mirror of
				https://github.com/wazuh/wazuh-docker.git
				synced 2025-11-03 21:43:15 +00:00 
			
		
		
		
	Compare commits
	
		
			4 Commits
		
	
	
		
			v4.6.0-bet
			...
			2.1.0_5.5.
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| 
						 | 
					9f192202fd | ||
| 
						 | 
					d8cd0ba7d0 | ||
| 
						 | 
					349213bac5 | ||
| 
						 | 
					8547b3b45a | 
@@ -53,8 +53,8 @@ services:
 | 
			
		||||
    image: wazuh/wazuh-kibana
 | 
			
		||||
    hostname: kibana
 | 
			
		||||
    restart: always
 | 
			
		||||
#    ports:
 | 
			
		||||
#      - "5601:5601"
 | 
			
		||||
    ports:
 | 
			
		||||
      - "5601:5601"
 | 
			
		||||
    networks:
 | 
			
		||||
        - docker_elk
 | 
			
		||||
    depends_on:
 | 
			
		||||
@@ -65,22 +65,6 @@ services:
 | 
			
		||||
    entrypoint: sh wait-for-it.sh elasticsearch
 | 
			
		||||
#    environment:
 | 
			
		||||
#      - "WAZUH_KIBANA_PLUGIN_URL=http://your.repo/wazuhapp-2.1.0-5.5.1.zip"
 | 
			
		||||
  nginx:
 | 
			
		||||
    image: wazuh/wazuh-nginx
 | 
			
		||||
    hostname: nginx
 | 
			
		||||
    restart: always
 | 
			
		||||
    entrypoint: sh run.sh
 | 
			
		||||
    environment:
 | 
			
		||||
      - NGINX_PORT=443
 | 
			
		||||
    ports:
 | 
			
		||||
      - "80:80"
 | 
			
		||||
      - "443:443"
 | 
			
		||||
    networks:
 | 
			
		||||
      - docker_elk
 | 
			
		||||
    depends_on:
 | 
			
		||||
      - kibana
 | 
			
		||||
    links:
 | 
			
		||||
      - kibana
 | 
			
		||||
 | 
			
		||||
networks:
 | 
			
		||||
  docker_elk:
 | 
			
		||||
 
 | 
			
		||||
@@ -26,7 +26,7 @@ sleep 30
 | 
			
		||||
 | 
			
		||||
echo "Configuring defaultIndex to wazuh-alerts-*"
 | 
			
		||||
 | 
			
		||||
curl -s -XPUT http://$host:9200/.kibana/config/5.5.2 -H 'Content-Type: application/json' -d '{"defaultIndex" : "wazuh-alerts-*"}' > /dev/null
 | 
			
		||||
curl -s -XPUT http://$host:9200/.kibana/config/5.5.2 -d '{"defaultIndex" : "wazuh-alerts-*"}' > /dev/null
 | 
			
		||||
 | 
			
		||||
sleep 30
 | 
			
		||||
 | 
			
		||||
 
 | 
			
		||||
@@ -1,5 +0,0 @@
 | 
			
		||||
FROM nginx:latest
 | 
			
		||||
 | 
			
		||||
RUN apt-get update && apt-get install -y openssl apache2-utils
 | 
			
		||||
 | 
			
		||||
COPY ./config/run.sh /run.sh
 | 
			
		||||
@@ -1,43 +0,0 @@
 | 
			
		||||
#!/bin/bash
 | 
			
		||||
 | 
			
		||||
set -e
 | 
			
		||||
 | 
			
		||||
if [ ! -d /etc/pki/tls/certs ]; then
 | 
			
		||||
  echo "Generating SSL certificates"
 | 
			
		||||
  mkdir -p /etc/pki/tls/certs /etc/pki/tls/private
 | 
			
		||||
  openssl req -x509 -batch -nodes -days 365 -newkey rsa:2048 -keyout /etc/pki/tls/private/kibana-access.key -out /etc/pki/tls/certs/kibana-access.pem >/dev/null
 | 
			
		||||
else
 | 
			
		||||
  echo "SSL certificates already present"
 | 
			
		||||
fi
 | 
			
		||||
 | 
			
		||||
if [ ! -f /etc/nginx/conf.d/kibana.htpasswd ]; then
 | 
			
		||||
  echo "Setting Nginx credentials"
 | 
			
		||||
  echo bar|htpasswd -i -c /etc/nginx/conf.d/kibana.htpasswd foo >/dev/null
 | 
			
		||||
else
 | 
			
		||||
  echo "Kibana credentials already configured"
 | 
			
		||||
fi
 | 
			
		||||
 | 
			
		||||
echo "Configuring NGINX"
 | 
			
		||||
cat > /etc/nginx/conf.d/default.conf <<EOF
 | 
			
		||||
server {
 | 
			
		||||
    listen 80;
 | 
			
		||||
    listen [::]:80;
 | 
			
		||||
    return 301 https://\$host:$NGINX_PORT\$request_uri;
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
server {
 | 
			
		||||
    listen $NGINX_PORT default_server;
 | 
			
		||||
    listen [::]:$NGINX_PORT;
 | 
			
		||||
    ssl on;
 | 
			
		||||
    ssl_certificate /etc/pki/tls/certs/kibana-access.pem;
 | 
			
		||||
    ssl_certificate_key /etc/pki/tls/private/kibana-access.key;
 | 
			
		||||
    location / {
 | 
			
		||||
        auth_basic "Restricted";
 | 
			
		||||
        auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd;
 | 
			
		||||
        proxy_pass http://kibana:5601/;
 | 
			
		||||
    }
 | 
			
		||||
}
 | 
			
		||||
EOF
 | 
			
		||||
 | 
			
		||||
echo "Starting Nginx"
 | 
			
		||||
nginx -g 'daemon off; error_log /dev/stdout info;'
 | 
			
		||||
@@ -9,7 +9,7 @@ RUN groupadd -g 1000 ossec
 | 
			
		||||
RUN useradd -u 1000 -g 1000 ossec
 | 
			
		||||
RUN curl --silent --location https://rpm.nodesource.com/setup_6.x | bash - &&\
 | 
			
		||||
    yum install -y nodejs
 | 
			
		||||
RUN yum install -y wazuh-manager-2.1.0 wazuh-api-2.1.0
 | 
			
		||||
RUN yum install -y wazuh-manager wazuh-api
 | 
			
		||||
 | 
			
		||||
 | 
			
		||||
ADD config/data_dirs.env /data_dirs.env
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user