Big Bang migration plan from C3BOX (OpenWrt) to SecuBox-DEB (Debian):
- 4 phases: Prepare, Build, Sync, Cutover
- LXC containers for Mail, NextCloud, Matrix, Gitea
- Host-native gateway services (HAProxy, CrowdSec, nftables)
- Data migration strategy for 94 SSL certs + service data
- Cutover procedure with rollback plan
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Design spec for migrating mitmproxy WAF module from OpenWrt to Debian:
- WAF-in mode only (HAProxy backend inspection)
- Single unified secubox-mitmproxy package
- LXC container with secubox_waf.py threat detection addon
- 18 FastAPI endpoints for status, alerts, HAProxy integration, WAF rules
- CrowdSec integration for automatic IP banning
- Full WebUI with status, settings, and filters pages
- TOML configuration format
Session 90
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
11 tasks with 37 steps covering:
- Modal system and toast notifications
- Form validation and API error handling
- VHost CRUD (add/edit/delete)
- Backend CRUD (add/edit/delete)
- Server CRUD (nested under backends)
- Certificate CRUD (request/delete)
- Table enhancements with action buttons
Single file modification pattern maintained.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Design spec for adding CRUD operations to HAProxy dashboard:
- VHost management (add/edit/delete)
- Backend management with nested servers
- Certificate request and deletion
- Modal system with P31 Phosphor theme
- Toast notifications for feedback
- Client-side validation
Approach A: Minimal Enhancement (~450 lines in single file)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- 4 operating modes: Dashboard, Local, Flash, Gateway
- Web Remote control at :8080 (touchless)
- Auto-detect + flag file override for mode switching
- Staged failover with visual feedback
- Unified Python Agent architecture
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
13-task TDD implementation plan covering:
- MenuItem and MenuState data models
- Static menu definitions for 6-slice radial menus
- MenuNavigator state machine
- Slice detection from touch coordinates
- RadialRenderer for framebuffer display
- ActionExecutor with LocalAPI integration
- TouchHandler menu mode integration
- Component wiring in main.py
- Menu icon generation
- Comprehensive test coverage
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Comprehensive design for radial menu touch interface:
- 6-slice pie navigation optimized for circular display
- Dual-scope control (local Pi Zero + remote SecuBox)
- Gesture-based interaction (tap, swipe, long press)
- Hierarchical menu structure with dynamic data loading
- Error handling and visual feedback patterns
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Complete testing guide covering:
- Gateway emulator installation and usage
- Unit test execution (13 tests)
- Agent-gateway integration testing
- API module verification
- Troubleshooting section
Part of Eye Remote v2.0.0 implementation (Task 14).
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
