secubox-deb/packages/secubox-nextcloud
CyberMind 024f6f01e8
feat(secubox-authelia): split SSO portal from operator dashboard (closes #310) (#311)
User asked for control + status metrics at /auth/ instead of an
iframe-redirect, plus a public portal vhost sso.gk2.secubox.in for
multi-SP single-sign-on across SecuBox apps.

* secubox-authelia v1.0.9
  - nginx/authelia.conf: /auth/ on the canonical hub vhost becomes a
    static alias to /usr/share/secubox/www/authelia/ (operator
    dashboard). Used to reverse-proxy the Authelia LXC portal.
  - nginx/authelia.conf: @sbx_auth_login redirects to
    https://sso.gk2.secubox.in/?rd=… (the new public portal vhost).
  - nginx/authelia-vhost.conf: new server block sso.gk2.secubox.in,
    reverse-proxying / → /auth/ → Authelia LXC 10.100.0.20:9091.
    Wildcard *.gk2.secubox.in.pem cert already covers it.
  - www/authelia/index.html: rewrite as the SecuBox AUTH config
    module (Charter AUTH palette #C04E24). Surfaces service state,
    version, user count, cookie scopes, access rules. Was a
    Lyrion-template copy-paste stub.
  - lib/authelia/install-lxc.sh: session.cookies[] for the hub
    domain now sets authelia_url to sso.${SECUBOX_HUB_DOMAIN}.

* secubox-nextcloud v1.3.3, secubox-zigbee v2.5.4, secubox-lyrion v1.0.9
  - Their @sbx_auth_login redirects now target
    https://sso.gk2.secubox.in/?rd=… for login.

Deploy-side follow-up (operator):
- DNS sso.gk2.secubox.in → board public IP
- mitmproxy routes JSON: add sso.gk2.secubox.in → [192.168.1.200, 9080]
- haproxyctl vhost add sso.gk2.secubox.in mitmproxy_inspector
  (+ workaround for #286 — re-append the backends)
- ln -s ../sites-available/authelia.conf /etc/nginx/sites-enabled/
- Re-apply install-lxc.sh OR sed-patch the live /etc/authelia/configuration.yml
  inside the LXC to repoint authelia_url.

Co-authored-by: CyberMind-FR <gandalf@Gk2.net>
2026-05-21 10:50:13 +02:00
..
api feat: three-fold architecture for streamlit, haproxy, metablogizer 2026-03-22 07:28:33 +01:00
conf feat(secubox-nextcloud): v1.3.2 — ship nextcloud.toml.example (closes #284) (#285) 2026-05-21 07:47:21 +02:00
debian feat(secubox-authelia): split SSO portal from operator dashboard (closes #310) (#311) 2026-05-21 10:50:13 +02:00
menu.d feat(navbar): consolidate to 6 charter categories + fix dropped menu entries (closes #306) (#307) 2026-05-21 10:03:05 +02:00
nginx feat(secubox-authelia): split SSO portal from operator dashboard (closes #310) (#311) 2026-05-21 10:50:13 +02:00
sbin feat(secubox-nextcloud): v1.3.0 — reverse-proxy + SSO gating + move to 10.100.0.21 (closes #280) (#281) 2026-05-21 07:25:37 +02:00
www/nextcloud Fix body class and menu duplicates across all modules 2026-03-26 07:11:59 +01:00
README.md docs: Add Eye Remote Multigadget skill and wiki 2026-05-10 09:12:42 +02:00

☁️ Nextcloud

File sync (LXC)

Category: Services

Screenshot

Nextcloud

Features

  • File sync
  • WebDAV
  • CalDAV
  • CardDAV
  • Talk

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-nextcloud

Configuration

Configuration file: /etc/secubox/nextcloud.toml

API Endpoints

  • GET /api/v1/nextcloud/status - Module status
  • GET /api/v1/nextcloud/health - Health check

License

MIT License - CyberMind © 2024-2026