diff --git a/docker-compose.yml b/docker-compose.yml index fe0502e4..ce93581b 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -53,8 +53,8 @@ services: image: wazuh/wazuh-kibana hostname: kibana restart: always - ports: - - "5601:5601" +# ports: +# - "5601:5601" networks: - docker_elk depends_on: @@ -65,6 +65,22 @@ services: entrypoint: sh wait-for-it.sh elasticsearch # environment: # - "WAZUH_KIBANA_PLUGIN_URL=http://your.repo/wazuhapp-2.1.0-5.5.1.zip" + nginx: + image: wazuh/wazuh-nginx + hostname: nginx + restart: always + entrypoint: sh run.sh + environment: + - NGINX_PORT=443 + ports: + - "80:80" + - "443:443" + networks: + - docker_elk + depends_on: + - kibana + links: + - kibana networks: docker_elk: diff --git a/kibana/config/wait-for-it.sh b/kibana/config/wait-for-it.sh index af6942a3..88cb344f 100644 --- a/kibana/config/wait-for-it.sh +++ b/kibana/config/wait-for-it.sh @@ -26,7 +26,7 @@ sleep 30 echo "Configuring defaultIndex to wazuh-alerts-*" -curl -s -XPUT http://$host:9200/.kibana/config/5.5.2 -d '{"defaultIndex" : "wazuh-alerts-*"}' > /dev/null +curl -s -XPUT http://$host:9200/.kibana/config/5.5.2 -H 'Content-Type: application/json' -d '{"defaultIndex" : "wazuh-alerts-*"}' > /dev/null sleep 30 diff --git a/nginx/Dockerfile b/nginx/Dockerfile new file mode 100644 index 00000000..4315179d --- /dev/null +++ b/nginx/Dockerfile @@ -0,0 +1,5 @@ +FROM nginx:latest + +RUN apt-get update && apt-get install -y openssl apache2-utils + +COPY ./config/run.sh /run.sh diff --git a/nginx/config/run.sh b/nginx/config/run.sh new file mode 100644 index 00000000..758bdd81 --- /dev/null +++ b/nginx/config/run.sh @@ -0,0 +1,43 @@ +#!/bin/bash + +set -e + +if [ ! -d /etc/pki/tls/certs ]; then + echo "Generating SSL certificates" + mkdir -p /etc/pki/tls/certs /etc/pki/tls/private + openssl req -x509 -batch -nodes -days 365 -newkey rsa:2048 -keyout /etc/pki/tls/private/kibana-access.key -out /etc/pki/tls/certs/kibana-access.pem >/dev/null +else + echo "SSL certificates already present" +fi + +if [ ! -f /etc/nginx/conf.d/kibana.htpasswd ]; then + echo "Setting Nginx credentials" + echo bar|htpasswd -i -c /etc/nginx/conf.d/kibana.htpasswd foo >/dev/null +else + echo "Kibana credentials already configured" +fi + +echo "Configuring NGINX" +cat > /etc/nginx/conf.d/default.conf <