forked from wazuh/wazuh-docker
Miguelangel Freitas
160bf4bbe9
* Setting Nginx with SSL and basic auth, closes #20 * Set Content-Type on Kibana API config.
50 lines
1.4 KiB
Bash
50 lines
1.4 KiB
Bash
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
if [ ! -d /etc/pki/tls/certs ]; then
|
|
echo "Generating SSL certificates"
|
|
if [ ! -x /usr/bin/openssl ]; then
|
|
apt-get update >/dev/null
|
|
apt-get -y install openssl >/dev/null
|
|
fi
|
|
mkdir -p /etc/pki/tls/certs /etc/pki/tls/private
|
|
openssl req -x509 -batch -nodes -days 365 -newkey rsa:2048 -keyout /etc/pki/tls/private/kibana-access.key -out /etc/pki/tls/certs/kibana-access.pem >/dev/null
|
|
fi
|
|
|
|
if [ ! -f /etc/nginx/conf.d/kibana.htpasswd ]; then
|
|
echo "Setting kibana credentials"
|
|
if [ ! -x /usr/bin/htpasswd ]; then
|
|
apt-get update >/dev/null
|
|
apt-get -y install apache2-utils >/dev/null
|
|
fi
|
|
echo bar|htpasswd -i -c /etc/nginx/conf.d/kibana.htpasswd foo >/dev/null
|
|
else
|
|
echo "Kibana credentials already configured"
|
|
fi
|
|
|
|
echo "Configuring NGINX"
|
|
cat > /etc/nginx/conf.d/default.conf <<EOF
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
return 301 https://\$host:$NGINX_PORT\$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen $NGINX_PORT default_server;
|
|
listen [::]:$NGINX_PORT;
|
|
ssl on;
|
|
ssl_certificate /etc/pki/tls/certs/kibana-access.pem;
|
|
ssl_certificate_key /etc/pki/tls/private/kibana-access.key;
|
|
location / {
|
|
auth_basic "Restricted";
|
|
auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd;
|
|
proxy_pass http://kibana:5601/;
|
|
}
|
|
}
|
|
EOF
|
|
|
|
echo "Starting Nginx"
|
|
nginx -g 'daemon off; error_log /dev/stdout info;'
|