mirror of
https://github.com/wazuh/wazuh-docker.git
synced 2025-10-23 04:51:57 +00:00
Compare commits
4 Commits
v3.12.2_7.
...
2.1.0_5.5.
Author | SHA1 | Date | |
---|---|---|---|
|
9f192202fd | ||
|
d8cd0ba7d0 | ||
|
349213bac5 | ||
|
8547b3b45a |
@@ -53,8 +53,8 @@ services:
|
|||||||
image: wazuh/wazuh-kibana
|
image: wazuh/wazuh-kibana
|
||||||
hostname: kibana
|
hostname: kibana
|
||||||
restart: always
|
restart: always
|
||||||
# ports:
|
ports:
|
||||||
# - "5601:5601"
|
- "5601:5601"
|
||||||
networks:
|
networks:
|
||||||
- docker_elk
|
- docker_elk
|
||||||
depends_on:
|
depends_on:
|
||||||
@@ -65,22 +65,6 @@ services:
|
|||||||
entrypoint: sh wait-for-it.sh elasticsearch
|
entrypoint: sh wait-for-it.sh elasticsearch
|
||||||
# environment:
|
# environment:
|
||||||
# - "WAZUH_KIBANA_PLUGIN_URL=http://your.repo/wazuhapp-2.1.0-5.5.1.zip"
|
# - "WAZUH_KIBANA_PLUGIN_URL=http://your.repo/wazuhapp-2.1.0-5.5.1.zip"
|
||||||
nginx:
|
|
||||||
image: wazuh/wazuh-nginx
|
|
||||||
hostname: nginx
|
|
||||||
restart: always
|
|
||||||
entrypoint: sh run.sh
|
|
||||||
environment:
|
|
||||||
- NGINX_PORT=443
|
|
||||||
ports:
|
|
||||||
- "80:80"
|
|
||||||
- "443:443"
|
|
||||||
networks:
|
|
||||||
- docker_elk
|
|
||||||
depends_on:
|
|
||||||
- kibana
|
|
||||||
links:
|
|
||||||
- kibana
|
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
docker_elk:
|
docker_elk:
|
||||||
|
@@ -26,7 +26,7 @@ sleep 30
|
|||||||
|
|
||||||
echo "Configuring defaultIndex to wazuh-alerts-*"
|
echo "Configuring defaultIndex to wazuh-alerts-*"
|
||||||
|
|
||||||
curl -s -XPUT http://$host:9200/.kibana/config/5.5.2 -H 'Content-Type: application/json' -d '{"defaultIndex" : "wazuh-alerts-*"}' > /dev/null
|
curl -s -XPUT http://$host:9200/.kibana/config/5.5.2 -d '{"defaultIndex" : "wazuh-alerts-*"}' > /dev/null
|
||||||
|
|
||||||
sleep 30
|
sleep 30
|
||||||
|
|
||||||
|
@@ -1,5 +0,0 @@
|
|||||||
FROM nginx:latest
|
|
||||||
|
|
||||||
RUN apt-get update && apt-get install -y openssl apache2-utils
|
|
||||||
|
|
||||||
COPY ./config/run.sh /run.sh
|
|
@@ -1,43 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
set -e
|
|
||||||
|
|
||||||
if [ ! -d /etc/pki/tls/certs ]; then
|
|
||||||
echo "Generating SSL certificates"
|
|
||||||
mkdir -p /etc/pki/tls/certs /etc/pki/tls/private
|
|
||||||
openssl req -x509 -batch -nodes -days 365 -newkey rsa:2048 -keyout /etc/pki/tls/private/kibana-access.key -out /etc/pki/tls/certs/kibana-access.pem >/dev/null
|
|
||||||
else
|
|
||||||
echo "SSL certificates already present"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ ! -f /etc/nginx/conf.d/kibana.htpasswd ]; then
|
|
||||||
echo "Setting Nginx credentials"
|
|
||||||
echo bar|htpasswd -i -c /etc/nginx/conf.d/kibana.htpasswd foo >/dev/null
|
|
||||||
else
|
|
||||||
echo "Kibana credentials already configured"
|
|
||||||
fi
|
|
||||||
|
|
||||||
echo "Configuring NGINX"
|
|
||||||
cat > /etc/nginx/conf.d/default.conf <<EOF
|
|
||||||
server {
|
|
||||||
listen 80;
|
|
||||||
listen [::]:80;
|
|
||||||
return 301 https://\$host:$NGINX_PORT\$request_uri;
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen $NGINX_PORT default_server;
|
|
||||||
listen [::]:$NGINX_PORT;
|
|
||||||
ssl on;
|
|
||||||
ssl_certificate /etc/pki/tls/certs/kibana-access.pem;
|
|
||||||
ssl_certificate_key /etc/pki/tls/private/kibana-access.key;
|
|
||||||
location / {
|
|
||||||
auth_basic "Restricted";
|
|
||||||
auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd;
|
|
||||||
proxy_pass http://kibana:5601/;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
EOF
|
|
||||||
|
|
||||||
echo "Starting Nginx"
|
|
||||||
nginx -g 'daemon off; error_log /dev/stdout info;'
|
|
@@ -9,7 +9,7 @@ RUN groupadd -g 1000 ossec
|
|||||||
RUN useradd -u 1000 -g 1000 ossec
|
RUN useradd -u 1000 -g 1000 ossec
|
||||||
RUN curl --silent --location https://rpm.nodesource.com/setup_6.x | bash - &&\
|
RUN curl --silent --location https://rpm.nodesource.com/setup_6.x | bash - &&\
|
||||||
yum install -y nodejs
|
yum install -y nodejs
|
||||||
RUN yum install -y wazuh-manager-2.1.0 wazuh-api-2.1.0
|
RUN yum install -y wazuh-manager wazuh-api
|
||||||
|
|
||||||
|
|
||||||
ADD config/data_dirs.env /data_dirs.env
|
ADD config/data_dirs.env /data_dirs.env
|
||||||
|
Reference in New Issue
Block a user