Fix wazuh.yml persistence

wazuh-dashboard/config/entrypoint.sh

@@ -1,10 +1,56 @@
 #!/bin/bash
 # Wazuh Docker Copyright (C) 2021 Wazuh Inc. (License GPLv2)
 
+set -e
+
+##############################################################################
+# Waiting for Wazuh indexer
+##############################################################################
+
+if [ "x${INDEXER_URL}" == "x" ]; then
+  if [[ ${ENABLED_SECURITY} == "false" ]]; then
+    export idx_url="http://wazuh1.indexer:9200"
+  else
+    export idx_url="https://wazuh1.indexer:9200"
+  fi
+else
+  export idx_url="${INDEXER_URL}"
+fi
+
+export auth="--user ${INDEXER_USERNAME}:${INDEXER_PASSWORD} -k"
+
+until curl -XGET $idx_url ${auth}; do
+  >&2 echo "Wazuh indexer is unavailable - sleeping"
+  sleep 5
+done
+
+sleep 2
+
+>&2 echo "Elasticsearch is up."
+
+
+##############################################################################
+# Waiting for wazuh alerts template
+##############################################################################
+
+strlen=0
+
+while [[ $strlen -eq 0 ]]
+do
+  template=$(curl ${auth} $idx_url/_cat/templates/wazuh -s)
+  strlen=${#template}
+  >&2 echo "Wazuh alerts template not loaded - sleeping."
+  sleep 2
+done
+
+sleep 2
+
+>&2 echo "Wazuh alerts template is loaded."
+
 ##############################################################################
 # Start Wazuh dashboard
 ##############################################################################
 
 /wazuh_app_config.sh
 
-runuser wazuh-dashboard --shell="/bin/bash" --command="/usr/share/wazuh-dashboard/bin/opensearch-dashboards -c /etc/wazuh-dashboard/opensearch_dashboard.yml"
+runuser wazuh-dashboard --shell="/bin/bash" --command="/usr/share/wazuh-dashboard/bin/opensearch-dashboards -c /etc/wazuh-dashboard/opensearch_dashboards.yml"

wazuh-dashboard/config/wazuh_app_config.sh

@@ -5,9 +5,14 @@ wazuh_url="${WAZUH_API_URL:-https://wazuh}"
 wazuh_port="${API_PORT:-55000}"
 api_username="${API_USERNAME:-wazuh-wui}"
 api_password="${API_PASSWORD:-wazuh-wui}"
+api_run_as="${RUN_AS:-false}"
 
 dashboard_config_file="/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml"
 
+grep -q 1513629884013 $dashboard_config_file
+_config_exists=$?
+
+if [[ $_config_exists -ne 0 ]]; then
 cat << EOF > $dashboard_config_file
 hosts:
   - 1513629884013:
@@ -15,6 +20,9 @@ hosts:
       port: $wazuh_port
       username: $api_username
       password: $api_password
+      run_as: $api_run_as
 EOF
-
+else
+  echo "Wazuh APP already configured"
+fi