mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-29 09:14:33 +00:00

History

CyberMind-FR dc08a8c139 feat(profiles): boot reconciliation + watchdog exclusion for on-demand (ref #896 ) boot_should_start(m) is the pure boot policy (always-on/eager start immediately, on-demand/manual wait for a real wake) and watchdog_should_manage(m) documents/tests that no sleepable module is ever force-revived by secubox-watchdog. Investigation found: HEAD's secubox-watchdog has no auto-revive logic at all today (monitor_loop only logs up/down, restarts are manual-only); the unmerged feat/watchdog-auto-revive branch adds one gated purely on lxc.start.auto, which actuate.py::runtime_stop already clears before lxc-stop specifically to avoid this race — the same flag streamlit sleepers rely on for exclusion today. No separate exclusion file exists to reuse, so none was invented; once that branch merges it is already #896-safe with zero further wiring. The real, closeable gap was secubox-hub's own sidebar health-batch, which reported a sleeping on-demand module's inactive systemd unit as "warn". Added a profiles-side export (secubox-wakectl health-sync -> sleepable-modules.json, mirrors waf-sync/nginx-sync) and wired it into secubox-hub so a sleepable module shows "Asleep (on-demand)" instead of an alarm; a failed unit still alarms regardless. The full admin /health/ page reads module_prober.py/prober.py, which aren't sourced in this repo yet (TODO #393) -- documented as a precise cross-package follow-up. Co-Authored-By: Gerald KERMA <devel@cybermind.fr>		2026-07-20 16:51:56 +02:00
..
api	feat(profiles): boot reconciliation + watchdog exclusion for on-demand (ref #896 )	2026-07-20 16:51:56 +02:00
debian	release(webui): bump 127 arch:all packages for hybrid-dark reskin bake-in	2026-07-10 09:07:42 +02:00
menu.d
nftables.d	feat(hub): inet filter input policy-drop nft tap counter (ref #758 )	2026-06-27 11:04:27 +02:00
nginx	refactor: decommission secubox-authelia (SSO IdP) — remove package, keep gate authelia-free	2026-07-02 08:14:08 +02:00
sbin	feat(hub): netstats snapshot builder + privileged collector + root wrapper (ref #758 )	2026-06-27 11:16:38 +02:00
tests	feat(profiles): boot reconciliation + watchdog exclusion for on-demand (ref #896 )	2026-07-20 16:51:56 +02:00
www	fix(billets): communiqué always-light + CSP-safe health-banner opt-out on public blog (ref #851 )	2026-07-14 08:42:00 +02:00
README.md

README.md

🏠 SecuBox Hub

Central dashboard and control center

Category: Dashboard

Screenshot

Features

System overview
Service monitoring
Quick actions
Metrics

Installation

# Add SecuBox repository
curl -fsSL https://apt.secubox.in/install.sh | sudo bash

# Install package
sudo apt install secubox-hub

Configuration

Configuration file: /etc/secubox/hub.toml

API Endpoints

GET /api/v1/hub/status - Module status
GET /api/v1/hub/health - Health check