mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 18:36:55 +00:00
ff8ba36ff0
Some checks are pending
License Headers / check (push) Waiting to run
* docs(spec): secubox-proxypac WPAD/PAC mesh-service routing design (ref #784) * docs(plan): secubox-proxypac 11-task TDD implementation plan (ref #784) * feat(annuaire): optional byte-stable pac descriptor on ServiceOffer (ref #784) * feat(proxypac): PAC template + fail-open directive builder (ref #784) * feat(proxypac): rules.d parsing + precedence compose (ref #784) * feat(proxypac): p2p /services catalog reader → routing rules (ref #784) * feat(proxypac): generator + atomic fail-safe write + CLI (ref #784) * fix(proxypac): shadow file is <pac>.shadow not <base>.shadow (ref #784) * feat(proxypac): WebUI API override CRUD + candidates + audit (ref #784) * fix(proxypac): regen honors RULES_DIR + reject whitespace in override host (ref #784) * feat(proxypac): nginx PAC/WPAD serving (LAN-only) + seed rule (ref #784) * fix(proxypac): gate /proxy.pac to LAN/mesh (never public) (ref #784) * feat(proxypac): regen path+timer units + DHCP 252 WPAD advertise (ref #784) * feat(proxypac): WebUI override panel + menu entry (ref #784) * fix(proxypac): correct menu schema (name/category) + escape panel output (ref #784) * feat(proxypac): debian packaging (ref #784) * fix(proxypac): drop duplicate debian/compat + correct secubox user creation (ref #784) * docs(proxypac): README + deploy notes (ref #784) * fix(proxypac): apply final-review follow-ups (ref #784) - compose: overrides now last-file-wins per host, so an operator's later 50-webui.rules override beats a shipped 00-onion.rules seed for the same glob (explicit policy > defaults); cross-source override>service>toolbox unchanged. New test test_compose_override_last_file_wins. - packaging: declare Depends: secubox-hub — the /proxy.pac allow/deny gate matches $remote_addr, which behind HAProxy is 127.0.0.1 unless secubox-hub's real_ip (X-Forwarded-For) rewrite is loaded; without it the PAC would be world-readable. nginx/proxypac.conf comments the dependency; test asserts it in control. - README: document last-file-wins precedence + the real_ip/secubox-hub dependency. --------- Co-authored-by: CyberMind-FR <gandalf@Gk2.net> |
||
|---|---|---|
| .. | ||
| 2026-04-21-eye-remote-v2-implementation.md | ||
| 2026-04-23-eye-remote-bootstrap.md | ||
| 2026-04-24-eye-remote-touchscreen-controller.md | ||
| 2026-04-26-eye-remote-swiss-army.md | ||
| 2026-05-02-haproxy-webui-crud.md | ||
| 2026-05-03-mitmproxy-waf-migration.md | ||
| 2026-05-05-openwrt-to-debian-migration.md | ||
| 2026-05-10-meta-script-generator.md | ||
| 2026-05-11-secubox-apt-clone.md | ||
| 2026-05-12-apt-public-repo-staging.md | ||
| 2026-05-12-gitea-repair.md | ||
| 2026-05-12-license-headers.md | ||
| 2026-05-12-metablog-gitea-ingest.md | ||
| 2026-05-12-metablog-site-schema.md | ||
| 2026-05-12-metablog-version-dashboard.md | ||
| 2026-05-12-multi-agent-worktree-workflow.md | ||
| 2026-05-12-opad-doctrine-documents.md | ||
| 2026-05-12-ssl-health-banner.md | ||
| 2026-05-12-streamlit-gitea-version-pinning.md | ||
| 2026-05-12-visitor-origin-feed.md | ||
| 2026-05-12-webui-obfuscation.md | ||
| 2026-05-13-eye-square-phase1-common-extraction.md | ||
| 2026-05-13-eye-square-phase2-variant-build.md | ||
| 2026-05-13-eye-square-phase3-python-kiosk.md | ||
| 2026-05-13-metablog-deploy-webhook.md | ||
| 2026-05-13-secubox-users-auth.md | ||
| 2026-05-14-converged-dashboard.md | ||
| 2026-05-15-mail-phase1-lxc-consolidation.md | ||
| 2026-05-15-mail-phase2-rspamd.md | ||
| 2026-05-16-cookie-audit-pipeline.md | ||
| 2026-05-16-eye-remote-multi-gadget-dhcp.md | ||
| 2026-05-18-dropletctl.md | ||
| 2026-05-20-grafana-yacy-rustdesk-lxc-modules.md | ||
| 2026-05-22-sentinelle-gsm-v0.3-observation-pipeline.md | ||
| 2026-05-22-sentinelle-gsm-v0.3.1-l3-scoring-baseline.md | ||
| 2026-05-22-sentinelle-gsm-webui-local-alerts.md | ||
| 2026-05-22-streamlit-idle-timeout.md | ||
| 2026-05-26-build-scripts-refactor.md | ||
| 2026-05-26-secubox-modules-consolidation.md | ||
| 2026-05-27-secubox-consolidation-audit.md | ||
| 2026-06-17-anti-track-v2-core.md | ||
| 2026-06-17-anti-track-v2-plan2a-learning.md | ||
| 2026-06-17-anti-track-v2-plan2b-dns.md | ||
| 2026-06-17-anti-track-v2-plan2b-ip-drop.md | ||
| 2026-06-17-anti-track-v2-plan2c-bypass-seed.md | ||
| 2026-06-17-anti-track-v2-plan2d-social-top5.md | ||
| 2026-06-17-banner-stream-inject-csp-r3-fix.md | ||
| 2026-06-17-social-ip-literal-fix.md | ||
| 2026-06-17-toolbox-clients-reset-all-and-emojis.md | ||
| 2026-06-18-ad-intelligence.md | ||
| 2026-06-18-hub-dashboard-latency.md | ||
| 2026-06-18-mitm-engine-migration.md | ||
| 2026-06-18-toolbox-selective-sni-splice.md | ||
| 2026-06-26-cookies-crosssite-trackers.md | ||
| 2026-06-26-waf-go-sbxwaf.md | ||
| 2026-06-27-ads-aggregate-mitm-stats.md | ||
| 2026-06-27-nft-based-network-stats.md | ||
| 2026-06-27-sw-neuter-targeted-autolearn.md | ||
| 2026-06-27-sw-revalidation-nudge.md | ||
| 2026-06-29-gondwana-phase1-mesh-substrate.md | ||
| 2026-06-30-annuaire-service-offers-subscriptions.md | ||
| 2026-06-30-gondwana-p2p-clone-distribute-emancipate.md | ||
| 2026-06-30-p2p-annuaire-service-registry.md | ||
| 2026-07-01-macro-subsystem-tor-exit.md | ||
| 2026-07-02-p2p-dht-federation-masterlink.md | ||
| 2026-07-03-secubox-proxypac.md | ||