PAGE 1 — POSTER RECTO
⚙️ System Architecture
Official Source + Local Overlay + Management CTL
SOURCE
📦
Official OpenWrt Packages
Upstream feeds · opkg repositories · Signed manifests · Kernel modules
⬇ embed & verify signature
OVERLAY
⬇ merge overlay → effective config
CTL
🎛️
secubox-ctl
CLI management · Module lifecycle · Status · Sync overlay · Update · Rollback · Diagnostics
⬇ apply · restart · validate
RUNTIME
🔥
Active Services Stack
CrowdSec · WAF MITM · Vortex DNS · nftables · WireGuard Mesh · Netdata · Suricata
⬇ telemetry · alerts · health
OUTPUT
✅
Protected Network + Mesh Intel
Clean traffic · Shared threat intelligence · P2P alerts · Monitoring dashboards · Logs
🔄 Deployment Workflow
FETCH
Pull official pkgs
verify signatures
verify signatures
→
OVERLAY
Merge local
configs & patches
configs & patches
→
CTL
secubox-ctl
enable · sync
enable · sync
→
ACTIVATE
Services start
rules applied
rules applied
→
MESH
Join network
share intel P2P
share intel P2P
❯
secubox-ctl
status
# 📊 show all modules
❯
secubox-ctl
enable crowdsec waf vortex-dns
# 🟢 activate modules
❯
secubox-ctl
sync --overlay /etc/secubox/overlay.d/
# 🔄 merge configs
❯
secubox-ctl
update --verify-sig
# 📦 update + check hash
❯
secubox-ctl
rollback v0.17
# ⏪ safe rollback
❯
secubox-ctl
diag --full
# 🩺 health check
❯
OVERLAY ACTIVE
UPSTREAM SYNCED
35 MODULES
PAGE 2 — DOSSIER VERSO