mirror of
				https://github.com/wazuh/wazuh-docker.git
				synced 2025-11-03 21:43:15 +00:00 
			
		
		
		
	Remove API tweaks
This commit is contained in:
		@@ -7,7 +7,6 @@ source /permanent_data.env
 | 
			
		||||
WAZUH_INSTALL_PATH=/var/ossec
 | 
			
		||||
WAZUH_CONFIG_MOUNT=/wazuh-config-mount
 | 
			
		||||
AUTO_ENROLLMENT_ENABLED=${AUTO_ENROLLMENT_ENABLED:-true}
 | 
			
		||||
API_GENERATE_CERTS=${API_GENERATE_CERTS:-true}
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
##############################################################################
 | 
			
		||||
@@ -32,14 +31,6 @@ exec_cmd_stdout() {
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
##############################################################################
 | 
			
		||||
# Edit configuration
 | 
			
		||||
##############################################################################
 | 
			
		||||
 | 
			
		||||
edit_configuration() { # $1 -> setting,  $2 -> value
 | 
			
		||||
  sed -i "s/^config.$1\s=.*/config.$1 = \"$2\";/g" "${WAZUH_INSTALL_PATH}/api/configuration/config.js" || error_and_exit "sed (editing configuration)"
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
##############################################################################
 | 
			
		||||
# This function will attempt to mount every directory in PERMANENT_DATA
 | 
			
		||||
# into the respective path.
 | 
			
		||||
@@ -108,22 +99,6 @@ create_ossec_key_cert() {
 | 
			
		||||
  exec_cmd "openssl req -new -x509 -key ${WAZUH_INSTALL_PATH}/etc/sslmanager.key -out ${WAZUH_INSTALL_PATH}/etc/sslmanager.cert -days 3650 -subj /CN=${HOSTNAME}/"
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
##############################################################################
 | 
			
		||||
# Create certificates: API
 | 
			
		||||
##############################################################################
 | 
			
		||||
 | 
			
		||||
create_api_key_cert() {
 | 
			
		||||
  print "Enabling Wazuh API HTTPS"
 | 
			
		||||
  edit_configuration "https" "yes"
 | 
			
		||||
  print "Create Wazuh API key and cert"
 | 
			
		||||
  exec_cmd "openssl genrsa -out ${WAZUH_INSTALL_PATH}/api/configuration/ssl/server.key 4096"
 | 
			
		||||
  exec_cmd "openssl req -new -x509 -key ${WAZUH_INSTALL_PATH}/api/configuration/ssl/server.key -out ${WAZUH_INSTALL_PATH}/api/configuration/ssl/server.crt -days 3650 -subj /CN=${HOSTNAME}/"
 | 
			
		||||
 | 
			
		||||
  # Granting proper permissions 
 | 
			
		||||
  chmod 400 ${WAZUH_INSTALL_PATH}/api/configuration/ssl/server.key
 | 
			
		||||
  chmod 400 ${WAZUH_INSTALL_PATH}/api/configuration/ssl/server.crt
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
##############################################################################
 | 
			
		||||
# Copy all files from $WAZUH_CONFIG_MOUNT to $WAZUH_INSTALL_PATH and respect
 | 
			
		||||
# destination files permissions
 | 
			
		||||
@@ -167,19 +142,6 @@ docker_custom_args() {
 | 
			
		||||
  done
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
##############################################################################
 | 
			
		||||
# Change Wazuh API user credentials.
 | 
			
		||||
##############################################################################
 | 
			
		||||
 | 
			
		||||
change_api_user_credentials() {
 | 
			
		||||
  pushd /var/ossec/api/configuration/auth/
 | 
			
		||||
  echo "Change Wazuh API user credentials"
 | 
			
		||||
  change_user="node htpasswd -b -c user $API_USER $API_PASS"
 | 
			
		||||
  eval $change_user
 | 
			
		||||
  popd
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
##############################################################################
 | 
			
		||||
# Main function
 | 
			
		||||
##############################################################################
 | 
			
		||||
@@ -203,15 +165,6 @@ main() {
 | 
			
		||||
    fi
 | 
			
		||||
  fi
 | 
			
		||||
 | 
			
		||||
  # Generate API certs if API_GENERATE_CERTS is true and does not exist
 | 
			
		||||
  if [ $API_GENERATE_CERTS == true ]
 | 
			
		||||
  then
 | 
			
		||||
    if [ ! -e ${WAZUH_INSTALL_PATH}/api/configuration/ssl/server.crt ]
 | 
			
		||||
    then
 | 
			
		||||
      create_api_key_cert
 | 
			
		||||
    fi
 | 
			
		||||
  fi
 | 
			
		||||
 | 
			
		||||
  # Mount selected files (WAZUH_CONFIG_MOUNT) to container
 | 
			
		||||
  mount_files
 | 
			
		||||
 | 
			
		||||
@@ -221,9 +174,6 @@ main() {
 | 
			
		||||
  # Execute custom args
 | 
			
		||||
  docker_custom_args
 | 
			
		||||
 | 
			
		||||
  # Change API user credentials
 | 
			
		||||
  change_api_user_credentials
 | 
			
		||||
 | 
			
		||||
  # Delete temporary data folder
 | 
			
		||||
  rm -rf ${WAZUH_INSTALL_PATH}/data_tmp
 | 
			
		||||
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user