22138 SHA256: 15234ecefabdbf136498b77bf31d168fa8da22081f6e7695baae5e3951e32f3f SHA1: 29402c4e80c8a4d133ca7428ba2a47d600477b6d MD5sum: 6d3a41bacb094eb3514d1d55cd42b24b Description: SecuBox SOC Gateway — Central Fleet Monitoring Hub Central SOC aggregation gateway that receives metrics from edge nodes, provides unified alert streams, correlates threats across the fleet, and enables remote node management. . Features: - Node registration with enrollment tokens - Fleet-wide metrics aggregation - Unified alert stream from all nodes - Cross-node threat correlation - Remote command execution - WebSocket real-time updates - Hierarchical deployment support (regional/central) . Part of the SecuBox hierarchical SOC architecture. Package: secubox-socialrelay Version: 0.1.19-1~trixie1 Architecture: arm64 Maintainer: Gerald Kerma Installed-Size: 10232 Depends: adduser, acl Recommends: secubox-bbs Homepage: https://secubox.in Priority: optional Section: web Filename: pool/main/s/secubox-socialrelay/secubox-socialrelay_0.1.19-1~trixie1_arm64.deb Size: 3660676 SHA256: b29d95e783142b8ae3c252d9cf912ede1061f4fc50bade3f77a0b20d2337b1ee SHA1: b274016bfc4291855faae12e71484dbd650f35a3 MD5sum: ebc01a7af3fa2f98e3ea4ce49927a626 Description: SecuBox — relais de reseaux sociaux (fediverse + consentement) SocialRelay suit des sources sociales, CACHE leurs medias en local (le navigateur ne contacte jamais le tiers) et ouvre un fil BBS par publication. . Trois modes d'acces, JAMAIS de scraping : open (Mastodon/fediverse, public), consent (Facebook via l'API Graph avec un jeton fourni par l'operateur), et bridge (un flux RSS que l'operateur heberge lui-meme). Package: secubox-spiderfoot Version: 1.0.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 65 Depends: secubox-core (>= 1.4.0), debootstrap, lxc, jq Priority: optional Section: admin Filename: pool/main/s/secubox-spiderfoot/secubox-spiderfoot_1.0.1-1~trixie1_all.deb Size: 14300 SHA256: d2754a9a14b5a025ee4b553ad550e4ab9670d9ace8cab7c0b4b4eb99e9869ea5 SHA1: 647b1690be6cc9d58cfa3ee5f443fb7b8b8df391 MD5sum: a2cb0f70aab766676f552e6154a88374 Description: SpiderFoot OSINT automation engine (LXC-sandboxed) Runs the SpiderFoot OSINT automation engine inside a dedicated debootstrap/LXC sandbox — 200+ passive modules and a correlation graph, the interim Maltego-style correlation hub. SpiderFoot ships its own web UI and REST API bound to the container's LAN IP; this module handles the LXC lifecycle, a status probe, and reverse-proxies the container UI behind the SecuBox WAF/auth front. Features include: - 200+ passive OSINT modules with a correlation graph - Sandboxed execution in a dedicated LXC container - SpiderFoot's own UI/REST reachable ONLY via the WAF-fronted proxy - JWT-gated lifecycle API with append-only audit logging - Detached install/lifecycle model (never blocks the aggregator loop) Package: secubox-streamlit Version: 1.6.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 649 Depends: secubox-core (>= 1.5.46), python3-uvicorn | python3-pip, python3-psutil, lxc, debootstrap Recommends: streamlit, chromium Breaks: secubox-streamforge (<< 1.2.5~) Replaces: secubox-streamforge (<< 1.2.5~) Priority: optional Section: net Filename: pool/main/s/secubox-streamlit/secubox-streamlit_1.6.0-1~trixie1_all.deb Size: 133484 SHA256: be400e60670220d8fa7a2161c7d37c05cd6e005282b85a3655fb47cbdee02254 SHA1: 458b27b4487627dfcfda63ca09bda61f1b70ede3 MD5sum: 4b287bc656d38103511d8706f05d3d1f Description: SecuBox Streamlit Platform Plateforme d'applications Streamlit avec support LXC. Port Debian bookworm de luci-app-streamlit (SecuBox OpenWrt). Package: secubox-surf Version: 1.0.34-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 605 Depends: python3, python3-httpx, python3-uvicorn | python3-pip, python3-socksio Priority: optional Section: web Filename: pool/main/s/secubox-surf/secubox-surf_1.0.34-1~trixie1_all.deb Size: 173690 SHA256: 32f28e4f899ca1af2d19b11a1cbaeb5abc5c8bcafe901c6d82bcf9f959f404c9 SHA1: c8888d56cbe6d37315ae3fb48d75fabf7aca45c0 MD5sum: d0bbbc7fb2a8b8f247868da1941d551b Description: SecuBox Surf — relais de navigation par-origine (le BiB) Le navigateur de relais du Hall : chaque hôte distant est servi sous une origine propre, `surf-.gk2.secubox.in`, ce qui cloisonne cookies et stockage par site visité au lieu de les laisser se rejoindre. . Le relais réécrit les URL absolues du HTML et du CSS vers l'origine de surf, coupe les pisteurs, et sait rejouer une page lourde avec un Chromium sans tête dont il fige le DOM abouti (rendu statique, mis en cache). . MetaNews en dépend : chaque clic sur un lien de source y passe. Package: secubox-system Version: 1.10.3-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 720 Depends: polkitd | policykit-1, secubox-core (>= 1.5.47~), python3-psutil, python3-fastapi | python3-pip, systemd, util-linux, python3, systemd-zram-generator Recommends: lxc Breaks: secubox-admin (<< 1.2.3~), secubox-ksm (<< 1.2.3~), secubox-system-hub (<< 1.0.3~), secubox-system-tuning (<< 1.2.6~) Replaces: secubox-admin (<< 1.2.3~), secubox-ksm (<< 1.2.3~), secubox-system-hub (<< 1.0.3~), secubox-system-tuning (<< 1.2.6~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-system/secubox-system_1.10.3-1~trixie1_all.deb Size: 129044 SHA256: e6a7051af75c3e495867f2a54388a7a74d11dbd2ce14b74cc6aa37acb156d5d5 SHA1: 71bc3d1f87d58ee279863139b97eff653547f3c0 MD5sum: 17e17c3f6ea64421d8c324e588617866 Description: SecuBox System Hub Centre de contrôle système : santé, services systemd, logs journald, diagnostics, backup. . Port Debian bookworm de luci-app-system-hub (SecuBox OpenWrt / CyberMind.fr). Package: secubox-threat-analyst Version: 1.4.7-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 98 Depends: secubox-core (>= 1.0.0) Recommends: crowdsec Priority: optional Section: admin Filename: pool/main/s/secubox-threat-analyst/secubox-threat-analyst_1.4.7-1~bookworm1_all.deb Size: 24352 SHA256: c26cf01ee2ce4b2d9df8a4267b7e777cc117ae809e4f9ee78c1f7eba899585b2 SHA1: a9957bbc04bbddc68cc36c667c31933290615158 MD5sum: 8fda496181f9fd773636686ce42c687f Description: SecuBox Threat Analyst — AI agent that writes CrowdSec scenarios AI-assisted threat analysis: ingests recent alerts, proposes new CrowdSec scenarios, and writes them under /etc/crowdsec/scenarios/ for operator review and reload. . Distinct from sibling packages in the threats cluster: - secubox-threats — umbrella dashboard aggregating CrowdSec + Suricata + WAF alerts (read-only). - secubox-cve-triage — CVE vulnerability triage workflow. - secubox-network-anomaly — DNS-log anomaly detection. - secubox-cyberfeed — threat-intel feed aggregator. - secubox-ipblock — nftables-driven IP blocklist enforcement. - secubox-openclaw — OSINT / domain reconnaissance. Package: secubox-threatmesh Version: 1.1.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 76 Depends: secubox-core (>= 1.4.0), python3, python3-uvicorn | python3-pip, secubox-ipblock (>= 1.2.0) | secubox-toolbox Recommends: secubox-p2p Priority: optional Section: net Filename: pool/main/s/secubox-threatmesh/secubox-threatmesh_1.1.0-1~trixie1_all.deb Size: 18348 SHA256: 5abe7a8492ef97f10ae82d73c70c12b15a0204fa45e5994c93b653d6ab82634d SHA1: df92869402126272e64ea0bf2aea2b5cc73f1b4e MD5sum: 4425c5e71628b2cf97150c47b2df0c27 Description: Sovereign threat-intel mesh for SecuBox (central-API replacement) Replaces third-party central threat APIs with self-sourced free public blocklists (Phase 1) and peer-to-peer MESH distribution of locally-detected decisions over the SecuBox WireGuard mesh (Phase 2), plus a status/aggregate/bouncer-compatible API and dashboard (Phase 3). All IOCs flow into the shared threat_intel table that secubox-blacklist-sync drains into the nft blacklist. No central account, no enrollment, no paywall, no IP-blocklisting by a third party. Package: secubox-threats Version: 1.6.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 192 Depends: secubox-core (>= 1.4.0), python3-tomli, python3 (>= 3.11) Breaks: secubox-ai-insights (<< 1.2.3~) Replaces: secubox-ai-insights (<< 1.2.3~) Priority: optional Section: admin Filename: pool/main/s/secubox-threats/secubox-threats_1.6.0-1~trixie1_all.deb Size: 42600 SHA256: 4ff2ed0b994ca6dc019b77f9f43c7e11c3c86158b7abd0221fbeaf1e996c56b8 SHA1: 24ee63f1d8dec4aa5dcec384b378dd9c2a3ce249 MD5sum: 55da67a6c61ab7f86400ce3c755c1c20 Description: SecuBox Unified Threats Dashboard Unified security threats dashboard aggregating alerts from the WAF. Features threat intelligence, IOC management, risk scoring, incident tracking, and report generation. Package: secubox-toolbox Version: 2.13.5-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 1587 Depends: secubox-core (>= 1.7.10), python3 (>= 3.11), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-jinja2, python3-pydantic, python3-httpx, python3-qrcode, python3-fpdf2 | python3-pip, nftables, iproute2, hostapd, dnsmasq, jq, openssl, adduser, fonts-dejavu-core, fonts-symbola, fonts-noto-color-emoji, python3-yaml, python3-geoip2 | geoipupdate, lxc, debian-archive-keyring, sudo Recommends: bridge-utils, tor, obfs4proxy, python3-socksio Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-toolbox/secubox-toolbox_2.13.5-1~trixie1_all.deb Size: 411320 SHA256: 7c23d40bd700baeb09c1bbeff963c954a26051274180fd2a7d8e22320148fce8 SHA1: ea05278d534aa82758b44a774c028b9df8d5bfe0 MD5sum: f6d327901f7680e68bf2095eb45c7468 Description: SecuBox-DEB ToolBoX — Gondwana Cabine Numérique (captive AP + MITM analyzer) Phase 1 du parent #474 (ToolBoX Pipeline). Productionize le PoC captive portal en package dédié : splash + consent R2 + CA distribution iOS (mobileconfig) + nftables TPROXY → moteur MITM Go (sbxwaf/sbxmitm) + addons (cookies/dpi/avatar/ja4/soc-relay) → modules SecuBox existants. . Conforme CSPN (R2 opt-in explicite, MAC hashing avec sel rotatif daily, retention 24h défaut). Cible : borne publique cabine téléphonique numérique. Package: secubox-toolbox-ng Version: 0.13.0-1~bookworm1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 23704 Conflicts: secubox-mitmproxy Replaces: secubox-mitmproxy Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-toolbox-ng/secubox-toolbox-ng_0.13.0-1~bookworm1_arm64.deb Size: 5326184 SHA256: e0c03a2c7167ba7f7080256f9edd008c2a5f7f01a105664de345ec41cad1421c SHA1: 92d7be1a821296acc6901d0425ffbde70cd2beca MD5sum: 14164d346ae4bb546bf84eaa583fdb06 Description: SecuBox-Deb — outils Go du parc (sbxmitm, sbx-sentinel, sbx-authwatch, sbxdpi) LE MODULE GO DU PARC vit ici (go.mod, vendor/), et il porte CINQ commandes : sbxmitm, sbx-sentinel, sbx-authwatch, sbxdpi — livrees par ce paquet — et sbxwaf, qui ne l'est PAS : c'est secubox-waf-ng qui compile et livre le moteur du pare-feu depuis cette meme source. . sbxdpi est la couche Go qui emancipe nDPId : il consomme le flux JSON du distributeur nDPIsrvd (moteur C libre, nDPI 5.x), applique le filtrage declaratif du parc (exemption premiere partie, listes deny/allow, mise en sourdine des risques — memes conffiles *.txt que sbx-sentinel), agrege les stats DPI et les sert en lecture seule sur /run/secubox/aggregator.sock (/api/v1/dpi/) pour la cardlet DPI du Hall, derriere nginx + JWT FastAPI. . Multi-core Go re-implementation of the R3 toolbox MITM engine (#662), porte hors de l'ancienne flotte de workers Python mitmproxy, bridee par le GIL et retiree depuis. Livre le standalone sbxmitm binary plus a DISABLED systemd template unit. . This package is the Phase-6-cutover migration target. The unit is NOT enabled or started by the maintainer scripts — the live R3 tunnel keeps running on the Python workers until the cutover is performed manually. Installing this package changes NO runtime behaviour (no service start, no nft DNAT). Package: secubox-tor Version: 1.7.0-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 263 Depends: secubox-core (>= 1.4.0), tor, unbound, nftables, dns-root-data, python3, python3-fastapi, python3-uvicorn, secubox-hub, nginx Breaks: secubox-macro (<< 0.1.1~), secubox-proxypac (<< 1.2.7~) Replaces: secubox-macro (<< 0.1.1~), secubox-proxypac (<< 1.2.7~) Priority: optional Section: admin Filename: pool/main/s/secubox-tor/secubox-tor_1.7.0-1~bookworm1_all.deb Size: 56096 SHA256: b51f923f4da1e5aa412281b84e8d36ac37ff708c0adc22b3a33cf95930171eec SHA1: 3738a1542d31016995e395184f9e218e4933ff26 MD5sum: da61bf01d8a48e5ba5bf18625cad73b3 Description: SecuBox Tor — Tor relay + hidden-services manager Manages a local Tor daemon: transparent-proxy + SOCKS modes, hidden-service publishing, circuit monitoring, identity rotation, DNS-over-Tor, and kill-switch enforcement. Pairs with secubox-exposure when publishing hidden services for SecuBox vhosts. Package: secubox-torrent Version: 2.2.1-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 270 Depends: secubox-core (>= 1.0), secubox-hub, lxc, debootstrap, nftables, jq Recommends: secubox-peertube Priority: optional Section: net Filename: pool/main/s/secubox-torrent/secubox-torrent_2.2.1-1~bookworm1_all.deb Size: 60930 SHA256: 2148e64952e5221ec22c0e3e0fd7f19aed4c3f0a89c79922d7c0a05bbceb70d8 SHA1: 1876c88537876e2a9a15ad47b62148934d445366 MD5sum: 1bc8aaa9e025358dc35515b98a52f667 Description: WebTorrent streaming for SecuBox (LXC-native) Paste a magnet and stream it in the browser (HTTP Range) while it downloads. Ephemeral by default with an optional Keep to a persistent library on /data. The WebTorrent engine (hybrid WebRTC+BitTorrent) runs isolated in a dedicated LXC; the host only proxies an authenticated vhost. Package: secubox-ui-manager Version: 1.0.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 129 Depends: python3 (>= 3.11), kbd, xinit, xserver-xorg-core, chromium | chromium-browser, unclutter, x11-xserver-utils Recommends: python3-textual, secubox-console Suggests: xserver-xorg-video-vmware, xserver-xorg-video-qxl Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-ui-manager/secubox-ui-manager_1.0.1-1~trixie1_all.deb Size: 24246 SHA256: 172067b39fbb20b2809922cb32f87b3cb33a2248f6fdafcc652bf7083485322c SHA1: 7ffe43cc7260e622346f691ec14bc4492763409f MD5sum: d8e4c96fde9f56268f7ed2caa87a2a95 Description: SecuBox Unified UI Manager Manages the SecuBox user interface with automatic mode selection and graceful fallback support. . Features: - KUI: Kiosk UI mode (X11 + Chromium fullscreen) - TUI: Terminal UI mode (Textual-based console) - Console: Fallback to standard getty login - Automatic hypervisor detection (VirtualBox, QEMU/KVM, VMware) - Per-hypervisor graphics optimization - Modular debug system with 6 verbosity levels - Health monitoring with automatic fallback on failure . This package is part of the SecuBox security appliance. Package: secubox-vault Version: 2.1.8-1~trixie1 Architecture: all Maintainer: SecuBox Team Installed-Size: 657 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, python3-cryptography, python3-argon2, gpg, gpg-agent, gpgconf, secubox-core (>= 1.5.51) Suggests: secubox-annuaire Priority: optional Section: admin Filename: pool/main/s/secubox-vault/secubox-vault_2.1.8-1~trixie1_all.deb Size: 181078 SHA256: 048d09cd05d12c632b92e1f81997aa7c89955d747fd718fee3a4aba840925a26 SHA1: 41a0c4f6acada8b254e796a3e73c614c7ec14c18 MD5sum: 51ad883b912a9d17dbc7f7e4369cbfcd Description: SecuBox Vault - Secrets management Encrypted secrets storage for SecuBox. Provides secure storage for API keys, passwords, and credentials with audit logging and rotation support. Package: secubox-vm Version: 1.3.0-1~trixie1 Architecture: all Maintainer: SecuBox Team Installed-Size: 97 Depends: python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip, secubox-core (>= 1.5.46) Recommends: libvirt-daemon-system, qemu-system-x86, virtinst, lxc Priority: optional Section: admin Filename: pool/main/s/secubox-vm/secubox-vm_1.3.0-1~trixie1_all.deb Size: 23028 SHA256: 4d3fb0b2ebe10277f811f173d390e6de2bb2df8db9a04a36f5ba69332f5462b7 SHA1: ce08e3ed85aefbfaab582efecbda849916255396 MD5sum: 77e9150b13a9afd2a130acd031ad686b Description: SecuBox VM Manager - Virtualization management Virtual machine and container management for SecuBox. Supports KVM/QEMU virtual machines via libvirt and LXC containers. Package: secubox-voice Version: 0.1.10-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 77 Depends: secubox-core (>= 1.4.0), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip, python3-python-multipart | python3-multipart | python3-pip, ffmpeg Recommends: secubox-zia, secubox-voice-moteur Priority: optional Section: web Filename: pool/main/s/secubox-voice/secubox-voice_0.1.10-1~trixie1_all.deb Size: 19752 SHA256: bdfde093decf30dc05f050f9ee21e433d007354128688d101d586758721e2b2c SHA1: 87b9e26e08bf6c5d3c1a04080c8dc8a537422488 MD5sum: 572b27b62d94b879207eb250539fad5e Description: SecuBox Voice — Lexie: local speech synthesis and recognition The ears and mouth of SBXOS. This module understands nothing: it transcribes and it speaks. Intent, role policy and action belong to ZIA, whose action layer already turns "pause the radio" into media.pause on the radio service — adding a second voice brain would duplicate the one place allowed to decide. . Voice is not a second API. It adds two capability families to the existing bus, voice.speak and voice.listen, declared in a capabilities.d manifest like any other module. . The engine is pluggable behind the OpenAI-compatible audio contract (/v1/audio/speech, /v1/audio/transcriptions): either a local backend (Piper plus whisper.cpp, arm64, loaded on demand so the box keeps its RAM) or any remote host serving that contract. Engine unreachable is reported as such — never a fallback voice, never an approximate transcription. Package: secubox-voice-moteur Version: 1.1.1-1~trixie1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 295300 Depends: libc6 (>= 2.34), libstdc++6, libgomp1, ffmpeg, python3-cffi, python3-requests, python3-srt, python3-tqdm, python3-websockets Recommends: secubox-voice (>= 0.1.4) Conflicts: piper Priority: optional Section: sound Filename: pool/main/s/secubox-voice-moteur/secubox-voice-moteur_1.1.1-1~trixie1_arm64.deb Size: 205549080 SHA256: 78f098090c38b12fd21fd4700b4517784941854d36c846d5aa5e7490dcdfea63 SHA1: 93b0f9c6d364dc3d4bde739e88f1f1f172ea126a MD5sum: 3fc881a792e98a1ba09c9b55c97b45c1 Description: SecuBox — moteur vocal local de Lexie (piper + whisper.cpp) Synthèse (piper, voix française « lexie-fr » tirée de fr_FR-siwis-medium, CC-BY 4.0) et reconnaissance (whisper.cpp v1.7.6, modèle ggml-base-q5_1) exécutées sur la box, sans réseau, en sous-processus à la demande. Remplace le paquet Debian « piper » homonyme (configurateur de souris). Package: secubox-waf-ng Version: 1.30.0-1~trixie1 Architecture: arm64 Maintainer: Gerald KERMA Installed-Size: 20679 Depends: secubox-core (>= 1.5.40~), adduser, apparmor, lxc, jq, curl Recommends: secubox-haproxy Conflicts: secubox-crowdsec, secubox-mitmproxy Breaks: secubox-aggregator (<< 0.3.3~), secubox-waf (<< 1.10.44~) Replaces: secubox-crowdsec, secubox-mitmproxy, secubox-waf (<< 1.10.44~) Homepage: https://cybermind.fr/secubox Priority: optional Section: net Filename: pool/main/s/secubox-waf-ng/secubox-waf-ng_1.30.0-1~trixie1_arm64.deb Size: 10195126 SHA256: 29c7b16a6b546874961a944dc71f0d0965f274144e10787b95733970d53557db SHA1: aae38854d0c53500789e15afd26cc8110025cb7c MD5sum: aca110bdf7436395fffb82b36e8732e1 Description: SecuBox-Deb — MOTEUR du pare-feu applicatif (sbxwaf, Go, natif hote) LE MOTEUR ET SON INTERFACE. sbxwaf inspecte, decide et bannit ; l'API Python (wafctl, tableau de bord) qui le montre est un composant de ce paquet depuis 1.19.0 (#2050) : deux processus, deux comptes, deux unites. . SA SOURCE N'EST PAS ICI : elle vit dans packages/secubox-toolbox-ng/cmd/sbxwaf — un seul module Go pour tout le parc, un vendor/ partage. Ce paquet compile depuis la et n'a aucun code propre. Modifier cmd/sbxwaf puis reconstruire secubox-toolbox-ng ne deploie donc RIEN : c'est CE paquet qu'il faut reconstruire. . Host-native Go WAF reverse-proxy replacing mitmproxy/mitmdump for the SecuBox-DEB WAF layer (#744). Ships the standalone sbxwaf binary plus hardened systemd worker template units (secubox-waf-ng-worker@{1,2}). . Features: TLS-forging reverse proxy, hot-reloadable WAF rules engine, graduated WARNING/BAN responses, threat log (NDJSON), RGPD Set-Cookie ledger, media response cache, themed error pages. . CSPN-compliant: dedicated secubox-waf unprivileged user, AppArmor enforce profile, NoNewPrivileges, ProtectSystem=strict, RuntimeDirectoryPreserve=yes (avoids the /run/secubox socket-wipe cascade, #741). Package: secubox-wan-link-guard Version: 1.0.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 25 Depends: ethtool, iproute2, iputils-ping Priority: optional Section: net Filename: pool/main/s/secubox-wan-link-guard/secubox-wan-link-guard_1.0.1-1~trixie1_all.deb Size: 5182 SHA256: 0009ff91dc3340a3dd974f1630eb75f0350cc6395f185b45faceaaac53e9e467 SHA1: 249391b35995ac1941662c5b0c776f295cd242a8 MD5sum: f56eab6d3384f71bfc27922e41e49ee6 Description: WAN mvpp2 marginal-link guard for SecuBox (MOCHAbin) Board-specific watchdog for the MOCHAbin (Marvell Armada, mvpp2) WAN port, which recurrently goes dead on gk2 through three stacked faults: the MAC TX wedges under upstream flow-control PAUSE frames, gigabit auto-negotiation is marginal through the intermediate hub, and a parasite default route/duplicate host IP appears on lan0. . Ships a oneshot guard (ethtool pause-off + renegotiate + route/addr cleanup — never `ip link down/up`, which wedges the comphy), a boot+30s timer, a systemd .link that disables flow-control the moment eth2 appears, and a flow-control backstop unit. Tunable via /etc/default/secubox-wan-link-guard. . MOCHAbin-only: on other boards eth2/lan0 do not match and the guard is a no-op. See /usr/share/doc/secubox/FAQ-NETWORK-WAN-RECOVERY.md (ref #913). Package: secubox-webfilter Version: 0.4.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 215 Depends: python3 (>= 3.11), secubox-core (>= 1.7.0), python3-fastapi | python3-pip, python3-uvicorn | python3-pip, systemd, adduser, iproute2 Recommends: unbound, apparmor Homepage: https://github.com/gkerma/secubox-deb Priority: optional Section: admin Filename: pool/main/s/secubox-webfilter/secubox-webfilter_0.4.1-1~trixie1_all.deb Size: 47678 SHA256: d3f391267c0d070ec8dc53faa7678cab03cd641f22e5f4a0e7f70c125a3f6015 SHA1: ca59a54c2bb84167877217b2b09c2a0f90d78b2d MD5sum: c2ecc3ab45d0f4ae70a1b6a92ed3fdcd Description: SecuBox WebFilter : filtrage de contenus par catégories, profils et appareils Classe les requêtes DNS de chaque appareil par catégorie (contenu adulte, jeux d'argent, phishing et malware) à partir du journal d'Unbound et de listes publiques téléchargées à l'exécution. Mode « observe » (ce que le filtrage aurait bloqué) ou blocage : des profils mettent chaque catégorie en observe ou en block ; un appareil est rattaché à un profil par adresse MAC ; le blocage passe par des vues d'Unbound partagées, appliquées par un contrôleur root déclenché par fichier (contrôle, rechargement, retour arrière, audit). Tant qu'aucun profil ne bloque, rien n'est écrit dans Unbound. Compteurs conservés 30 jours, réservés à l'administrateur. Package: secubox-webos Version: 1.12.3-1~bookworm1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 2003 Depends: secubox-core (>= 1.5.39~), python3, python3-fastapi | python3-pip, python3-httpx, python3-python-multipart | python3-multipart | python3-pip, python3-uvicorn | python3-pip, python3-pydantic | python3-pip Breaks: secubox-sbxui (<< 0.1.3~) Replaces: secubox-sbxui (<< 0.1.3~) Homepage: https://secubox.in Priority: optional Section: admin Filename: pool/main/s/secubox-webos/secubox-webos_1.12.3-1~bookworm1_all.deb Size: 680024 SHA256: 5177aa1ba96abba63321598021b1d70233f77f654ad3d19969a6e5ce79e0382f SHA1: 4fc27ed0d8cc9ae0b921ec3ca4ca6656765fe219 MD5sum: 55eb25c2b89c256e8ff24f9598785116 Description: SecuBox WebOS — normalized service registry (Hall P1) Aggregator-independent registry service exposing a normalized view of SecuBox services (catalogue + health + reach), served on its own socket. Package: secubox-wireguard Version: 1.3.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 373 Depends: secubox-core (>= 1.4.0), wireguard-tools, qrencode Priority: optional Section: net Filename: pool/main/s/secubox-wireguard/secubox-wireguard_1.3.0-1~trixie1_all.deb Size: 71084 SHA256: d13f381ea17eeefe5863a785e69fcd0279058cfe0bf558c71d44167f3a82da43 SHA1: 6cfc11c8a3a5b626203e25dd55b106a7c71440f6 MD5sum: 2d608b487c119551622f13ec6eec91b2 Description: SecuBox WireGuard VPN Dashboard WireGuard VPN management interface for SecuBox. Features: - Interface management (up/down/status) - Peer management with auto-config and QR codes - Traffic statistics and monitoring - Migration from OpenWrt - Three-fold architecture (Components/Status/Access) Package: secubox-yggdrasil Version: 1.3.1-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 103 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Conflicts: secubox-mesh (<= 1.999.0) Replaces: secubox-mesh (<= 1.999.0) Provides: secubox-mesh-yggdrasil Priority: optional Section: admin Filename: pool/main/s/secubox-yggdrasil/secubox-yggdrasil_1.3.1-1~trixie1_all.deb Size: 18408 SHA256: a021b47d68c79ccea784a9f5b9131a396a16f2171a63621f02c2ad9a8f9a114c SHA1: 4da0e86aafa21c69b379a8b58b99bd84f76bcfae MD5sum: 66afca2c26124dd4feb1b89a7a3fac6f Description: SecuBox Mesh DNS - Meshname DNS for mesh networks Meshname DNS management for Yggdrasil and mesh networks. Package: secubox-ytsas Version: 0.8.2-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 634 Depends: secubox-core (>= 1.5.39~), lxc, lxc-templates, debootstrap, nftables, sudo, curl, jq, secubox-hub Recommends: secubox-peertube, secubox-lyrion, ffmpeg Breaks: secubox-torrent (<< 2.4.10~) Replaces: secubox-torrent (<< 2.4.10~) Priority: optional Section: net Filename: pool/main/s/secubox-ytsas/secubox-ytsas_0.8.2-1~trixie1_all.deb Size: 140422 SHA256: 36f129c3caee2c7f34324e09e286fbc9860d8087e24423eac337a876c26e4781 SHA1: d5838a7b00a9db41bd9c41331f783a9ae2bbfaa7 MD5sum: 546d75b3fbcd7cdd6be964becfc0be22 Description: YouTube/web-media SAS for SecuBox (LXC-native) Paste a YouTube (or any yt-dlp-supported site) link, pull it into a staging space and watch it in the browser (HTTP Range) — then decide: Garder (conserve) or leave ephemeral with an opt-in purge TTL. The yt-dlp fetch engine runs isolated in a dedicated LXC (cookie vault for age-gated/private videos stays inside it); the host only proxies an authenticated vhost and mediates the conserve pipeline — video to PeerTube, audio (mp3/flac/…) to Lyrion; ffmpeg (ffprobe) lets the host resolve ambiguous containers precisely. Package: secubox-zia Version: 0.3.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 197 Depends: secubox-core (>= 1.5.39~), python3, python3-uvicorn | python3-pip, python3-httpx | python3-pip Priority: optional Section: web Filename: pool/main/s/secubox-zia/secubox-zia_0.3.0-1~trixie1_all.deb Size: 54628 SHA256: 007be0344c72794a45f0be355a8d8d8368263b6af86fdad5b6a4d6ca74dd4526 SHA1: d1d07acc25a8533b822537aae00e6ce441b8d714 MD5sum: 498c7975727b25cdc059a33722f918ad Description: ZIA Hall — local ARM64 AI, interface to the Hall object bus (POC) ZIA is AletheiaVox/SBXOS's local AI: the human interface to the Hall's object bus. It does not own the data — it interprets and orchestrates objects already exposed by SecuBox (the bus stays the source of truth and applies the ACL). Always local (level 1); delegates to a VHOST (level 2) or optional remote (level 3) when needed. . POC / P1: FastAPI on a Unix socket (/api/v1/zia/), a heuristic responder that calls read-first bus tools (search_objects, get_object, list_recent, open, delegate) so it never invents an object, plus a Chat cardlet for the Hall. A llama.cpp GGUF model (chosen after benchmark on the MOCHAbin) plugs into the same interface later. Package: secubox-zkp Version: 1.3.0-1~trixie1 Architecture: all Maintainer: Gerald KERMA Installed-Size: 73 Depends: secubox-core (>= 1.4.0), python3, python3-fastapi | python3-pip, python3-uvicorn | python3-pip Recommends: zkp-hamiltonian-tools Priority: optional Section: admin Filename: pool/main/s/secubox-zkp/secubox-zkp_1.3.0-1~trixie1_all.deb Size: 17286 SHA256: 26fadec89aefedc424af87a443a97ec4d8a7b6bd0f799eb00f926ec106b1c391 SHA1: cac553776cf139615927b778594b11b6fb8f4f5a MD5sum: 430dca874497b42f3290f54bcc8d6759 Description: SecuBox ZKP - Zero-Knowledge Proof Dashboard Zero-Knowledge Proof Hamiltonian management for SecuBox.