OpenWrt without "LAN" interface

I'm using tv box which has only single port, so i dont use lan interface.
im using it only for downloading using aria2+ariang, with samba4 for file management, perhaps jellyfin under docker in the future for playing media files.
what packages i can safely remove while keeping these functionality available ?

Currently i connect the tv box to main router using wireless (usb adapter) which isn't stable, i was thinking about connect it via ethernet.

we can't really tell, it's a black box, since you've managed to install it on an unsupported platform.

obviously everything related to wireless can be removed, if you've switch over to wire.

Perhaps packages related "lan functionality", but i dont know what are those packages.

neither can we, since we don't know what's installed, do we?
you need to provide us with a list ...

~# opkg list-installed | awk -F " " '{print $1}'
aria2
ariang
attr
avahi-dbus-daemon
base-files
bash
bc
bind-host
bind-libs
blkid
block-mount
blockd
brcmfmac-firmware-usb
bsdtar
btrfs-progs
busybox
bzip2
ca-bundle
ca-certificates
cgi-io
chat
chattr
comgt
comgt-directip
comgt-ncm
containerd
coremark
coreutils
coreutils-base64
coreutils-nohup
coreutils-stdbuf
coreutils-truncate
curl
dbus
dmesg
dnsmasq-full
docker
docker-compose
dockerd
dosfstools
dropbear
dumpe2fs
e2freefrag
e2fsprogs
exfat-fsck
exfat-mkfs
f2fs-tools
f2fsck
fdisk
findutils
findutils-find
findutils-locate
findutils-xargs
firewall4
fstools
fwtool
gawk
gdisk
getopt
getrandom
git
git-http
grep
gzip
hostapd
hostapd-common
htop
httping
hwinfo
iconv
ip-full
ip6tables-zz-legacy
ipip
iptables-mod-extra
iptables-zz-legacy
iw-full
iwinfo
jansson4
jq
jshn
jsonfilter
kernel
kmod-bonding
kmod-br-netfilter
kmod-brcmfmac
kmod-brcmutil
kmod-cdrom
kmod-cfg80211
kmod-crypto-acompress
kmod-crypto-aead
kmod-crypto-ccm
kmod-crypto-cmac
kmod-crypto-crc32c
kmod-crypto-ctr
kmod-crypto-gcm
kmod-crypto-gf128
kmod-crypto-ghash
kmod-crypto-hash
kmod-crypto-hmac
kmod-crypto-manager
kmod-crypto-null
kmod-crypto-rng
kmod-crypto-seqiv
kmod-crypto-sha256
kmod-fs-autofs4
kmod-fs-btrfs
kmod-fs-exfat
kmod-fs-ext4
kmod-fs-ntfs
kmod-fs-udf
kmod-fs-vfat
kmod-fuse
kmod-ip6tables
kmod-ipip
kmod-ipt-conntrack
kmod-ipt-core
kmod-ipt-extra
kmod-ipt-ipset
kmod-ipt-nat
kmod-ipt-nat6
kmod-ipt-physdev
kmod-iptunnel
kmod-iptunnel4
kmod-lib-crc-ccitt
kmod-lib-crc-itu-t
kmod-lib-crc16
kmod-lib-crc32c
kmod-lib-lzo
kmod-lib-raid6
kmod-lib-xor
kmod-lib-zlib-deflate
kmod-lib-zlib-inflate
kmod-lib-zstd
kmod-lib80211
kmod-libphy
kmod-mac80211
kmod-mii
kmod-mmc
kmod-mt7601u
kmod-nf-conntrack
kmod-nf-conntrack-netlink
kmod-nf-conntrack6
kmod-nf-flow
kmod-nf-ipt
kmod-nf-ipt6
kmod-nf-ipvs
kmod-nf-log
kmod-nf-log6
kmod-nf-nat
kmod-nf-nat6
kmod-nf-reject
kmod-nf-reject6
kmod-nfnetlink
kmod-nft-core
kmod-nft-fib
kmod-nft-nat
kmod-nft-offload
kmod-nls-base
kmod-nls-cp437
kmod-nls-iso8859-1
kmod-nls-utf8
kmod-phy-ax88796b
kmod-ppp
kmod-pppoe
kmod-pppox
kmod-rtl8xxxu
kmod-scsi-core
kmod-sdhci
kmod-slhc
kmod-tun
kmod-usb-acm
kmod-usb-core
kmod-usb-ehci
kmod-usb-net
kmod-usb-net-asix
kmod-usb-net-cdc-eem
kmod-usb-net-cdc-ether
kmod-usb-net-cdc-mbim
kmod-usb-net-cdc-ncm
kmod-usb-net-cdc-subset
kmod-usb-net-hso
kmod-usb-net-huawei-cdc-ncm
kmod-usb-net-qmi-wwan
kmod-usb-net-rndis
kmod-usb-net-rtl8150
kmod-usb-net-rtl8152
kmod-usb-net-sierrawireless
kmod-usb-ohci
kmod-usb-serial
kmod-usb-serial-option
kmod-usb-serial-qualcomm
kmod-usb-serial-sierrawireless
kmod-usb-serial-wwan
kmod-usb-storage
kmod-usb-storage-extras
kmod-usb-storage-uas
kmod-usb-uhci
kmod-usb-wdm
kmod-usb-xhci-hcd
kmod-usb2
kmod-usb3
kmod-veth
libapr
libaprutil
libarchive
libatomic1
libattr
libavahi-client
libavahi-dbus-support
libblkid1
libblobmsg-json20220515
libbpf20220308
libbz2-1.0
libc
libcap
libcharset1
libcomerr0
libcurl4
libdaemon
libdbus
libelf1
libevdev
libevent2-core7
libexpat
libext2fs2
libf2fs6
libfdisk1
libgcc1
libgmp10
libgnutls
libiconv-full2
libip4tc2
libip6tc2
libiptext0
libiptext6-0
libiwinfo-data
libiwinfo-lua
libiwinfo20210430
libjson-c5
libjson-script20220515
libltdl7
liblua5.1.5
liblucihttp-lua
liblucihttp0
liblzma
liblzo2
libmagic
libmbedtls12
libmnl0
libmount1
libncurses6
libnetfilter-conntrack3
libnettle8
libnetwork
libnfnetlink0
libnftnl11
libnghttp2-14
libnl-tiny1
libopenssl-conf
libopenssl1.1
libpam
libparted
libpcap1
libpcre
libpopt0
libpthread
libreadline8
librt
libseccomp
libsmartcols1
libsqlite3-0
libss2
libstdcpp6
libsysfs2
libtasn1
libtirpc
libubox20220515
libubus-lua
libubus20220601
libuci20130104
libuclient20201210
libucode20220812
libudev-zero
liburing
libusb-1.0-0
libusb-compat4
libustream-wolfssl20201210
libuuid1
libuv1
libwebsockets-full
libwolfssl5.4.0.ee39414e
libxml2
libxtables12
libzip-openssl
logd
losetup
lsattr
lsblk
lscpu
lsof
lua
luci
luci-app-advancedsetting
luci-app-argon-config
luci-app-aria2
luci-app-commands
luci-app-dockerman
luci-app-firewall
luci-app-opkg
luci-app-samba4
luci-base
luci-compat
luci-lib-base
luci-lib-docker
luci-lib-ip
luci-lib-ipkg
luci-lib-jsonc
luci-lib-nixio
luci-mod-admin-full
luci-mod-network
luci-mod-status
luci-mod-system
luci-proto-3g
luci-proto-bonding
luci-proto-ipip
luci-proto-ipv6
luci-proto-ncm
luci-proto-openconnect
luci-proto-ppp
luci-proto-qmi
luci-proto-relay
luci-theme-argon-master
luci-theme-bootstrap
luci-theme-material
luci-theme-tano
mkf2fs
mmc-utils
mount-utils
mt7601u-firmware
mtd
nano
netifd
nftables-json
openconnect
openssh-client
openssl-util
openvpn-openssl
openwrt-keyring
opkg
parted
perl
perl-http-date
perlbase-base
perlbase-bytes
perlbase-charnames
perlbase-class
perlbase-config
perlbase-cwd
perlbase-dynaloader
perlbase-errno
perlbase-essential
perlbase-fcntl
perlbase-file
perlbase-filehandle
perlbase-getopt
perlbase-i18n
perlbase-integer
perlbase-io
perlbase-list
perlbase-locale
perlbase-params
perlbase-posix
perlbase-re
perlbase-scalar
perlbase-selectsaver
perlbase-socket
perlbase-symbol
perlbase-tie
perlbase-time
perlbase-unicode
perlbase-unicore
perlbase-utf8
perlbase-xsloader
ppp
ppp-mod-pppoe
procd
procd-seccomp
procd-ujail
proto-bonding
pv
r8152-firmware
redsocks
relayd
rename
resize2fs
resolveip
rpcd
rpcd-mod-file
rpcd-mod-iwinfo
rpcd-mod-luci
rpcd-mod-rrdns
runc
samba4-libs
samba4-server
screen
sshpass
stunnel
subversion-client
subversion-libs
sysfsutils
tar
terminfo
tini
ttyd
tune2fs
ubox
ubus
ubusd
uci
uclient-fetch
ucode
ucode-mod-fs
ucode-mod-ubus
ucode-mod-uci
uhttpd
uhttpd-mod-ubus
umbim
unixodbc
unzip
uqmi
urandom-seed
urngd
usb-modeswitch
usbutils
usign
uuidgen
vlmcsd
vpnc-scripts
wget-ssl
whereis
which
wireless-regdb
wireless-tools
wpa-cli
wpa-supplicant
wwan
xfs-fsck
xfs-mkfs
xtables-legacy
xz
xz-utils
ziptool
zlib
zoneinfo-asia
zoneinfo-core

still insufficient info provided to provide a sane reply, and there might be dependencies I'm unaware of.

off the top of my head

any Broadcom HW involved ?
brcmfmac-firmware-usb
kmod-brcmfmac
kmod-brcmutil

Realtek NIC ?
kmod-rtl8xxxu
kmod-usb-net-rtl8150
kmod-usb-net-rtl8152
r8152-firmware

PPPoE:
kmod-ppp
kmod-pppoe
kmod-pppox
ppp
ppp-mod-pppoe
chat

firewall:
firewall4
iptables*
kmod-ip6tables
ip6tables-zz-legacy
iptables-mod-extra
iptables-zz-legacy

wireless:
hostapd*
iw*
kmod-mt7601u
mt7601u-firmware
wireless-regdb
wireless-tools
wpa-cli
wpa-supplicant

3G/4G/LTE:
comgt*
luci-proto-3g
luci-proto-qmi
kmod-usb-net-asix
kmod-usb-net-cdc-eem
kmod-usb-net-cdc-ether
kmod-usb-net-cdc-mbim
kmod-usb-net-cdc-ncm
kmod-usb-net-cdc-subset
kmod-usb-net-hso
kmod-usb-net-huawei-cdc-ncm
kmod-usb-net-qmi-wwan
kmod-usb-net-rndis
kmod-usb-net-sierrawireless
kmod-usb-serial
kmod-usb-serial-option
kmod-usb-serial-qualcomm
kmod-usb-serial-sierrawireless
kmod-usb-serial-wwan
uqmi
wwan

OS tools
parted
libparted

network fuctionality
redsocks
relayd
stunnel

Thats lots, thanks

Just wanna confirm if its ok to remove firewall ?
Since to be able to acces from wan i had to create this rule

firewall.rule_allow_wan_access=rule
firewall.rule_allow_wan_access.name='Allow WAN Access'
firewall.rule_allow_wan_access.proto='all'
firewall.rule_allow_wan_access.src='wan'
firewall.rule_allow_wan_access.target='ACCEPT

are you using it as a router ?

Probably not, i have other tv box which i installed openwrt too, and i think i will using this one only for entertainment and downloader machine.

then reassign the WWAN interface to the lan firewall zone, and check if everything breaks :wink:

Jumpin in the fire here with a question.

Can you reassign WWAN interface to a zone of an interface that does not exist?

I'm going to ask a question that nobody has asked yet.... why??
Are you running out of space on your OpenWrt storage partition? Or are you having performance issues?

If you're not running into any specific issues, don't remove anything from your current (known working) configuration since doing so may actually cause problems.

On a different, but related topic: how did you get this TV box running OpenWrt? Did you build OpenWrt yourself for this device, or did you get an image from somewhere/someone that was designed to work with this box?

A box with a single network that provides services on the lan, that network should be lan. This is a setup like a dumb AP, only there is no AP. Remove the wan network, and there is no need for a firewall. If you use wan as the single network and keep the firewall active, it will block requests to your service daemons.