diff --git a/xpack-compose.yml b/xpack-compose.yml new file mode 100644 index 00000000..42faafa3 --- /dev/null +++ b/xpack-compose.yml @@ -0,0 +1,85 @@ +# Wazuh App Copyright (C) 2020 Wazuh Inc. (License GPLv2) +version: '3.7' + +services: + wazuh: + build: + context: wazuh-odfe/ + args: + - FILEBEAT_CHANNEL=filebeat + - FILEBEAT_VERSION=7.9.3 + image: wazuh/wazuh:4.0.3_7.9.3_dev + hostname: wazuh-manager + restart: always + ports: + - "1514:1514" + - "1515:1515" + - "514:514/udp" + - "55000:55000" + environment: + - ELASTICSEARCH_URL=http://elasticsearch:9200 + - ELASTIC_USERNAME=admin + - ELASTIC_PASSWORD=admin + - FILEBEAT_SSL_VERIFICATION_MODE=none + volumes: + - ossec_api_configuration:/var/ossec/api/configuration + - ossec_etc:/var/ossec/etc + - ossec_logs:/var/ossec/logs + - ossec_queue:/var/ossec/queue + - ossec_var_multigroups:/var/ossec/var/multigroups + - ossec_integrations:/var/ossec/integrations + - ossec_active_response:/var/ossec/active-response/bin + - ossec_agentless:/var/ossec/agentless + - ossec_wodles:/var/ossec/wodles + - filebeat_etc:/etc/filebeat + - filebeat_var:/var/lib/filebeat + + elasticsearch: + image: docker.elastic.co/elasticsearch/elasticsearch:7.9.3 + hostname: elasticsearch + restart: always + ports: + - "9200:9200" + environment: + - discovery.type=single-node + - cluster.name=wazuh-cluster + - network.host=0.0.0.0 + - "ES_JAVA_OPTS=-Xms512m -Xmx512m" + - bootstrap.memory_lock=true + ulimits: + memlock: + soft: -1 + hard: -1 + nofile: + soft: 65536 + hard: 65536 + + kibana: + build: kibana/ + image: wazuh/wazuh-kibana:4.0.3_7.9.3_dev + hostname: kibana + restart: always + ports: + - 5601:5601 + environment: + - ELASTICSEARCH_USERNAME=admin + - ELASTICSEARCH_PASSWORD=admin + - ELASTICSEARCH_URL=http://elasticsearch:9200 + depends_on: + - elasticsearch + links: + - elasticsearch:elasticsearch + - wazuh:wazuh + +volumes: + ossec_api_configuration: + ossec_etc: + ossec_logs: + ossec_queue: + ossec_var_multigroups: + ossec_integrations: + ossec_active_response: + ossec_agentless: + ossec_wodles: + filebeat_etc: + filebeat_var: