Security for Elastic Stack (#196)

wazuh/config/01-wazuh.sh

@@ -164,16 +164,37 @@ docker_custom_args() {
 
 change_api_user_credentials() {
   pushd /var/ossec/api/configuration/auth/
+  if [[ "x${SECURITY_CREDENTIALS_FILE}" == "x" ]]; then
+    WAZUH_API_USER=${API_USER}
+    WAZUH_API_PASS=${API_PASS}
+  else
+    input=${SECURITY_CREDENTIALS_FILE}
+    while IFS= read -r line
+    do
+      if [[ $line == *"WAZUH_API_USER"* ]]; then
+        arrIN=(${line//:/ })
+        WAZUH_API_USER=${arrIN[1]}
+      elif [[ $line == *"WAZUH_API_PASS"* ]]; then
+        arrIN=(${line//:/ })
+        WAZUH_API_PASS=${arrIN[1]}
+      fi
+    done < "$input"
+  fi
+
   echo "Change Wazuh API user credentials"
-  change_user="node htpasswd -b -c user $API_USER $API_PASS"
+  change_user="node htpasswd -b -c user $WAZUH_API_USER $WAZUH_API_PASS"
   eval $change_user
   popd
 }
 
+
+
+
 ##############################################################################
 # Customize filebeat output ip
 ##############################################################################
 
+
 custom_filebeat_output_ip() {
   if [ "$FILEBEAT_OUTPUT" != "" ]; then
     sed -i "s/logstash:5000/$FILEBEAT_OUTPUT:5000/" /etc/filebeat/filebeat.yml