320215392e
docs: add multi-agent worktree workflow doctrine to CLAUDE.md (ref #83 )
...
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-12 10:05:09 +02:00
ce71b06595
docs(session106): Add GitHub Issues workflow + GST references
...
- Add GitHub Issues synchronization workflow to CLAUDE.md
- Mandatory sync between WIP/TODO and GitHub Issues
- Manual validation rule before closing issues
- Quick reference commands for gh CLI
- Add GST MOCHAbin technical references
- docs/references/gst/mochabin-release-v4.10.txt
- docs/references/gst/MOCHABIN-BOX-block-diagram-Jan10-2020.pdf
- Update WIP.md with Session 106 progress
- LED IS31FL3199 investigation findings
- DTB Factory GST vs mainline Linux differences
- Technical references memorized (~/DEVEL/GST, ~/DEVEL/ARMADA)
Related: #38 , #39
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-06 14:52:44 +02:00
106fd61af3
fix(network): Fix x64-live netplan for real AMD64 hardware
...
Problem: IP assignment failures on bare metal AMD64 due to broken
netplan wildcard syntax - using wan0: with match: name: "e*" but
no set-name: directive caused conflicts on multi-interface systems.
Solution:
- Split single e* pattern into separate en* and eth* matches
- Different route metrics (100/200) for deterministic routing
- Added br-lan bridge pre-definition for router mode
- Enhanced secubox-net-detect with better logging and patterns
- New secubox-net-reset utility for forcing re-detection
Changes:
- board/x64-live/netplan/00-secubox.yaml: Fixed bootstrap config
- image/build-live-usb.sh: Updated embedded netplan with same fix
- image/sbin/secubox-net-detect: Enhanced interface detection
- image/sbin/secubox-net-reset: New utility script
- CLAUDE.md: Added Debian shell scripting guidelines
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-05-01 06:44:08 +02:00
adc6baf57e
docs: Link reference files to session workflow in CLAUDE.md
...
- Reorganize Session Startup section with tables
- Add HISTORY.md, QUICKSHEET-REFERENCE.md, DESIGN-CHARTER.md, NOTES.md
- Add docs/TOOLS.md reference for build/generation tools
- Add workflow for "continue/suivant/next" commands
- Add GitHub Issues linking instructions
- Update repo structure with scripts/README.md and remote-ui/README.md
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-26 20:39:24 +02:00
bfed011054
docs(eye-remote): update CLAUDE.md with boot-media endpoints
2026-04-23 11:50:26 +02:00
aa41893d4b
feat: Complete Phase 8, 9, 10 - all modules done
...
Phase 8 (Applications): 21 modules complete
- jitsi, gotosocial, peertube, hexo, webradio, voip, simplex, torrent, newsbin
Phase 9 (System Tools): 22 modules complete
- Added READMEs for vault, cloner, vm, rtty, reporter, turn, smtp-relay
Phase 10 (Security Extensions): 10 modules complete
- Created secubox-netifyd package (DPI daemon)
- Added README for secubox-wazuh
Infrastructure fixes:
- Fixed uvicorn path in 29 service files (/usr/bin → /usr/local/bin)
- Fixed smtp-relay debian/control (Section: mail, added msmtp alternative)
- Added MODULE-COMPLIANCE.md with formal design rules
- Updated CLAUDE.md to reference compliance requirements
Total: 125 packages, all phases complete
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-04-08 14:46:58 +02:00
99072654a9
docs: Add security policies and patterns to CLAUDE.md
...
- WAF bypass prohibition (identical to OpenWrt)
- Double caching pattern with FastAPI asyncio example
- Punk Exposure Engine directive (Peek/Poke/Emancipate)
- Documentation update workflow
- CSPN/ANSSI security rules (double-buffer, audit log, privilege separation)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-28 06:52:26 +01:00
1868fa2d8c
feat(mail): Debian LXC containers for Postfix/Dovecot/Roundcube
...
Mail Server LXC (mailserverctl v2.1.0):
- Switch from Alpine to Debian bookworm via debootstrap
- Host networking (lxc.net.0.type = none)
- Postfix + Dovecot with virtual mailbox support
- User management via mailctl (add/list/remove)
- DKIM key generation
Roundcube Webmail LXC (roundcubectl v1.4.0):
- Debian bookworm with roundcube package
- SQLite backend, port 8027
- PHP-FPM 8.2 + nginx
- Three-fold commands (components, access)
Also includes:
- Three-fold architecture for 6 modules
- Maintainer update to Gerald KERMA
- Authentication fixes (JWT secret, redirect paths)
- 4 new modules (c3box, gitea, nextcloud, portal)
- WIP.md updated with session progress
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-22 10:40:00 +01:00
bf1babb37c
Initial commit: SecuBox-DEB migration from OpenWrt to Debian
...
Includes all package APIs with public dashboard endpoints:
- secubox-system: System Hub with /info, /resources, /security
- secubox-crowdsec: CrowdSec dashboard with /status, /hub, /metrics, actions
- secubox-wireguard: WireGuard VPN with /interfaces, /peers, start/stop
- secubox-netdata: Monitoring with /stats, /processes, /alerts
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-21 09:41:06 +01:00
