mirror of
https://github.com/wazuh/wazuh-docker.git
synced 2025-10-23 06:11:57 +00:00
Add mdbook documentation
This commit is contained in:
1
docs/.gitignore
vendored
Normal file
1
docs/.gitignore
vendored
Normal file
@@ -0,0 +1 @@
|
|||||||
|
book
|
260
docs/README.md
Normal file
260
docs/README.md
Normal file
@@ -0,0 +1,260 @@
|
|||||||
|
# Wazuh containers for Docker
|
||||||
|
|
||||||
|
[](https://wazuh.com/community/join-us-on-slack/)
|
||||||
|
[](https://groups.google.com/forum/#!forum/wazuh)
|
||||||
|
[](https://documentation.wazuh.com)
|
||||||
|
[](https://wazuh.com)
|
||||||
|
|
||||||
|
In this repository you will find the containers to run:
|
||||||
|
|
||||||
|
* Wazuh manager: it runs the Wazuh manager, Wazuh API and Filebeat OSS
|
||||||
|
* Wazuh dashboard: provides a web user interface to browse through alert data and allows you to visualize the agents configuration and status.
|
||||||
|
* Wazuh indexer: Wazuh indexer container (working as a single-node cluster or as a multi-node cluster). **Be aware to increase the `vm.max_map_count` setting, as it's detailed in the [Wazuh documentation](https://documentation.wazuh.com/current/docker/wazuh-container.html#increase-max-map-count-on-your-host-linux).**
|
||||||
|
|
||||||
|
The folder `build-docker-images` contains a README explaining how to build the Wazuh images and the necessary assets.
|
||||||
|
The folder `indexer-certs-creator` contains a README explaining how to create the certificates creator tool and the necessary assets.
|
||||||
|
The folder `single-node` contains a README explaining how to run a Wazuh environment with one Wazuh manager, one Wazuh indexer, and one Wazuh dashboard.
|
||||||
|
The folder `multi-node` contains a README explaining how to run a Wazuh environment with two Wazuh managers, three Wazuh indexers, and one Wazuh dashboard.
|
||||||
|
|
||||||
|
## Documentation
|
||||||
|
|
||||||
|
* [Wazuh full documentation](http://documentation.wazuh.com)
|
||||||
|
* [Wazuh documentation for Docker](https://documentation.wazuh.com/current/docker/index.html)
|
||||||
|
* [Docker Hub](https://hub.docker.com/u/wazuh)
|
||||||
|
|
||||||
|
|
||||||
|
### Setup SSL certificate
|
||||||
|
|
||||||
|
Before starting the environment it is required to provide an SSL certificate (or just generate one self-signed).
|
||||||
|
|
||||||
|
Documentation on how to provide these two can be found at [Wazuh Docker Documentation](https://documentation.wazuh.com/current/docker/wazuh-container.html#production-deployment).
|
||||||
|
|
||||||
|
|
||||||
|
## Environment Variables
|
||||||
|
|
||||||
|
Default values are included when available.
|
||||||
|
|
||||||
|
### Wazuh
|
||||||
|
```
|
||||||
|
API_USERNAME="wazuh-wui" # Wazuh API username
|
||||||
|
API_PASSWORD="MyS3cr37P450r.*-" # Wazuh API password - Must comply with requirements
|
||||||
|
# (8+ length, uppercase, lowercase, special chars)
|
||||||
|
|
||||||
|
INDEXER_URL=https://wazuh.indexer:9200 # Wazuh indexer URL
|
||||||
|
INDEXER_USERNAME=admin # Wazuh indexer Username
|
||||||
|
INDEXER_PASSWORD=SecretPassword # Wazuh indexer Password
|
||||||
|
FILEBEAT_SSL_VERIFICATION_MODE=full # Filebeat SSL Verification mode (full or none)
|
||||||
|
SSL_CERTIFICATE_AUTHORITIES="" # Path of Filebeat SSL CA
|
||||||
|
SSL_CERTIFICATE="" # Path of Filebeat SSL Certificate
|
||||||
|
SSL_KEY="" # Path of Filebeat SSL Key
|
||||||
|
```
|
||||||
|
|
||||||
|
### Dashboard
|
||||||
|
```
|
||||||
|
PATTERN="wazuh-alerts-*" # Default index pattern to use
|
||||||
|
|
||||||
|
CHECKS_PATTERN=true # Defines which checks must be considered by the healthcheck
|
||||||
|
CHECKS_TEMPLATE=true # step once the Wazuh app starts. Values must be true or false
|
||||||
|
CHECKS_API=true
|
||||||
|
CHECKS_SETUP=true
|
||||||
|
|
||||||
|
APP_TIMEOUT=20000 # Defines maximum timeout to be used on the Wazuh app requests
|
||||||
|
|
||||||
|
API_SELECTOR=true Defines if the user is allowed to change the selected API directly from the Wazuh app top menu
|
||||||
|
IP_SELECTOR=true # Defines if the user is allowed to change the selected index pattern directly from the Wazuh app top menu
|
||||||
|
IP_IGNORE="[]" # List of index patterns to be ignored
|
||||||
|
|
||||||
|
DASHBOARD_USERNAME=kibanaserver # Custom user saved in the dashboard keystore
|
||||||
|
DASHBOARD_PASSWORD=kibanaserver # Custom password saved in the dashboard keystore
|
||||||
|
WAZUH_MONITORING_ENABLED=true # Custom settings to enable/disable wazuh-monitoring indices
|
||||||
|
WAZUH_MONITORING_FREQUENCY=900 # Custom setting to set the frequency for wazuh-monitoring indices cron task
|
||||||
|
WAZUH_MONITORING_SHARDS=2 # Configure wazuh-monitoring-* indices shards and replicas
|
||||||
|
WAZUH_MONITORING_REPLICAS=0 ##
|
||||||
|
```
|
||||||
|
|
||||||
|
## Directory structure
|
||||||
|
|
||||||
|
├── build-docker-images
|
||||||
|
│ ├── build-images.sh
|
||||||
|
│ ├── build-images.yml
|
||||||
|
│ ├── README.md
|
||||||
|
│ ├── wazuh-agent
|
||||||
|
│ │ ├── config
|
||||||
|
│ │ │ ├── check_repository.sh
|
||||||
|
│ │ │ └── etc
|
||||||
|
│ │ │ ├── cont-init.d
|
||||||
|
│ │ │ │ ├── 0-wazuh-init
|
||||||
|
│ │ │ │ └── 1-agent
|
||||||
|
│ │ │ └── services.d
|
||||||
|
│ │ │ └── ossec-logs
|
||||||
|
│ │ │ └── run
|
||||||
|
│ │ └── Dockerfile
|
||||||
|
│ ├── wazuh-dashboard
|
||||||
|
│ │ ├── config
|
||||||
|
│ │ │ ├── check_repository.sh
|
||||||
|
│ │ │ ├── config.sh
|
||||||
|
│ │ │ ├── config.yml
|
||||||
|
│ │ │ ├── entrypoint.sh
|
||||||
|
│ │ │ ├── wazuh_app_config.sh
|
||||||
|
│ │ │ └── wazuh.yml
|
||||||
|
│ │ └── Dockerfile
|
||||||
|
│ ├── wazuh-indexer
|
||||||
|
│ │ ├── config
|
||||||
|
│ │ │ ├── action_groups.yml
|
||||||
|
│ │ │ ├── check_repository.sh
|
||||||
|
│ │ │ ├── config.sh
|
||||||
|
│ │ │ ├── config.yml
|
||||||
|
│ │ │ ├── entrypoint.sh
|
||||||
|
│ │ │ ├── internal_users.yml
|
||||||
|
│ │ │ ├── opensearch.yml
|
||||||
|
│ │ │ ├── roles_mapping.yml
|
||||||
|
│ │ │ ├── roles.yml
|
||||||
|
│ │ │ └── securityadmin.sh
|
||||||
|
│ │ └── Dockerfile
|
||||||
|
│ └── wazuh-manager
|
||||||
|
│ ├── config
|
||||||
|
│ │ ├── check_repository.sh
|
||||||
|
│ │ ├── create_user.py
|
||||||
|
│ │ ├── etc
|
||||||
|
│ │ │ ├── cont-init.d
|
||||||
|
│ │ │ │ ├── 0-wazuh-init
|
||||||
|
│ │ │ │ ├── 1-config-filebeat
|
||||||
|
│ │ │ │ └── 2-manager
|
||||||
|
│ │ │ └── services.d
|
||||||
|
│ │ │ ├── filebeat
|
||||||
|
│ │ │ │ ├── finish
|
||||||
|
│ │ │ │ └── run
|
||||||
|
│ │ │ └── ossec-logs
|
||||||
|
│ │ │ └── run
|
||||||
|
│ │ ├── filebeat_module.sh
|
||||||
|
│ │ ├── filebeat.yml
|
||||||
|
│ │ ├── permanent_data.env
|
||||||
|
│ │ └── permanent_data.sh
|
||||||
|
│ └── Dockerfile
|
||||||
|
├── CHANGELOG.md
|
||||||
|
├── docs
|
||||||
|
│ ├── book.toml
|
||||||
|
│ ├── build.sh
|
||||||
|
│ ├── dev
|
||||||
|
│ │ ├── build-image.md
|
||||||
|
│ │ ├── README.md
|
||||||
|
│ │ ├── run-tests.md
|
||||||
|
│ │ └── setup.md
|
||||||
|
│ ├── README.md
|
||||||
|
│ ├── ref
|
||||||
|
│ │ ├── backup-restore.md
|
||||||
|
│ │ ├── configuration
|
||||||
|
│ │ │ ├── configuration-files.md
|
||||||
|
│ │ │ ├── environment-variables.md
|
||||||
|
│ │ │ └── README.md
|
||||||
|
│ │ ├── getting-started
|
||||||
|
│ │ │ ├── installation.md
|
||||||
|
│ │ │ ├── README.md
|
||||||
|
│ │ │ └── requirements.md
|
||||||
|
│ │ ├── glossary.md
|
||||||
|
│ │ ├── Introduction
|
||||||
|
│ │ │ ├── compatibility.md
|
||||||
|
│ │ │ ├── description.md
|
||||||
|
│ │ │ └── README.md
|
||||||
|
│ │ ├── performance.md
|
||||||
|
│ │ ├── README.md
|
||||||
|
│ │ ├── security.md
|
||||||
|
│ │ ├── uninstall.md
|
||||||
|
│ │ └── upgrade.md
|
||||||
|
│ ├── server.sh
|
||||||
|
│ └── SUMMARY.md
|
||||||
|
├── indexer-certs-creator
|
||||||
|
│ ├── config
|
||||||
|
│ │ └── entrypoint.sh
|
||||||
|
│ ├── Dockerfile
|
||||||
|
│ └── README.md
|
||||||
|
├── LICENSE
|
||||||
|
├── multi-node
|
||||||
|
│ ├── config
|
||||||
|
│ │ ├── certs.yml
|
||||||
|
│ │ ├── nginx
|
||||||
|
│ │ │ └── nginx.conf
|
||||||
|
│ │ ├── wazuh_cluster
|
||||||
|
│ │ │ ├── wazuh_manager.conf
|
||||||
|
│ │ │ └── wazuh_worker.conf
|
||||||
|
│ │ ├── wazuh_dashboard
|
||||||
|
│ │ │ ├── opensearch_dashboards.yml
|
||||||
|
│ │ │ └── wazuh.yml
|
||||||
|
│ │ └── wazuh_indexer
|
||||||
|
│ │ ├── internal_users.yml
|
||||||
|
│ │ ├── wazuh1.indexer.yml
|
||||||
|
│ │ ├── wazuh2.indexer.yml
|
||||||
|
│ │ └── wazuh3.indexer.yml
|
||||||
|
│ ├── docker-compose.yml
|
||||||
|
│ ├── generate-indexer-certs.yml
|
||||||
|
│ ├── Migration-to-Wazuh-4.4.md
|
||||||
|
│ ├── README.md
|
||||||
|
│ └── volume-migrator.sh
|
||||||
|
├── README.md
|
||||||
|
├── SECURITY.md
|
||||||
|
├── single-node
|
||||||
|
│ ├── config
|
||||||
|
│ │ ├── certs.yml
|
||||||
|
│ │ ├── wazuh_cluster
|
||||||
|
│ │ │ └── wazuh_manager.conf
|
||||||
|
│ │ ├── wazuh_dashboard
|
||||||
|
│ │ │ ├── opensearch_dashboards.yml
|
||||||
|
│ │ │ └── wazuh.yml
|
||||||
|
│ │ ├── wazuh_indexer
|
||||||
|
│ │ │ ├── internal_users.yml
|
||||||
|
│ │ │ └── wazuh.indexer.yml
|
||||||
|
│ │ └── wazuh_indexer_ssl_certs [error opening dir]
|
||||||
|
│ ├── docker-compose.yml
|
||||||
|
│ ├── generate-indexer-certs.yml
|
||||||
|
│ └── README.md
|
||||||
|
├── VERSION.json
|
||||||
|
└── wazuh-agent
|
||||||
|
├── config
|
||||||
|
│ └── wazuh-agent-conf
|
||||||
|
└── docker-compose.yml
|
||||||
|
|
||||||
|
## Branches
|
||||||
|
|
||||||
|
* `main` branch contains the latest code, be aware of possible bugs on this branch.
|
||||||
|
|
||||||
|
## Compatibility Matrix
|
||||||
|
|
||||||
|
| Wazuh version | ODFE | XPACK |
|
||||||
|
|---------------|---------|--------|
|
||||||
|
| v4.3.0+ | | |
|
||||||
|
| v4.2.7 | 1.13.2 | 7.11.2 |
|
||||||
|
| v4.2.6 | 1.13.2 | 7.11.2 |
|
||||||
|
| v4.2.5 | 1.13.2 | 7.11.2 |
|
||||||
|
| v4.2.4 | 1.13.2 | 7.11.2 |
|
||||||
|
| v4.2.3 | 1.13.2 | 7.11.2 |
|
||||||
|
| v4.2.2 | 1.13.2 | 7.11.2 |
|
||||||
|
| v4.2.1 | 1.13.2 | 7.11.2 |
|
||||||
|
| v4.2.0 | 1.13.2 | 7.10.2 |
|
||||||
|
| v4.1.5 | 1.13.2 | 7.10.2 |
|
||||||
|
| v4.1.4 | 1.12.0 | 7.10.2 |
|
||||||
|
| v4.1.3 | 1.12.0 | 7.10.2 |
|
||||||
|
| v4.1.2 | 1.12.0 | 7.10.2 |
|
||||||
|
| v4.1.1 | 1.12.0 | 7.10.2 |
|
||||||
|
| v4.1.0 | 1.12.0 | 7.10.2 |
|
||||||
|
| v4.0.4 | 1.11.0 | |
|
||||||
|
| v4.0.3 | 1.11.0 | |
|
||||||
|
| v4.0.2 | 1.11.0 | |
|
||||||
|
| v4.0.1 | 1.11.0 | |
|
||||||
|
| v4.0.0 | 1.10.1 | |
|
||||||
|
|
||||||
|
## Credits and Thank you
|
||||||
|
|
||||||
|
These Docker containers are based on:
|
||||||
|
|
||||||
|
* "deviantony" dockerfiles which can be found at [https://github.com/deviantony/docker-elk](https://github.com/deviantony/docker-elk)
|
||||||
|
* "xetus-oss" dockerfiles, which can be found at [https://github.com/xetus-oss/docker-ossec-server](https://github.com/xetus-oss/docker-ossec-server)
|
||||||
|
|
||||||
|
We thank them and everyone else who has contributed to this project.
|
||||||
|
|
||||||
|
## License and copyright
|
||||||
|
|
||||||
|
Wazuh Docker Copyright (C) 2017, Wazuh Inc. (License GPLv2)
|
||||||
|
|
||||||
|
## Web references
|
||||||
|
|
||||||
|
[Wazuh website](http://wazuh.com)
|
29
docs/SUMMARY.md
Normal file
29
docs/SUMMARY.md
Normal file
@@ -0,0 +1,29 @@
|
|||||||
|
# Summary
|
||||||
|
|
||||||
|
- [Introduction](README.md)
|
||||||
|
|
||||||
|
# Development Guide
|
||||||
|
|
||||||
|
- [Introduction](dev/README.md)
|
||||||
|
- [Setup Environment](dev/setup.md)
|
||||||
|
- [Build Image](dev/build-image.md)
|
||||||
|
- [Run Tests](dev/run-tests.md)
|
||||||
|
|
||||||
|
# Reference Manual
|
||||||
|
|
||||||
|
- [Reference](ref/README.md)
|
||||||
|
- [Introduction](ref/Introduction/README.md)
|
||||||
|
- [Description](ref/Introduction/description.md)
|
||||||
|
- [Compatibility](ref/Introduction/compatibility.md)
|
||||||
|
- [Getting Started](ref/getting-started/README.md)
|
||||||
|
- [Requirements](ref/getting-started/requirements.md)
|
||||||
|
- [Installation](ref/getting-started/installation.md)
|
||||||
|
- [Configuration](ref/configuration/README.md)
|
||||||
|
- [CEnvironment Variabless](ref/configuration/environment-variables.md)
|
||||||
|
- [Configuration files](ref/configuration/configuration-files.md)
|
||||||
|
- [Upgrade](ref/upgrade.md)
|
||||||
|
- [Uninstall](ref/uninstall.md)
|
||||||
|
- [Back Up and Restore](ref/backup-restore.md)
|
||||||
|
- [Security](ref/security.md)
|
||||||
|
- [Performance](ref/performance.md)
|
||||||
|
- [Glossary](ref/glossary.md)
|
7
docs/book.toml
Normal file
7
docs/book.toml
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
[book]
|
||||||
|
title = "Wazuh Docker Documentation"
|
||||||
|
description = "Technical documentation for Wazuh Docker deployment."
|
||||||
|
authors = ["Victor Erenu"]
|
||||||
|
multilingual = false
|
||||||
|
src = "."
|
||||||
|
language = "en"
|
3
docs/build.sh
Executable file
3
docs/build.sh
Executable file
@@ -0,0 +1,3 @@
|
|||||||
|
#! /bin/sh
|
||||||
|
|
||||||
|
mdbook build
|
2
docs/dev/README.md
Normal file
2
docs/dev/README.md
Normal file
@@ -0,0 +1,2 @@
|
|||||||
|
# Development documentation
|
||||||
|
|
1
docs/dev/build-image.md
Normal file
1
docs/dev/build-image.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Build Image
|
1
docs/dev/run-tests.md
Normal file
1
docs/dev/run-tests.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# How to run the tests.
|
3
docs/dev/setup.md
Normal file
3
docs/dev/setup.md
Normal file
@@ -0,0 +1,3 @@
|
|||||||
|
# Set up the toolchain.
|
||||||
|
|
||||||
|
# Set up editor/debugger.
|
1
docs/ref/Introduction/README.md
Normal file
1
docs/ref/Introduction/README.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Introduction.
|
1
docs/ref/Introduction/compatibility.md
Normal file
1
docs/ref/Introduction/compatibility.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Compatibility.
|
1
docs/ref/Introduction/description.md
Normal file
1
docs/ref/Introduction/description.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Description.
|
7
docs/ref/README.md
Normal file
7
docs/ref/README.md
Normal file
@@ -0,0 +1,7 @@
|
|||||||
|
# Introduction
|
||||||
|
|
||||||
|
## Description
|
||||||
|
|
||||||
|
## Architecture
|
||||||
|
|
||||||
|
## Compatibility
|
1
docs/ref/backup-restore.md
Normal file
1
docs/ref/backup-restore.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Back Up and Restore
|
1
docs/ref/configuration/README.md
Normal file
1
docs/ref/configuration/README.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Configuration
|
1
docs/ref/configuration/configuration-files.md
Normal file
1
docs/ref/configuration/configuration-files.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Configuration files
|
1
docs/ref/configuration/environment-variables.md
Normal file
1
docs/ref/configuration/environment-variables.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Environment Variables
|
1
docs/ref/getting-started/README.md
Normal file
1
docs/ref/getting-started/README.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Getting Started
|
1
docs/ref/getting-started/installation.md
Normal file
1
docs/ref/getting-started/installation.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Installation
|
1
docs/ref/getting-started/requirements.md
Normal file
1
docs/ref/getting-started/requirements.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Requirements
|
1
docs/ref/glossary.md
Normal file
1
docs/ref/glossary.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Glossary
|
1
docs/ref/performance.md
Normal file
1
docs/ref/performance.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Performance
|
1
docs/ref/security.md
Normal file
1
docs/ref/security.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Security
|
1
docs/ref/uninstall.md
Normal file
1
docs/ref/uninstall.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Uninstall
|
1
docs/ref/upgrade.md
Normal file
1
docs/ref/upgrade.md
Normal file
@@ -0,0 +1 @@
|
|||||||
|
# Upgrade
|
3
docs/server.sh
Executable file
3
docs/server.sh
Executable file
@@ -0,0 +1,3 @@
|
|||||||
|
#! /bin/sh
|
||||||
|
|
||||||
|
mdbook serve
|
Reference in New Issue
Block a user