yahoo_1999/fk-wazuh
1
0
Fork 0
forked from wazuh/wazuh-docker
Code Pull Requests Activity

Standarize certificates configuration script

Browse Source
This commit is contained in:
Victor Carlos Erenu
2026-04-01 21:30:52 +07:00
parent 1ac37f1ee8
commit 5745995e5c
9 changed files with 179 additions and 207 deletions
Download Patch File Download Diff File Expand all files Collapse all files
multi-node/certificates-conf.sh
-104
View File
@@ -1,104 +0,0 @@
#!/bin/bash
# Path configuration (adjust according to your folder structure)
CERT_TOOL="./wazuh-certs-tool.sh"
CONFIG_FILE="./config.yml"
OUTPUT_DIR="./wazuh-certificates" # Folder created by the script by default
# Parse arguments
DO_CERT=false
DO_COPY=false
DO_PRIV=false
for arg in "$@"; do
case $arg in
--cert) DO_CERT=true ;;
--copy) DO_COPY=true ;;
--priv) DO_PRIV=true ;;
*)
echo "Unknown option: $arg"
echo "Usage: $0 [--cert] [--copy] [--priv]"
exit 1
;;
esac
done
# If no flags provided, show usage
if ! $DO_CERT && ! $DO_COPY && ! $DO_PRIV; then
echo "Usage: $0 [--cert] [--copy] [--priv]"
echo " --cert Generate certificates using wazuh-certs-tool.sh"
echo " --copy Copy certificates to the corresponding config directories"
echo " --priv Set ownership and permissions on the certificate files"
exit 1
fi
# 1. Generate certificates
if $DO_CERT; then
echo "Generating certificates"
bash $CERT_TOOL -A
fi
# 2. Copy certificates to config directories
if $DO_COPY; then
echo "Setting up directories for certificates"
mkdir -p ./config/wazuh_indexer_1/certs
mkdir -p ./config/wazuh_indexer_2/certs
mkdir -p ./config/wazuh_indexer_3/certs
mkdir -p ./config/wazuh_dashboard/certs
mkdir -p ./config/wazuh_cluster_master/certs
mkdir -p ./config/wazuh_cluster_worker/certs
echo "Copying certificates for Indexer 1"
cp $OUTPUT_DIR/wazuh1.indexer* ./config/wazuh_indexer_1/certs/
cp $OUTPUT_DIR/root-ca* ./config/wazuh_indexer_1/certs/
cp $OUTPUT_DIR/admin* ./config/wazuh_indexer_1/certs/
echo "Copying certificates for Indexer 2"
cp $OUTPUT_DIR/wazuh2.indexer* ./config/wazuh_indexer_2/certs/
cp $OUTPUT_DIR/root-ca* ./config/wazuh_indexer_2/certs/
echo "Copying certificates for Indexer 3"
cp $OUTPUT_DIR/wazuh3.indexer* ./config/wazuh_indexer_3/certs/
cp $OUTPUT_DIR/root-ca* ./config/wazuh_indexer_3/certs/
echo "Copying certificates for Dashboard"
cp $OUTPUT_DIR/wazuh.dashboard* ./config/wazuh_dashboard/certs/
cp $OUTPUT_DIR/root-ca* ./config/wazuh_dashboard/certs/
echo "Copying certificates for Master Manager"
cp $OUTPUT_DIR/wazuh.master* ./config/wazuh_cluster_master/certs/
cp $OUTPUT_DIR/root-ca* ./config/wazuh_cluster_master/certs/
echo "Copying certificates for Worker Manager"
cp $OUTPUT_DIR/wazuh.worker* ./config/wazuh_cluster_worker/certs/
cp $OUTPUT_DIR/root-ca* ./config/wazuh_cluster_worker/certs/
fi
# 3. Set ownership and permissions
if $DO_PRIV; then
echo "Configuring permissions for Indexer 1 (1000:1000)"
chown -R 1000:1000 ./config/wazuh_indexer_1/certs
chmod 400 ./config/wazuh_indexer_1/certs/*
echo "Configuring permissions for Indexer 2 (1000:1000)"
chown -R 1000:1000 ./config/wazuh_indexer_2/certs
chmod 400 ./config/wazuh_indexer_2/certs/*
echo "Configuring permissions for Indexer 3 (1000:1000)"
chown -R 1000:1000 ./config/wazuh_indexer_3/certs
chmod 400 ./config/wazuh_indexer_3/certs/*
echo "Setting permissions for Dashboard (1000:1000)"
chown -R 1000:1000 ./config/wazuh_dashboard/certs
chmod 400 ./config/wazuh_dashboard/certs/*
echo "Configuring permissions for Master Manager (999:999)"
chown -R 999:999 ./config/wazuh_cluster_master/certs
chmod 400 ./config/wazuh_cluster_master/certs/*
echo "Configuring permissions for Worker Manager (999:999)"
chown -R 999:999 ./config/wazuh_cluster_worker/certs
chmod 400 ./config/wazuh_cluster_worker/certs/*
fi
echo "Process completed."
multi-node/docker-compose.yml
+17 -17
View File
@@ -40,9 +40,9 @@ services:
- master-wazuh-logs:/var/wazuh-manager/logs
- master-wazuh-queue:/var/wazuh-manager/queue
- master-wazuh-var-multigroups:/var/wazuh-manager/var/multigroups
- ./config/wazuh_cluster_master/certs/root-ca.pem:/var/wazuh-manager/etc/certs/root-ca.pem
- ./config/wazuh_cluster_master/certs/wazuh.master.pem:/var/wazuh-manager/etc/certs/manager.pem
- ./config/wazuh_cluster_master/certs/wazuh.master-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem
- ./config/wazuh_master/certs/root-ca.pem:/var/wazuh-manager/etc/certs/root-ca.pem
- ./config/wazuh_master/certs/wazuh.master.pem:/var/wazuh-manager/etc/certs/manager.pem
- ./config/wazuh_master/certs/wazuh.master-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem
wazuh.worker:
image: wazuh/wazuh-manager:5.0.0
@@ -81,9 +81,9 @@ services:
- worker-wazuh-logs:/var/wazuh-manager/logs
- worker-wazuh-queue:/var/wazuh-manager/queue
- worker-wazuh-var-multigroups:/var/wazuh-manager/var/multigroups
- ./config/wazuh_cluster_worker/certs/root-ca.pem:/var/wazuh-manager/etc/certs/root-ca.pem
- ./config/wazuh_cluster_worker/certs/wazuh.worker.pem:/var/wazuh-manager/etc/certs/manager.pem
- ./config/wazuh_cluster_worker/certs/wazuh.worker-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem
- ./config/wazuh_worker/certs/root-ca.pem:/var/wazuh-manager/etc/certs/root-ca.pem
- ./config/wazuh_worker/certs/wazuh.worker.pem:/var/wazuh-manager/etc/certs/manager.pem
- ./config/wazuh_worker/certs/wazuh.worker-key.pem:/var/wazuh-manager/etc/certs/manager-key.pem
wazuh1.indexer:
image: wazuh/wazuh-indexer:5.0.0
@@ -117,11 +117,11 @@ services:
start_period: 60s
volumes:
- wazuh-indexer-data-1:/var/lib/wazuh-indexer
- ./config/wazuh_indexer_1/certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
- ./config/wazuh_indexer_1/certs/wazuh1.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/indexer-key.pem
- ./config/wazuh_indexer_1/certs/wazuh1.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem
- ./config/wazuh_indexer_1/certs/admin.pem:/usr/share/wazuh-indexer/config/certs/admin.pem
- ./config/wazuh_indexer_1/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem
- ./config/wazuh1_indexer/certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
- ./config/wazuh1_indexer/certs/wazuh1.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/indexer-key.pem
- ./config/wazuh1_indexer/certs/wazuh1.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem
- ./config/wazuh1_indexer/certs/admin.pem:/usr/share/wazuh-indexer/config/certs/admin.pem
- ./config/wazuh1_indexer/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem
wazuh2.indexer:
image: wazuh/wazuh-indexer:5.0.0
@@ -157,9 +157,9 @@ services:
start_period: 60s
volumes:
- wazuh-indexer-data-2:/var/lib/wazuh-indexer
- ./config/wazuh_indexer_2/certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
- ./config/wazuh_indexer_2/certs/wazuh2.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/indexer-key.pem
- ./config/wazuh_indexer_2/certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem
- ./config/wazuh2_indexer/certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
- ./config/wazuh2_indexer/certs/wazuh2.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/indexer-key.pem
- ./config/wazuh2_indexer/certs/wazuh2.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem
wazuh3.indexer:
image: wazuh/wazuh-indexer:5.0.0
@@ -195,9 +195,9 @@ services:
start_period: 60s
volumes:
- wazuh-indexer-data-3:/var/lib/wazuh-indexer
- ./config/wazuh_indexer_3/certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
- ./config/wazuh_indexer_3/certs/wazuh3.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/indexer-key.pem
- ./config/wazuh_indexer_3/certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem
- ./config/wazuh3_indexer/certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem
- ./config/wazuh3_indexer/certs/wazuh3.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/indexer-key.pem
- ./config/wazuh3_indexer/certs/wazuh3.indexer.pem:/usr/share/wazuh-indexer/config/certs/indexer.pem
wazuh.dashboard:
image: wazuh/wazuh-dashboard:5.0.0