mirror of
https://github.com/wazuh/wazuh-docker.git
synced 2025-10-31 12:03:35 +00:00
55 lines
1.4 KiB
Bash
55 lines
1.4 KiB
Bash
#!/bin/sh
|
|
# Wazuh App Copyright (C) 2018 Wazuh Inc. (License GPLv2)
|
|
|
|
set -e
|
|
|
|
# Generating certificates.
|
|
if [ ! -d /etc/nginx/conf.d/ssl ]; then
|
|
echo "Generating SSL certificates"
|
|
mkdir -p /etc/nginx/conf.d/ssl/certs /etc/nginx/conf.d/ssl/private
|
|
openssl req -x509 -batch -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/conf.d/ssl/private/kibana-access.key -out /etc/nginx/conf.d/ssl/certs/kibana-access.pem >/dev/null
|
|
else
|
|
echo "SSL certificates already present"
|
|
fi
|
|
|
|
# Configuring default credentiales.
|
|
if [ ! -f /etc/nginx/conf.d/kibana.htpasswd ]; then
|
|
echo "Setting Nginx credentials"
|
|
echo bar|htpasswd -i -c /etc/nginx/conf.d/kibana.htpasswd foo >/dev/null
|
|
else
|
|
echo "Kibana credentials already configured"
|
|
fi
|
|
|
|
|
|
if [ "x${NGINX_PORT}" = "x" ]; then
|
|
NGINX_PORT=443
|
|
fi
|
|
|
|
if [ "x${KIBANA_HOST}" = "x" ]; then
|
|
KIBANA_HOST="kibana:5601"
|
|
fi
|
|
|
|
echo "Configuring NGINX"
|
|
cat > /etc/nginx/conf.d/default.conf <<EOF
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
return 301 https://\$host:${NGINX_PORT}\$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen ${NGINX_PORT} default_server;
|
|
listen [::]:${NGINX_PORT};
|
|
ssl on;
|
|
ssl_certificate /etc/nginx/conf.d/ssl/certs/kibana-access.pem;
|
|
ssl_certificate_key /etc/nginx/conf.d/ssl/private/kibana-access.key;
|
|
location / {
|
|
auth_basic "Restricted";
|
|
auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd;
|
|
proxy_pass http://${KIBANA_HOST}/;
|
|
}
|
|
}
|
|
EOF
|
|
|
|
nginx -g 'daemon off;'
|