Package: ax10-debloat
Version: 1.0-1
Architecture: all
Maintainer: Lee Chantrey <lchantrey@gmail.com>
Section: admin
Priority: optional
Depends:
Description: Harden the TP-Link Archer AX10 by stopping its cloud / phone-home / remote-management junk. Tiered and idempotent: tier 1 = cloud + TR-069/CWMP + telnet + tdpServer (the CVE-2023-1389 surface) + tmpServer + conn-indicator; tier 2 (recommended) adds miniupnpd (UPnP) + pptpd; tier 3 adds client_mgmt (Fing device fingerprinting) + appflow analytics. Never touches network/wireless/dnsmasq/firewall/nat, the Broadcom wifi daemons (acsd2/eapd/apsd/nrd), the mesh stack, or uhttpd :80/:443 (the web GUI whose admin password boot.sh mirrors to root). Everything on this box is ramfs so the firmware relaunches these each boot - re-run after a reboot, or add ax10-debloat to boot.sh's PKGS to automate.
