How k0k4/mundix360 works
Mundix Security 360 is an Ubuntu edge-firewall/UTM appliance managed through a React dashboard and FastAPI API. An operator authenticates, configures network and security controls, and monitors appliance status, alerts, and logs. The README also documents VPNs, content filtering, threat intelligence, SIEM ingestion and triage, backups, and an optional AI assistant. The map combines those documented capabilities with sampled routing, frontend, and service evidence; unsampled subsystem internals and their specific call wiring are not inferred.
Main entry points: main.py FastAPI app · pages Feature pages · ai.py AI API · triage.py SIEM triage
Components 23
Web dashboard
- Dashboard UI
dashboard/frontend/src/App.tsx - Feature pages
dashboard/frontend/src/pages - API client
dashboard/frontend/src/api.ts
API and identity
- FastAPI app
dashboard/backend/app/main.py - Authentication
dashboard/backend/app/routers/auth.py - User service
dashboard/backend/app/services/users.py - Network API
dashboard/backend/app/routers/network.py - Firewall API
dashboard/backend/app/routers/firewall.py
Network controls
- Network services
dashboard/backend/app/services/network.py - Firewall manager
dashboard/backend/app/services/fwmanage.py - VPN services
dashboard/backend/app/services/vpn - Content filtering
dashboard/backend/app/services/content.py
Security monitoring
- Threat API
dashboard/backend/app/routers/threatintel.py - Threat intelligence
dashboard/backend/app/services/threatintel.py - SIEM ingestion
scripts/security/siem-ingest.py - SIEM triage
scripts/security/triage.py
Operations and AI
- Backup and restore
dashboard/backend/app/services/backup.py - AI API
dashboard/backend/app/routers/ai.py - AI agent
dashboard/backend/app/services/ai/agent.py
Other components
- Operator
- ClickHouse
- OpenRouter
- Appliance services
Connections 26
- Operator → Dashboard UI: uses
- Dashboard UI → Feature pages: routes to
- Feature pages → API client: requests
- API client → FastAPI app: HTTP requests
- FastAPI app → Authentication: mounts
- FastAPI app → Network API: mounts
- FastAPI app → Firewall API: mounts
- FastAPI app → Threat API: mounts
- Authentication → User service: manages sessions
- FastAPI app → Appliance services: starts monitors
- Network API → Network services
- Firewall API → Firewall manager
- Threat API → Threat intelligence
- Network services → Appliance services: configures networking
- Firewall manager → Appliance services: applies nftables rules
- VPN services → Appliance services: manages VPNs
- Content filtering → Appliance services: configures filtering
- Threat intelligence → Appliance services: applies threat blocks
- SIEM ingestion → ClickHouse: ingests events
- SIEM triage → ClickHouse: triages events
- SIEM triage → Appliance services: blocks IPs
- FastAPI app → Backup and restore: mounts backup API
- Feature pages → AI API: chat requests
- FastAPI app → AI API: mounts
- AI API → AI agent
- AI agent → OpenRouter: sends optional AI requests