From 3cae6fe61d649bc4df0459ce941273cf86f0c818 Mon Sep 17 00:00:00 2001 From: Florian Braun Date: Wed, 7 Feb 2018 18:18:58 +0100 Subject: [PATCH 1/3] Automatically set SELinux Fixes SELinux issues. Docker-Compose can do this on the fly https://github.com/docker/compose/issues/643 --- docker-compose.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index 6e8418ab..e12b60dc 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -13,8 +13,8 @@ services: networks: - docker_elk # volumes: -# - my-path:/var/ossec/data -# - my-path:/etc/postfix +# - my-path:/var/ossec/data:Z +# - my-path:/etc/postfix:Z depends_on: - elasticsearch logstash: @@ -23,7 +23,7 @@ services: restart: always command: -f /etc/logstash/conf.d/ # volumes: -# - my-path:/etc/logstash/conf.d +# - my-path:/etc/logstash/conf.d:Z links: - kibana - elasticsearch:elasticsearch @@ -60,7 +60,7 @@ services: hard: -1 mem_limit: 2g # volumes: -# - my-path:/usr/share/elasticsearch/data +# - my-path:/usr/share/elasticsearch/data:Z networks: - docker_elk kibana: From d8fe59901a3b235871f29e2bf589beb03892100d Mon Sep 17 00:00:00 2001 From: Florian Braun Date: Wed, 7 Feb 2018 18:20:32 +0100 Subject: [PATCH 2/3] Added Persistent Volume for NGINX Nginx should also have a persistent option, so that the .htaccess file gets saved correctly. It also enables the file to be easily edited because the nginx container has no vi or nano. --- docker-compose.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docker-compose.yml b/docker-compose.yml index e12b60dc..e250617a 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -89,6 +89,8 @@ services: ports: - "80:80" - "443:443" +# volumes: +# - my-path:/etc/nginx/conf.d:Z networks: - docker_elk depends_on: From ca1a1bd883525c1db8b4f6c8862c33a137725205 Mon Sep 17 00:00:00 2001 From: Florian Braun Date: Wed, 7 Feb 2018 18:22:14 +0100 Subject: [PATCH 3/3] Added Proxy vars to kibana Kibana needs to download a file when deployed. So there sould be a proxy variable as recommendation that this is what one need in the case of a proxy usage. --- docker-compose.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docker-compose.yml b/docker-compose.yml index e250617a..8dac501d 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -78,6 +78,8 @@ services: - wazuh entrypoint: /wait-for-it.sh elasticsearch # environment: +# - http_proxy=yourproxy +# - https_proxy=yourproxy # - "WAZUH_KIBANA_PLUGIN_URL=http://your.repo/wazuhapp-3.1.0-6.1.2.zip" nginx: image: wazuh/wazuh-nginx