forked from wazuh/wazuh-docker
Removing legacy nginx config
This commit is contained in:
@@ -26,9 +26,6 @@ In addition, a docker-compose file is provided to launch the containers mentione
|
|||||||
|
|
||||||
Before starting the environment it is required to provide an SSL certificate (or just generate one self-signed) and setup the basic auth.
|
Before starting the environment it is required to provide an SSL certificate (or just generate one self-signed) and setup the basic auth.
|
||||||
|
|
||||||
Documentation on how to provide these two can be found at [nginx_conf/README.md](nginx_conf/README.md).
|
|
||||||
|
|
||||||
|
|
||||||
## Directory structure
|
## Directory structure
|
||||||
|
|
||||||
wazuh-docker
|
wazuh-docker
|
||||||
@@ -50,11 +47,6 @@ Documentation on how to provide these two can be found at [nginx_conf/README.md]
|
|||||||
│ │ └── xpack_config.sh
|
│ │ └── xpack_config.sh
|
||||||
│ └── Dockerfile
|
│ └── Dockerfile
|
||||||
├── LICENSE
|
├── LICENSE
|
||||||
├── nginx_conf
|
|
||||||
│ ├── kibana-web.conf
|
|
||||||
│ ├── README.md
|
|
||||||
│ └── ssl
|
|
||||||
│ └── generate-self-signed-cert.sh
|
|
||||||
├── README.md
|
├── README.md
|
||||||
├── VERSION
|
├── VERSION
|
||||||
└── wazuh
|
└── wazuh
|
||||||
|
|||||||
@@ -1,34 +0,0 @@
|
|||||||
|
|
||||||
### Enable SSL Traffic
|
|
||||||
|
|
||||||
Our Nginx config has SSL enabled by default, but it does require you to provide your certificate first, copy here your certificate files as `kibana-access.pem` and `kibana-access.key`.
|
|
||||||
|
|
||||||
The final tree should be like this:
|
|
||||||
|
|
||||||
```
|
|
||||||
nginx_conf/
|
|
||||||
├── kibana.htpasswd
|
|
||||||
├── kibana-web.conf
|
|
||||||
└── ssl
|
|
||||||
├── kibana-access.key
|
|
||||||
└── kibana-access.pem
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### Using a Self Signed Certificate
|
|
||||||
|
|
||||||
In case you want to use a self-signed certificate we provided a script to generate one.
|
|
||||||
|
|
||||||
Execute `bash generate-self-signed-cert.sh` inside the `ssl` directory and it will be generated. You must install `openssl` first.
|
|
||||||
|
|
||||||
|
|
||||||
### Setup Basic Authentication
|
|
||||||
|
|
||||||
The nginx configuration expects the file `kibana.htpasswd`.
|
|
||||||
|
|
||||||
This file can be generated with the `htpasswd` command.
|
|
||||||
|
|
||||||
```bash
|
|
||||||
htpasswd -c kibana.htpasswd username
|
|
||||||
```
|
|
||||||
@@ -1,20 +0,0 @@
|
|||||||
server {
|
|
||||||
listen 80;
|
|
||||||
listen [::]:80;
|
|
||||||
return 301 https://$host:443$request_uri;
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 default_server ssl http2;
|
|
||||||
listen [::]:443 ssl http2;
|
|
||||||
ssl_certificate /etc/nginx/conf.d/ssl/kibana-access.pem;
|
|
||||||
ssl_certificate_key /etc/nginx/conf.d/ssl/kibana-access.key;
|
|
||||||
location / {
|
|
||||||
# auth_basic "Restricted Access";
|
|
||||||
# auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd;
|
|
||||||
proxy_pass http://kibana:5601/;
|
|
||||||
proxy_buffer_size 128k;
|
|
||||||
proxy_buffers 4 256k;
|
|
||||||
proxy_busy_buffers_size 256k;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,12 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"
|
|
||||||
cd $DIR
|
|
||||||
|
|
||||||
if [ -s kibana-access.key ]
|
|
||||||
then
|
|
||||||
echo "Aborting. Certificate already exists"
|
|
||||||
exit
|
|
||||||
else
|
|
||||||
openssl req -x509 -batch -nodes -days 365 -newkey rsa:2048 -keyout kibana-access.key -out kibana-access.pem
|
|
||||||
fi
|
|
||||||
Reference in New Issue
Block a user