Change services names and build certs generator

2022-02-07 17:48:26 -03:00
parent efed32f997
commit d5bda0896a
38 changed files with 1396 additions and 1338 deletions
@@ -0,0 +1,48 @@
+network.host: wazuh3-indexer
+node.name: wazuh3-indexer
+cluster.initial_master_nodes:
+        - wazuh1-indexer
+        - wazuh2-indexer
+        - wazuh3-indexer
+cluster.name: "wazuh-cluster"
+discovery.seed_hosts:
+        - wazuh1-indexer
+        - wazuh2-indexer
+        - wazuh3-indexer
+http.port: 9700-9799
+transport.tcp.port: 9800-9899
+node.max_local_storage_nodes: "3"
+path.data: /var/lib/wazuh-indexer
+path.logs: /var/log/wazuh-indexer
+###############################################################################
+#                                                                             #
+#         WARNING: Insecure demo certificates set up in this file.            #
+#                  Please change on production cluster!                       #
+#                                                                             #
+###############################################################################
+plugins.security.ssl.http.pemcert_filepath: /etc/wazuh-indexer/certs/wazuh3-indexer.pem
+plugins.security.ssl.http.pemkey_filepath: /etc/wazuh-indexer/certs/wazuh3-indexer.key
+plugins.security.ssl.http.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
+plugins.security.ssl.transport.pemcert_filepath: /etc/wazuh-indexer/certs/wazuh3-indexer.pem
+plugins.security.ssl.transport.pemkey_filepath: /etc/wazuh-indexer/certs/wazuh3-indexer.key
+plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/wazuh-indexer/certs/root-ca.pem
+plugins.security.ssl.http.enabled: true
+plugins.security.ssl.transport.enforce_hostname_verification: false
+plugins.security.ssl.transport.resolve_hostname: false
+plugins.security.audit.type: internal_opensearch
+plugins.security.authcz.admin_dn:
+- "CN=admin,OU=Docu,O=Wazuh,L=California,C=US"
+plugins.security.check_snapshot_restore_write_privileges: true
+plugins.security.enable_snapshot_restore_privilege: true
+plugins.security.nodes_dn:
+- "CN=wazuh1-indexer,OU=Docu,O=Wazuh,L=California,C=US"
+- "CN=wazuh2-indexer,OU=Docu,O=Wazuh,L=California,C=US"
+- "CN=wazuh3-indexer,OU=Docu,O=Wazuh,L=California,C=US"
+- "CN=filebeat,OU=Docu,O=Wazuh,L=California,C=US"
+plugins.security.restapi.roles_enabled:
+- "all_access"
+- "security_rest_api_access"
+plugins.security.allow_default_init_securityindex: true
+cluster.routing.allocation.disk.threshold_enabled: false
+opendistro_security.audit.config.disabled_rest_categories: NONE
+opendistro_security.audit.config.disabled_transport_categories: NONE