mirror of
				https://github.com/wazuh/wazuh-docker.git
				synced 2025-11-04 05:53:19 +00:00 
			
		
		
		
	change indexer and manager configuration for 4.4 version
This commit is contained in:
		@@ -59,14 +59,15 @@ COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/systemd /usr/lib/s
 | 
				
			|||||||
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/sysctl.d /usr/lib/sysctl.d
 | 
					COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/sysctl.d /usr/lib/sysctl.d
 | 
				
			||||||
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/tmpfiles.d /usr/lib/tmpfiles.d
 | 
					COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/tmpfiles.d /usr/lib/tmpfiles.d
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					RUN chown -R 1000:1000 /usr/share/wazuh-indexer
 | 
				
			||||||
 | 
					
 | 
				
			||||||
RUN mkdir -p /var/lib/wazuh-indexer && chown 1000:1000 /var/lib/wazuh-indexer && \
 | 
					RUN mkdir -p /var/lib/wazuh-indexer && chown 1000:1000 /var/lib/wazuh-indexer && \
 | 
				
			||||||
    mkdir -p /usr/share/wazuh-indexer/logs && chown 1000:1000 /usr/share/wazuh-indexer/logs && \
 | 
					    mkdir -p /usr/share/wazuh-indexer/logs && chown 1000:1000 /usr/share/wazuh-indexer/logs && \
 | 
				
			||||||
    mkdir -p /run/wazuh-indexer && chown 1000:1000 /run/wazuh-indexer && \
 | 
					    mkdir -p /run/wazuh-indexer && chown 1000:1000 /run/wazuh-indexer && \
 | 
				
			||||||
    mkdir -p /var/log/wazuh-indexer && chown 1000:1000 /var/log/wazuh-indexer && \
 | 
					    mkdir -p /var/log/wazuh-indexer && chown 1000:1000 /var/log/wazuh-indexer && \
 | 
				
			||||||
    chmod 700 /usr/share/wazuh-indexer/config && \
 | 
					    chmod 700 /usr/share/wazuh-indexer && \
 | 
				
			||||||
    chmod 600 /usr/share/wazuh-indexer/config/jvm.options && \
 | 
					    chmod 600 /usr/share/wazuh-indexer/jvm.options && \
 | 
				
			||||||
    chmod 600 /usr/share/wazuh-indexer/config/opensearch.yml
 | 
					    chmod 600 /usr/share/wazuh-indexer/opensearch.yml
 | 
				
			||||||
 | 
					
 | 
				
			||||||
USER wazuh-indexer
 | 
					USER wazuh-indexer
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -13,7 +13,7 @@ export LOG_DIR=/var/log/${NAME}
 | 
				
			|||||||
export LIB_DIR=/var/lib/${NAME}
 | 
					export LIB_DIR=/var/lib/${NAME}
 | 
				
			||||||
export PID_DIR=/run/${NAME}
 | 
					export PID_DIR=/run/${NAME}
 | 
				
			||||||
export INSTALLATION_DIR=/usr/share/${NAME}
 | 
					export INSTALLATION_DIR=/usr/share/${NAME}
 | 
				
			||||||
export CONFIG_DIR=${INSTALLATION_DIR}/config
 | 
					export CONFIG_DIR=${INSTALLATION_DIR}
 | 
				
			||||||
export BASE_DIR=${NAME}-*
 | 
					export BASE_DIR=${NAME}-*
 | 
				
			||||||
export INDEXER_FILE=wazuh-indexer-base.tar.xz
 | 
					export INDEXER_FILE=wazuh-indexer-base.tar.xz
 | 
				
			||||||
export BASE_FILE=wazuh-indexer-base-${VERSION}-linux-x64.tar.xz
 | 
					export BASE_FILE=wazuh-indexer-base-${VERSION}-linux-x64.tar.xz
 | 
				
			||||||
@@ -93,6 +93,7 @@ chmod 755 $CERT_TOOL && bash /$CERT_TOOL -A
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
# copy to target
 | 
					# copy to target
 | 
				
			||||||
mkdir -p ${TARGET_DIR}${INSTALLATION_DIR}
 | 
					mkdir -p ${TARGET_DIR}${INSTALLATION_DIR}
 | 
				
			||||||
 | 
					mkdir -p ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/
 | 
				
			||||||
mkdir -p ${TARGET_DIR}${CONFIG_DIR}
 | 
					mkdir -p ${TARGET_DIR}${CONFIG_DIR}
 | 
				
			||||||
mkdir -p ${TARGET_DIR}${LIB_DIR}
 | 
					mkdir -p ${TARGET_DIR}${LIB_DIR}
 | 
				
			||||||
mkdir -p ${TARGET_DIR}${LOG_DIR}
 | 
					mkdir -p ${TARGET_DIR}${LOG_DIR}
 | 
				
			||||||
@@ -117,9 +118,9 @@ cp -pr ${BASE_DIR}/* ${TARGET_DIR}${INSTALLATION_DIR}
 | 
				
			|||||||
cp /$CERT_TOOL ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/
 | 
					cp /$CERT_TOOL ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/
 | 
				
			||||||
cp /$PASSWORD_TOOL ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/
 | 
					cp /$PASSWORD_TOOL ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/tools/
 | 
				
			||||||
# Copy Wazuh's config files for the security plugin
 | 
					# Copy Wazuh's config files for the security plugin
 | 
				
			||||||
cp -pr /roles_mapping.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/
 | 
					cp -pr /roles_mapping.yml ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/
 | 
				
			||||||
cp -pr /roles.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/
 | 
					cp -pr /roles.yml ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/
 | 
				
			||||||
cp -pr /internal_users.yml ${TARGET_DIR}${INSTALLATION_DIR}/plugins/opensearch-security/securityconfig/
 | 
					cp -pr /internal_users.yml ${TARGET_DIR}${INSTALLATION_DIR}/opensearch-security/
 | 
				
			||||||
cp -pr /opensearch.yml ${TARGET_DIR}${CONFIG_DIR}
 | 
					cp -pr /opensearch.yml ${TARGET_DIR}${CONFIG_DIR}
 | 
				
			||||||
# Copy Wazuh indexer's certificates
 | 
					# Copy Wazuh indexer's certificates
 | 
				
			||||||
cp -pr /wazuh-certificates/demo.indexer.pem ${TARGET_DIR}${CONFIG_DIR}/certs/indexer.pem
 | 
					cp -pr /wazuh-certificates/demo.indexer.pem ${TARGET_DIR}${CONFIG_DIR}/certs/indexer.pem
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -6,7 +6,7 @@ umask 0002
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
export USER=wazuh-indexer
 | 
					export USER=wazuh-indexer
 | 
				
			||||||
export INSTALLATION_DIR=/usr/share/wazuh-indexer
 | 
					export INSTALLATION_DIR=/usr/share/wazuh-indexer
 | 
				
			||||||
export OPENSEARCH_PATH_CONF=${INSTALLATION_DIR}/config
 | 
					export OPENSEARCH_PATH_CONF=${INSTALLATION_DIR}
 | 
				
			||||||
export JAVA_HOME=${INSTALLATION_DIR}/jdk
 | 
					export JAVA_HOME=${INSTALLATION_DIR}/jdk
 | 
				
			||||||
export DISCOVERY=$(grep -oP "(?<=discovery.type: ).*" ${OPENSEARCH_PATH_CONF}/opensearch.yml)
 | 
					export DISCOVERY=$(grep -oP "(?<=discovery.type: ).*" ${OPENSEARCH_PATH_CONF}/opensearch.yml)
 | 
				
			||||||
export CACERT=$(grep -oP "(?<=plugins.security.ssl.transport.pemtrustedcas_filepath: ).*" ${OPENSEARCH_PATH_CONF}/opensearch.yml)
 | 
					export CACERT=$(grep -oP "(?<=plugins.security.ssl.transport.pemtrustedcas_filepath: ).*" ${OPENSEARCH_PATH_CONF}/opensearch.yml)
 | 
				
			||||||
@@ -59,7 +59,7 @@ if [[ -f bin/opensearch-users ]]; then
 | 
				
			|||||||
  # enabled, but we have no way of knowing which node we are yet. We'll just
 | 
					  # enabled, but we have no way of knowing which node we are yet. We'll just
 | 
				
			||||||
  # honor the variable if it's present.
 | 
					  # honor the variable if it's present.
 | 
				
			||||||
  if [[ -n "$INDEXER_PASSWORD" ]]; then
 | 
					  if [[ -n "$INDEXER_PASSWORD" ]]; then
 | 
				
			||||||
    [[ -f /usr/share/wazuh-indexer/config/opensearch.keystore ]] || (run_as_other_user_if_needed opensearch-keystore create)
 | 
					    [[ -f /usr/share/wazuh-indexer/opensearch.keystore ]] || (run_as_other_user_if_needed opensearch-keystore create)
 | 
				
			||||||
    if ! (run_as_other_user_if_needed opensearch-keystore has-passwd --silent) ; then
 | 
					    if ! (run_as_other_user_if_needed opensearch-keystore has-passwd --silent) ; then
 | 
				
			||||||
      # keystore is unencrypted
 | 
					      # keystore is unencrypted
 | 
				
			||||||
      if ! (run_as_other_user_if_needed opensearch-keystore list | grep -q '^bootstrap.password$'); then
 | 
					      if ! (run_as_other_user_if_needed opensearch-keystore list | grep -q '^bootstrap.password$'); then
 | 
				
			||||||
@@ -84,10 +84,10 @@ if [[ "$(id -u)" == "0" ]]; then
 | 
				
			|||||||
fi
 | 
					fi
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
if [[ "$DISCOVERY" == "single-node" ]] && [[ ! -f "/var/lib/wazuh-indexer/.flag" ]]; then
 | 
					#if [[ "$DISCOVERY" == "single-node" ]] && [[ ! -f "/var/lib/wazuh-indexer/.flag" ]]; then
 | 
				
			||||||
  # run securityadmin.sh for single node with CACERT, CERT and KEY parameter
 | 
					  # run securityadmin.sh for single node with CACERT, CERT and KEY parameter
 | 
				
			||||||
  nohup /securityadmin.sh &
 | 
					#  nohup /securityadmin.sh &
 | 
				
			||||||
  touch "/var/lib/wazuh-indexer/.flag"
 | 
					#  touch "/var/lib/wazuh-indexer/.flag"
 | 
				
			||||||
fi
 | 
					#fi
 | 
				
			||||||
 | 
					
 | 
				
			||||||
run_as_other_user_if_needed /usr/share/wazuh-indexer/bin/opensearch <<<"$KEYSTORE_PASSWORD"
 | 
					run_as_other_user_if_needed /usr/share/wazuh-indexer/bin/opensearch <<<"$KEYSTORE_PASSWORD"
 | 
				
			||||||
@@ -4,12 +4,12 @@ path.data: /var/lib/wazuh-indexer
 | 
				
			|||||||
path.logs: /var/log/wazuh-indexer
 | 
					path.logs: /var/log/wazuh-indexer
 | 
				
			||||||
discovery.type: single-node
 | 
					discovery.type: single-node
 | 
				
			||||||
compatibility.override_main_response_version: true
 | 
					compatibility.override_main_response_version: true
 | 
				
			||||||
plugins.security.ssl.http.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/indexer.pem
 | 
					plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/certs/indexer.pem
 | 
				
			||||||
plugins.security.ssl.http.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/indexer-key.pem
 | 
					plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/certs/indexer-key.pem
 | 
				
			||||||
plugins.security.ssl.http.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
 | 
					plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
 | 
				
			||||||
plugins.security.ssl.transport.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/indexer.pem
 | 
					plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/certs/indexer.pem
 | 
				
			||||||
plugins.security.ssl.transport.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/indexer-key.pem
 | 
					plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/certs/indexer-key.pem
 | 
				
			||||||
plugins.security.ssl.transport.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
 | 
					plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
 | 
				
			||||||
plugins.security.ssl.http.enabled: true
 | 
					plugins.security.ssl.http.enabled: true
 | 
				
			||||||
plugins.security.ssl.transport.enforce_hostname_verification: false
 | 
					plugins.security.ssl.transport.enforce_hostname_verification: false
 | 
				
			||||||
plugins.security.ssl.transport.resolve_hostname: false
 | 
					plugins.security.ssl.transport.resolve_hostname: false
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -1,3 +1,3 @@
 | 
				
			|||||||
# Wazuh Docker Copyright (C) 2017, Wazuh Inc. (License GPLv2)
 | 
					# Wazuh Docker Copyright (C) 2017, Wazuh Inc. (License GPLv2)
 | 
				
			||||||
sleep 30
 | 
					sleep 30
 | 
				
			||||||
bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9300 -icl
 | 
					bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/opensearch-security/ -nhnv -cacert  $CACERT -cert $CERT -key $KEY -p 9200 -icl
 | 
				
			||||||
@@ -21,4 +21,4 @@ nodes:
 | 
				
			|||||||
  # Wazuh dashboard node
 | 
					  # Wazuh dashboard node
 | 
				
			||||||
  dashboard:
 | 
					  dashboard:
 | 
				
			||||||
    - name: wazuh.dashboard
 | 
					    - name: wazuh.dashboard
 | 
				
			||||||
      ip: wazuh.dashboard
 | 
					      ip: wazuh.dashboard
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -84,13 +84,13 @@ services:
 | 
				
			|||||||
        hard: 65536
 | 
					        hard: 65536
 | 
				
			||||||
    volumes:
 | 
					    volumes:
 | 
				
			||||||
      - wazuh-indexer-data-1:/var/lib/wazuh-indexer
 | 
					      - wazuh-indexer-data-1:/var/lib/wazuh-indexer
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/wazuh1.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh1.indexer.key
 | 
					      - ./config/wazuh_indexer_ssl_certs/wazuh1.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh1.indexer.key
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/wazuh1.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh1.indexer.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/wazuh1.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh1.indexer.pem
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/config/certs/admin.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/certs/admin.pem
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/certs/admin-key.pem
 | 
				
			||||||
      - ./config/wazuh_indexer/wazuh1.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml
 | 
					      - ./config/wazuh_indexer/wazuh1.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
 | 
				
			||||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/internal_users.yml
 | 
					      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  wazuh2.indexer:
 | 
					  wazuh2.indexer:
 | 
				
			||||||
    image: wazuh/wazuh-indexer:4.4.0
 | 
					    image: wazuh/wazuh-indexer:4.4.0
 | 
				
			||||||
@@ -108,11 +108,11 @@ services:
 | 
				
			|||||||
        hard: 65536
 | 
					        hard: 65536
 | 
				
			||||||
    volumes:
 | 
					    volumes:
 | 
				
			||||||
      - wazuh-indexer-data-2:/var/lib/wazuh-indexer
 | 
					      - wazuh-indexer-data-2:/var/lib/wazuh-indexer
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/wazuh2.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh2.indexer.key
 | 
					      - ./config/wazuh_indexer_ssl_certs/wazuh2.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh2.indexer.key
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh2.indexer.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh2.indexer.pem
 | 
				
			||||||
      - ./config/wazuh_indexer/wazuh2.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml
 | 
					      - ./config/wazuh_indexer/wazuh2.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
 | 
				
			||||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/internal_users.yml
 | 
					      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  wazuh3.indexer:
 | 
					  wazuh3.indexer:
 | 
				
			||||||
    image: wazuh/wazuh-indexer:4.4.0
 | 
					    image: wazuh/wazuh-indexer:4.4.0
 | 
				
			||||||
@@ -130,11 +130,11 @@ services:
 | 
				
			|||||||
        hard: 65536
 | 
					        hard: 65536
 | 
				
			||||||
    volumes:
 | 
					    volumes:
 | 
				
			||||||
      - wazuh-indexer-data-3:/var/lib/wazuh-indexer
 | 
					      - wazuh-indexer-data-3:/var/lib/wazuh-indexer
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/wazuh3.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh3.indexer.key
 | 
					      - ./config/wazuh_indexer_ssl_certs/wazuh3.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh3.indexer.key
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh3.indexer.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh3.indexer.pem
 | 
				
			||||||
      - ./config/wazuh_indexer/wazuh3.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml
 | 
					      - ./config/wazuh_indexer/wazuh3.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
 | 
				
			||||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/internal_users.yml
 | 
					      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  wazuh.dashboard:
 | 
					  wazuh.dashboard:
 | 
				
			||||||
    image: wazuh/wazuh-dashboard:4.4.0
 | 
					    image: wazuh/wazuh-dashboard:4.4.0
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -13,4 +13,4 @@ nodes:
 | 
				
			|||||||
  # Wazuh dashboard node
 | 
					  # Wazuh dashboard node
 | 
				
			||||||
  dashboard:
 | 
					  dashboard:
 | 
				
			||||||
    - name: wazuh.dashboard
 | 
					    - name: wazuh.dashboard
 | 
				
			||||||
      ip: wazuh.dashboard
 | 
					      ip: wazuh.dashboard
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -331,14 +331,14 @@
 | 
				
			|||||||
    <name>wazuh</name>
 | 
					    <name>wazuh</name>
 | 
				
			||||||
    <node_name>node01</node_name>
 | 
					    <node_name>node01</node_name>
 | 
				
			||||||
    <node_type>master</node_type>
 | 
					    <node_type>master</node_type>
 | 
				
			||||||
    <key></key>
 | 
					    <key>aa093264ef885029653eea20dfcf51ae</key>
 | 
				
			||||||
    <port>1516</port>
 | 
					    <port>1516</port>
 | 
				
			||||||
    <bind_addr>0.0.0.0</bind_addr>
 | 
					    <bind_addr>0.0.0.0</bind_addr>
 | 
				
			||||||
    <nodes>
 | 
					    <nodes>
 | 
				
			||||||
        <node>NODE_IP</node>
 | 
					        <node>wazuh.manager</node>
 | 
				
			||||||
    </nodes>
 | 
					    </nodes>
 | 
				
			||||||
    <hidden>no</hidden>
 | 
					    <hidden>no</hidden>
 | 
				
			||||||
    <disabled>yes</disabled>
 | 
					    <disabled>no</disabled>
 | 
				
			||||||
  </cluster>
 | 
					  </cluster>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
</ossec_config>
 | 
					</ossec_config>
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -3,13 +3,15 @@ node.name: "wazuh.indexer"
 | 
				
			|||||||
path.data: /var/lib/wazuh-indexer
 | 
					path.data: /var/lib/wazuh-indexer
 | 
				
			||||||
path.logs: /var/log/wazuh-indexer
 | 
					path.logs: /var/log/wazuh-indexer
 | 
				
			||||||
discovery.type: single-node
 | 
					discovery.type: single-node
 | 
				
			||||||
 | 
					http.port: 9200-9299
 | 
				
			||||||
 | 
					transport.tcp.port: 9300-9399
 | 
				
			||||||
compatibility.override_main_response_version: true
 | 
					compatibility.override_main_response_version: true
 | 
				
			||||||
plugins.security.ssl.http.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh.indexer.pem
 | 
					plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem
 | 
				
			||||||
plugins.security.ssl.http.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh.indexer.key
 | 
					plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key
 | 
				
			||||||
plugins.security.ssl.http.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
 | 
					plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
 | 
				
			||||||
plugins.security.ssl.transport.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh.indexer.pem
 | 
					plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem
 | 
				
			||||||
plugins.security.ssl.transport.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh.indexer.key
 | 
					plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key
 | 
				
			||||||
plugins.security.ssl.transport.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
 | 
					plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
 | 
				
			||||||
plugins.security.ssl.http.enabled: true
 | 
					plugins.security.ssl.http.enabled: true
 | 
				
			||||||
plugins.security.ssl.transport.enforce_hostname_verification: false
 | 
					plugins.security.ssl.transport.enforce_hostname_verification: false
 | 
				
			||||||
plugins.security.ssl.transport.resolve_hostname: false
 | 
					plugins.security.ssl.transport.resolve_hostname: false
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -55,13 +55,13 @@ services:
 | 
				
			|||||||
        hard: 65536
 | 
					        hard: 65536
 | 
				
			||||||
    volumes:
 | 
					    volumes:
 | 
				
			||||||
      - wazuh-indexer-data:/var/lib/wazuh-indexer
 | 
					      - wazuh-indexer-data:/var/lib/wazuh-indexer
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/wazuh.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh.indexer.key
 | 
					      - ./config/wazuh_indexer_ssl_certs/wazuh.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.key
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/wazuh.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/wazuh.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.pem
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/config/certs/admin.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/certs/admin.pem
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem
 | 
					      - ./config/wazuh_indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/certs/admin-key.pem
 | 
				
			||||||
      - ./config/wazuh_indexer/wazuh.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml
 | 
					      - ./config/wazuh_indexer/wazuh.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
 | 
				
			||||||
      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/plugins/opensearch-security/securityconfig/internal_users.yml
 | 
					      - ./config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  wazuh.dashboard:
 | 
					  wazuh.dashboard:
 | 
				
			||||||
    image: wazuh/wazuh-dashboard:4.4.0
 | 
					    image: wazuh/wazuh-dashboard:4.4.0
 | 
				
			||||||
 
 | 
				
			|||||||
@@ -7,4 +7,4 @@ services:
 | 
				
			|||||||
    hostname: wazuh-certs-generator
 | 
					    hostname: wazuh-certs-generator
 | 
				
			||||||
    volumes:
 | 
					    volumes:
 | 
				
			||||||
      - ./config/wazuh_indexer_ssl_certs/:/certificates/
 | 
					      - ./config/wazuh_indexer_ssl_certs/:/certificates/
 | 
				
			||||||
      - ./config/certs.yml:/config/certs.yml
 | 
					      - ./config/certs.yml:/config/certs.yml
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user