MODULES EN - CyberMind-FR/secubox-deb GitHub Wiki
SecuBox Modules
Complete module documentation
Total modules: 116
🇬🇧 English | 🇫🇷 Français | 🇩🇪 Deutsch | 🇨🇳 中文
Detailed wiki pages: SOC · NAC · Metrics · Certificates · Portal · SBX-OS · Aurora-Design · Auto-Load · First-Boot-Premier-Pas · Profils
Overview
| Modules | Category | Description |
|---|---|---|
| 🏠 SecuBox Hub | Dashboard | Central dashboard and control center |
| 🛡️ Security Operations Center | Dashboard | SOC with world clock, threat map, tickets |
| 📈 System Metrics | Dashboard | Real-time system metrics dashboard |
| ⚙️ Admin Panel | Dashboard | System administration panel |
| 🔥 Web Application Firewall | Security | WAF with 300+ OWASP security rules |
| 🔥 Vortex Firewall | Security | nftables-based threat enforcement firewall |
| 🔒 System Hardening | Security | Kernel and system hardening for ANSSI CSPN compliance |
| 🔍 sbxwaf | Security | Traffic inspection and WAF proxy with auto-ban |
| 🔐 Auth Guardian | Security | Unified authentication management |
| 🛡️ Network Access Control | Security | Client guardian and NAC with quarantine |
| 🚫 IP Block Manager | Security | IP and network blocking management |
| 🔐 MAC Guard | Security | MAC address access control |
| 📡 Traffic Interceptor | Security | Network traffic interception and analysis |
| 🍪 Cookie Manager | Security | Cookie and session security management |
| ⚠️ Threat Dashboard | Security | Unified threat visualization |
| 🔴 CVE Triage | Security | CVE vulnerability tracking and triage |
| 🛡️ Wazuh SIEM | Security | Wazuh SIEM integration |
| 🔌 IoT Guard | Security | IoT device security monitoring |
| 🌐 Network Modes | Network | Network topology configuration |
| 📊 QoS Manager | Network | Quality of Service with HTB/VLAN |
| 📈 Traffic Shaping | Network | TC/CAKE traffic shaping |
| ⚡ HAProxy | Network | Load balancer with TLS 1.3 |
| 🚀 CDN Cache | Network | Content delivery cache |
| 🏗️ Virtual Hosts | Network | Nginx virtual host management |
| 🛤️ Routing Manager | Network | Static and policy-based routing |
| 🔧 Network Tweaks | Network | Network kernel parameters tuning |
| 🔍 Network Diagnostics | Network | Network troubleshooting tools |
| 📉 Network Anomaly | Network | Network anomaly detection |
| 📶 Modem Manager | Network | 3G/4G/5G modem management |
| 🌍 DNS Server | DNS | BIND DNS zone management |
| 🛡️ Vortex DNS | DNS | DNS firewall with RPZ blocklists |
| 📡 Mesh DNS | DNS | Mesh network domain resolution |
| 🛡️ DNS Guard | DNS | DNS-based threat protection |
| 🌐 DNS Provider | DNS | External DNS provider integration |
| 🚫 AdGuard | DNS | AdGuard Home DNS blocking |
| 🔗 WireGuard VPN | VPN | Modern VPN with kernel integration |
| 🕸️ Mesh Network | VPN | Mesh networking (802.11s + Passpoint) |
| 🔗 P2P Network | VPN | Peer-to-peer networking |
| 🔗 MasterLink | VPN | SecuBox mesh federation |
| 🧅 Tor Network | Privacy | Tor anonymity and hidden services |
| 🌐 Exposure Settings | Privacy | Unified exposure management |
| 🔐 Zero-Knowledge Proofs | Privacy | ZKP Hamiltonian authentication |
| 💬 SimpleX Chat | Privacy | Privacy-focused messaging |
| 🔐 Secret Vault | Privacy | Secrets and credentials management |
| 🔬 nDPId | Monitoring | nDPI daemon for traffic analysis |
| 📱 Device Intelligence | Monitoring | Asset discovery and fingerprinting |
| 👁️ Watchdog | Monitoring | Service and container monitoring |
| 🎬 Media Flow | Monitoring | Media traffic analytics |
| 👀 Glances | Monitoring | System monitoring dashboard |
| 🔐 Login Portal | Access | Authentication portal with JWT |
| 👥 User Management | Access | Unified identity management |
| 🪪 Identity Provider | Access | SAML/OIDC identity provider |
| 🦊 Gitea | Services | Git server (LXC) |
| ☁️ Nextcloud | Services | File sync (LXC) |
| 🦙 Ollama | AI | Local LLM server |
| 🤖 LocalAI | AI | OpenAI-compatible local API |
| 🚪 AI Gateway | AI | AI model API gateway |
| 💡 AI Insights | AI | AI-powered security insights |
| 🧠 LocalRecall | AI | Local RAG memory system |
| 🔌 MCP Server | AI | Model Context Protocol server |
| 📧 Mail Server | Postfix/Dovecot mail server | |
| 💌 Webmail | Roundcube/SOGo webmail | |
| 📤 SMTP Relay | SMTP relay and smarthost | |
| 💬 Jabber/XMPP | XMPP messaging server | |
| 🎬 Jellyfin | Media | Media server |
| 🎵 Lyrion Music | Media | Music streaming server |
| 📻 Web Radio | Media | Internet radio streaming |
| 📸 PhotoPrism | Media | AI-powered photo management |
| 📺 PeerTube | Media | Federated video platform |
| 🌊 Torrent | Media | BitTorrent client |
| 📰 Newsbin | Media | Usenet/NNTP client |
| 📰 Publishing Platform | Publishing | Unified publishing dashboard |
| 💧 Droplet | Publishing | File upload and publish |
| 📝 Metablogizer | Publishing | Static site publisher with Tor |
| ✏️ Hexo Blog | Publishing | Static blog generator |
| 🐘 GoToSocial | Publishing | ActivityPub social server |
| 📡 CyberFeed | Publishing | RSS/Atom feed aggregator |
| 🎨 Streamlit | Apps | Streamlit app platform |
| ⚡ StreamForge | Apps | Streamlit app development |
| 📦 APT Repository | Apps | APT repository management |
| 🏠 Domoticz | IoT | Home automation |
| 🏡 Home Assistant | IoT | Home automation hub |
| 📡 Zigbee Gateway | IoT | Zigbee2MQTT gateway |
| 📡 MQTT Broker | IoT | Mosquitto MQTT broker |
| 💬 Matrix Server | Communication | Matrix/Synapse chat server |
| 📹 Jitsi Meet | Communication | Video conferencing |
| 📞 VoIP Server | Communication | Asterisk/FreePBX VoIP |
| 🔄 TURN Server | Communication | TURN/STUN relay server |
| ⚙️ System Hub | System | System configuration and management |
| 💾 Backup Manager | System | System and LXC backup |
| 📋 Config Advisor | System | Configuration recommendations |
| 📊 Reporter | System | System reporting and analytics |
| 🪞 Mirror Manager | System | APT mirror management |
| 📀 System Cloner | System | System image cloning |
| 👁️ Eye Remote | System | Remote management interface |
| 🖥️ RTTY Console | System | Remote terminal access |
| 🧑 Avatar Manager | Apps | Identity and avatar manager |
| 📜 Certificate Manager | Security | ACME / TLS certificate manager |
| 📊 Grafana | Monitoring | Security metrics dashboards |
| ❤️ Hub Health | Dashboard | Service health and status board |
| 🧠 KSM Optimizer | System | Kernel same-page memory optimization dashboard |
| 🧪 Metabolizer | Monitoring | Log processor and analyzer |
| 🗄️ Metoblizer | Monitoring | Centralized log aggregator |
| 📇 Metacatalog | Services | Service catalog and registry |
| 🍺 PicoBrew | IoT | Homebrew / fermentation controller |
| 🎙️ Podcaster | Media | Modern podcast manager |
| 🗣️ VoiceStudio | Media | Studio voice engine (text-to-speech, dictation) in a native LXC |
| 🤖 ReDroid | Apps | Android-in-container runtime |
| 🔌 SaaS Relay | Network | SaaS / API proxy relay |
| 🎯 Security Posture | Security | Honest board-truthful security scorecard |
| 📡 SENTINELLE-GSM | Security | Passive rogue-BTS sensor (MIND layer) |
| 🧰 ToolBoX (Cabine) | Security | Captive AP + consented MITM privacy analyzer |
| 💻 VM Manager | System | Virtualization management |
| 🔎 YaCy | Network | Peer-to-peer search engine |
| 🥾 Network Boot | System | HTTP/TFTP netboot provisioning + signed-FIT installer (Tow-Boot) |
Modules
AI
🦙 Ollama
Local LLM server
Features: Model management, API, Chat, GPU support
🤖 LocalAI
OpenAI-compatible local API
Features: OpenAI API, Multiple models, Embeddings, Image generation
🚪 AI Gateway
AI model API gateway
Features: Rate limiting, Load balancing, Caching, Logging
💡 AI Insights
AI-powered security insights
Features: Anomaly detection, Recommendations, Predictions, Reports
🧠 LocalRecall
Local RAG memory system
Features: Vector storage, Semantic search, Document indexing, API
🔌 MCP Server
Model Context Protocol server
Features: Tool integration, Context management, Multi-model, API
Access
🔐 Login Portal
Authentication portal with JWT, and a read-only overview at /portal/ (see Portal)
Features: JWT auth, Sessions, Password recovery, Captive portal, Overview (health, online services, sessions, 24 h connections, bans, certificates, most visited sites, recent events)
👥 User Management
Unified identity management
Features: User CRUD, Groups, Service provisioning, RBAC
🪪 Identity Provider
SAML/OIDC identity provider
Features: SAML 2.0, OpenID Connect, Federation, SSO
Apps
🎨 Streamlit
Streamlit app platform
Features: App hosting, Deployment, Management, Logs
⚡ StreamForge
Streamlit app development
Features: Templates, Code editor, Preview, Deploy
📦 APT Repository
APT repository management
Features: Package management, GPG signing, Multi-distro, Uploads
🧑 Avatar Manager
Identity and avatar manager
Features: Identity profiles, Avatar generation, Per-user assets
🤖 ReDroid
Android-in-container runtime
Features: Android container, ADB, App install, Screen view
Communication
💬 Matrix Server
Matrix/Synapse chat server
Features: E2E encryption, Federation, Bridges, Calls
📹 Jitsi Meet
Video conferencing
Features: Video calls, Screen share, Recording, Lobby
📞 VoIP Server
Asterisk/FreePBX VoIP
Features: Extensions, Trunks, IVR, Voicemail
🔄 TURN Server
TURN/STUN relay server
Features: NAT traversal, WebRTC, TLS, Statistics
DNS
🌍 DNS Server
BIND DNS zone management
Features: Zone management, Records, DNSSEC, Reverse DNS
🛡️ Vortex DNS
DNS firewall with RPZ blocklists
Features: Blocklists, RPZ, Threat feeds, DoH/DoT
📡 Mesh DNS
Mesh network domain resolution
Features: mDNS/Avahi, Local DNS, Service discovery, Mesh integration
🛡️ DNS Guard
DNS anomaly detection and sinkhole (Aurora admin page)
Features: Suspicious domains ranking, Breakdown by type, Most blocked domains, Affected clients, Domain check, Sinkhole lists (allow, sync, enable/disable, sources, whitelist, IP allowlist)
🌐 DNS Provider
External DNS provider integration
Features: Cloudflare, Route53, DigitalOcean, Dynamic DNS
🚫 AdGuard
AdGuard Home DNS blocking
Features: Ad blocking, Tracking protection, Parental control, Statistics
Dashboard
🏠 SecuBox Hub
Central dashboard and control center
Features: System overview, Service monitoring, Quick actions, Metrics
🛡️ Security Operations Center
Security Operations Center: one place that gathers the views scattered across the box (see SOC)
Features: Guardian (default), live network (throughput per interface over 24 h, packets dropped by the firewall), firewall (threats, attackers, campaigns, surfaces, visits, history), traffic (DPI), intelligence (Actor Intelligence), watch, meta-metrics, alert center, fleet views
📈 System Metrics
Real-time system metrics, visit statistics and health (see Metrics)
Features: CPU/Memory, Network stats, Disk I/O, Visits, Aurora-style PDF attendance report, visitor-origin world maps, global health (the WAF state follows sbxwaf)
⚙️ Admin Panel
System administration panel
Features: User management, System config, Logs, Diagnostics
❤️ Hub Health
Service health and status board
Features: Service health, Socket checks, Uptime, Degradation alerts
📧 Mail Server
Postfix/Dovecot mail server
Features: Domains, Mailboxes, DKIM, SpamAssassin, ClamAV
💌 Webmail
Roundcube/SOGo webmail
Features: Web interface, Address book, Calendar, Mobile
📤 SMTP Relay
SMTP relay and smarthost
Features: Relay, Authentication, Rate limiting, Logging
💬 Jabber/XMPP
XMPP messaging server
Features: Chat, Groups, File transfer, Federation
IoT
🏠 Domoticz
Home automation
Features: Devices, Scenes, Scripts, History
🏡 Home Assistant
Home automation hub
Features: Integrations, Automations, Dashboard, Voice
📡 Zigbee Gateway
Zigbee2MQTT gateway
Features: Device pairing, MQTT, Groups, OTA updates
📡 MQTT Broker
Mosquitto MQTT broker
Features: Topics, ACL, TLS, WebSocket
🍺 PicoBrew
Homebrew / fermentation controller
Features: Temperature control, Recipes, Fermentation log, Sensors
Media
🎬 Jellyfin
Media server
Features: Video streaming, Live TV, Transcoding, Mobile apps
🗣️ VoiceStudio
Studio voice engine in a native LXC (no podman, no docker): text-to-speech and dictation, with an administration panel and a user page
Features: Pinned upstream source (commit + sha256), permanent or on-demand mode, key rotation, published on LAN/mesh only, backup, voice test
🎵 Lyrion Music
Music streaming server
Features: Music library, Playlists, Radio, Multi-room
📻 Web Radio
Internet radio streaming
Features: Radio stations, Recording, Schedule, Favorites
📸 PhotoPrism
AI-powered photo management
Features: Face recognition, Auto-tagging, Search, Albums
📺 PeerTube
Federated video platform
Features: Video hosting, Federation, Live streaming, Comments
🌊 Torrent
BitTorrent client
Features: Downloads, RSS, Remote control, Bandwidth limits
📰 Newsbin
Usenet/NNTP client
Features: NZB downloads, Auto-processing, Search, Categories
🎙️ Podcaster
Modern podcast manager
Features: Feed management, Episodes, Transcoding, RSS publish
Monitoring
🔬 Deep Packet Inspection
DPI analytics: nDPId/sbxdpi application and protocol classification; also carries the nDPId and Media Flow pages (aggregated, no dedicated daemon)
Features: Protocol detection, App identification, Flow analysis, Statistics
🔬 nDPId
nDPI engine view, part of secubox-dpi (aggregated: served by the aggregator, no dedicated daemon)
Features: Tabs Flows, Protocols, Fingerprints (JA4), Risks, Settings; noisy nDPI risks are filtered out
📱 Device Intelligence
Asset discovery and fingerprinting
Features: ARP scanning, MAC vendor lookup, OS detection, Services
👁️ Watchdog
Service and container monitoring
Features: Health checks, Auto-restart, Alerts, Logs
🎬 Media Flow
Media traffic analytics, part of secubox-dpi (aggregated: no dedicated daemon)
Features: Stream detection, Bandwidth usage, Protocol analysis, QoE
👀 Glances
System monitoring dashboard
Features: CPU/Memory, Disk/Network, Docker, Web UI
📊 Grafana
Security metrics dashboards
Features: Time-series dashboards, Alerting, Data sources, Panels
🧪 Metabolizer
Log processor and analyzer
Features: Log parsing, Pattern analysis, Pipelines, Enrichment
🗄️ Metoblizer
Centralized log aggregator
Features: Log collection, Central store, Search, Retention
Network
🌐 Network Modes
Network topology configuration
Features: Router mode, Bridge mode, AP mode, VLAN
📊 QoS Manager
Quality of Service with HTB/VLAN
Features: Bandwidth control, VLAN policies, 802.1p PCP, Per-user limits
📈 Traffic Shaping
TC/CAKE traffic shaping
Features: Per-interface QoS, CAKE algorithm, Statistics, Real-time graphs
⚡ HAProxy
Load balancer with TLS 1.3
Features: Backend management, Stats, ACLs, SSL termination, Health checks
🚀 CDN Cache
Content delivery cache
Features: Cache management, Purge, Statistics, Edge rules
🏗️ Virtual Hosts
Nginx virtual host management
Features: Site management, SSL certificates, Reverse proxy, Let's Encrypt
🛤️ Routing Manager
Static and policy-based routing
Features: Static routes, Policy routing, Multi-WAN, Failover
🔧 Network Tweaks
Network kernel parameters tuning
Features: TCP tuning, Buffer sizes, Congestion control, Profiles
🔍 Network Diagnostics
Network troubleshooting tools
Features: Ping/Traceroute, DNS lookup, Port scan, Speed test
📉 Network Anomaly
Network anomaly detection, shipped with secubox-dns-guard
Features: Collector run every minute, 24 h histogram, Ranking by score, Traffic baselines, Acknowledgement
📶 Modem Manager
3G/4G/5G modem management
Features: Connection status, Signal strength, SMS, Failover
🔌 SaaS Relay
SaaS / API proxy relay
Features: API proxy, Rate limiting, Routing, Credentials vault
🔎 YaCy
Peer-to-peer search engine
Features: P2P index, Crawler, Private search, Federation
Privacy
🧅 Tor Network
Tor anonymity and hidden services
Features: Circuits, Hidden services, Bridges, Transparent proxy
🌐 Exposure Settings
Unified exposure management
Features: Tor exposure, SSL certs, DNS records, Mesh access
🔐 Zero-Knowledge Proofs
ZKP Hamiltonian authentication
Features: Proof generation, Verification, Key management, MirrorNet
💬 SimpleX Chat
Privacy-focused messaging
Features: E2E encryption, No user IDs, Self-hosted, Groups
🔐 Secret Vault
Secrets and credentials management
Features: Encrypted storage, Access control, Rotation, Audit
Publishing
📰 Publishing Platform
Unified publishing dashboard
Features: Multi-platform, Scheduling, Analytics, Templates
💧 Droplet
File upload and publish
Features: File upload, Share links, Expiration, Password protection
📝 Metablogizer
Static site publisher with Tor
Features: Static sites, Tor publishing, Templates, Markdown
✏️ Hexo Blog
Static blog generator
Features: Markdown, Themes, Plugins, Deploy
🐘 GoToSocial
ActivityPub social server
Features: Mastodon compatible, Federation, Media, Privacy
📡 CyberFeed
RSS/Atom feed aggregator
Features: Feed management, Categories, Search, Export
Security
🔥 Web Application Firewall
WAF with 300+ OWASP security rules
Features: OWASP rules, Custom rules, Request logging
🔥 Vortex Firewall
nftables-based threat enforcement firewall
Features: IP blocklists, nftables sets, Threat feeds, Geo-blocking
🔒 System Hardening
Kernel and system hardening for ANSSI CSPN compliance
Features: Sysctl hardening, Module blacklist, Security score, AppArmor
🔍 sbxwaf
Traffic inspection and WAF proxy with auto-ban
Features: Traffic inspection, Request logging, Auto-ban, SSL interception
🔐 Auth Guardian
Unified authentication management
Features: OAuth2, LDAP, 2FA/TOTP, Session management
🛡️ Network Access Control
Client guardian and NAC with quarantine (see NAC)
Features: Device cards with search, filters and sort, OS and zone breakdown, New devices 24 h, Quarantine and release with confirmation, Automatic isolation of a LAN device from Actor Intelligence, History
🚫 IP Block Manager
IP and network blocking management
Features: IP blocklists, Network ranges, Temporary bans, Import/Export
🔐 MAC Guard
MAC address access control
Features: MAC whitelist/blacklist, Auto-discovery, Alerts, VLAN binding
📡 Traffic Interceptor
Network traffic interception and analysis
Features: Packet capture, Protocol analysis, Session tracking, Forensics
🍪 Cookie Manager
Cookie and session security management
Features: Cookie policies, Session security, SameSite enforcement, Audit
⚠️ Threat Dashboard
Unified threat visualization (read-only)
Features: Alerts 24 h, Active IOCs, Open incidents, Sources, Risk score gauge and ranking, Severity timeline, Intelligence feeds, Reports
🔴 CVE Triage
CVE vulnerability tracking and triage
Features: CVE database, Affected packages, Risk scoring, Remediation
🛡️ Wazuh SIEM
Wazuh SIEM integration
Features: Log analysis, File integrity, Vulnerability detection, Compliance
🔌 IoT Guard
IoT device security monitoring
Features: Device fingerprinting, Anomaly detection, Isolation, Firmware checks
📜 Certificate Manager
ACME / TLS certificate manager (see Certificates)
Features: ACME issuance, Renewal, SAN / wildcard, Inventory, Unreadable certificates shown as unknown rather than expired
🎯 Security Posture
Honest board-truthful security scorecard
Features: Scorecard, Control checks, Gaps, Trend
📡 SENTINELLE-GSM
Passive rogue-BTS sensor (MIND layer)
Features: IMSI-catcher detection, Cell survey, Anomaly alerts, Passive RF
🕸️ ThreatMesh
Sovereign threat-intel mesh
Features: P2P intel sharing, Sovereign feed, Confidence gating, Blocklist sync
🧰 ToolBoX (Cabine)
Captive AP + consented MITM privacy analyzer
Features: Captive portal, R0-R4 levels, Tracker exposure, Tor egress
Services
🦊 Gitea
Git server (LXC)
Features: Repositories, Users, SSH/HTTP, LFS, Actions
☁️ Nextcloud
File sync (LXC)
Features: File sync, WebDAV, CalDAV, CardDAV, Talk
📇 Metacatalog
Service catalog and registry
Features: Service registry, Discovery, Metadata, Catalog UI
System
⚙️ System Hub
System configuration and management
Features: Settings, Logs, Services, Updates
💾 Backup Manager
System and LXC backup
Features: Config backup, LXC snapshots, Restore, Scheduling
📋 Config Advisor
Configuration recommendations
Features: Security audit, Best practices, Optimization, Reports
📊 Reporter
System reporting and analytics
Features: Reports, Scheduling, Export, Email
🪞 Mirror Manager
APT mirror management
Features: Mirror sync, Bandwidth, Scheduling, Cache
📀 System Cloner
System image cloning
Features: Disk imaging, Clone to USB, Restore, Compression
👁️ Eye Remote
Remote management interface
Features: USB gadget, Serial console, Boot media, Recovery
🖥️ RTTY Console
Remote terminal access
Features: Web terminal, SSH, File transfer, Recording
🧠 KSM Optimizer
Kernel same-page memory optimization dashboard
Features: Page sharing stats, Memory saved, Tuning, Per-VM view
💻 VM Manager
Virtualization management
Features: VM lifecycle, Console, Snapshots, Resource limits
VPN
🔗 WireGuard VPN
Modern VPN with kernel integration
Features: Peer management, QR codes, Traffic stats, Multi-tunnel
🕸️ Mesh Network
Mesh networking (802.11s + Passpoint)
Features: Peer discovery, Routing, Encryption, IPv6 overlay
🔗 P2P Network
Peer-to-peer networking
Features: Direct connections, NAT traversal, Encryption, DHT
🔗 MasterLink
SecuBox mesh federation
Features: Box discovery, Federation, Shared policies, Sync
